Privacy at ForgeStory

What we process

We store your email address, a password hash, account and subscription records, and authentication sessions. To create an explanation, we process the text, links, settings or photo you submit. Imported text and photo transcriptions can be reviewed before creation. Avoid submitting passwords, private records or personal information about children or other people.

Saved stories can include source text, illustrated pages, captions, narration and generation settings. Generation checkpoints retain enough information to resume interrupted work. Owners of the service can inspect saved content and operational records to provide support and investigate errors or abuse; this is access controlled and content inspections are logged.

Private drafts and deliberate sharing

Stories are private by default. Creating a sharing link allows anyone holding that link to view the rendered story and narration. The public response excludes original source text and source links. You can disable sharing or replace the link. A revoked link stops future access through the service, but cannot retrieve a copy someone already downloaded or cached.

Services that help deliver ForgeStory

Cloudflare hosts the application, account database and stored media. Google Gemini provides structured story planning. OpenAI provides image generation and speech. DeepSeek provides Story Agent proposals, narration scripts, photo reading and remix understanding when configured; OpenAI can provide those text and vision features when DeepSeek is not configured. Google Gemini is also available for selected image comparisons and legacy narration workflows. The selected feature determines which provider receives the material needed for that request. Search and import features may use Perplexity, Firecrawl and a transcript service. Do not include sensitive information in prompts or imported links.

Stripe handles checkout and subscription payments; ForgeStory stores customer and subscription identifiers rather than complete card details. Resend delivers account emails. Feedback submitted through the support form may be handled by Formspree. Each provider operates under its own terms and privacy practices.

Product measurement and optional analytics

Essential operational records cover sign-ins, generation stages, usage limits, errors and saves. Some older events were reported by the browser and are not independent confirmation of a completed output. New durable stage records identify the signed-in account and server completion status.

Google Analytics loads only after you allow optional analytics. We do not intentionally send original prompts, email addresses, story titles, source URLs or sharing tokens to it. You can change your choice using “Privacy choices” at the bottom of the site. Declining optional analytics does not disable essential account, security or generation records.

Storage and retention

Cloud-saved stories remain in your library until deleted. Device-only saves reside in your browser and may disappear when browser data is cleared. Temporary generation checkpoints support recovery; expired credentials, sessions and usage-limit records are periodically removed. Operational events and content-access logs use a 90-day retention window when maintenance runs. Backups and provider records may follow separate retention schedules.

We use access controls, HTTPS, secure session cookies and hashed verification tokens. No storage or transmission system can be guaranteed completely secure.

Access, correction and deletion

You can manage stories in your library, revoke their sharing links, and change optional analytics preferences. For account access, correction, export or deletion requests, contact [email protected]. We may need to verify account ownership before fulfilling a request. We may retain records needed to resolve disputes, prevent abuse or meet applicable obligations.

Age settings describe the intended reading level of generated content. They do not verify anyone’s age. ForgeStory is not currently presented as a school records system or a service for children to submit personal data independently.