Controller
IT TARMAN, računalniške storitve, d. o. o., Planina pod Golico 52, 4270 Jesenice. Contact: [email protected].
What we collect
- Email address and name (account and invoicing)
- Content you create (ideas, stories, images)
- Purchase records
- Technical logs. IP addresses are stored hashed only and deleted after 30 days, used solely for abuse prevention and never as a quota key.
Why, and on what basis
- Performance of a contract: running the service, issuing invoices
- Legitimate interest: abuse prevention and security
- Consent: email reminders about new episodes (withdraw any time)
Categories of processors
- Payment service provider — card payment processing
- AI model providers — story and image generation
- Invoicing system
- Hosting and data storage provider
We have Article 28 GDPR data processing agreements with all of them. A named
list of sub-processors is available on request at [email protected].
Some model providers process data outside the EU. Those transfers rely on the
European Commission's Standard Contractual Clauses.
Retention
- Character sheets and story memory: for as long as the series exists, so it stays continuable
- Page images: according to your plan
- PDFs: 30 days, regenerated on demand
- Hashed IPs: 30 days
Your rights
Access, rectification, erasure, restriction, portability and objection. Data export and account deletion are self-service in account settings. You may complain to the Slovenian Information Commissioner.
Children
Accounts are for adults. We do not build child profiles and image uploads are not permitted. If a child's name appears in a story a parent wrote, it is part of that content and is deleted with the series.
Version: 2026-08-08