← Spoonful

Privacy Policy

Last updated July 2026

The short version

We collect only what we need to write and deliver your story, we encrypt the sensitive parts, we don't sell your data, and you can ask us to delete it at any time.

What we collect

How it's protected

Your persona details, the personalized story text, and your messages to the bot are encrypted at rest (AES-256-GCM). Connections to our database use TLS. Access to admin tools is restricted.

How we use it

To generate your story, deliver it, provide support, process payment, and understand aggregate engagement. We do not sell your personal information, and we don't use your private details to train third-party models.

Who we share it with

Only the service providers that make this work — our hosting/database provider, our payment processor, Telegram for delivery, and the AI provider that generates the text — each acting on our behalf. We may disclose information if required by law.

Your choices

Retention

We keep your data while your subscription is active and for a reasonable period afterward, then delete or anonymize it. Contact us to have it removed sooner.

Questions about privacy? dan@merchantsofplay.com.