AI Story Generator — Personalized Novels

1. Information We Collect & Data Minimization Principle

Account Information: When registering or logging in, we collect your email address, display name, and unique authentication identifiers provided via Google Sign-In or Sign in with Apple.

[Reader Model Data Minimization (UK GDPR & ICO Strict Compliance)]:

Our adaptive Reader Model is strictly restricted to fictional literary narrative preferences (e.g., pacing speed, grimdark vs. lighthearted tone, trope affinities, and creative avoids). We NEVER infer or record sensitive real-world attributes (such as real-world political views, religion, health status, or sexual orientation). Your fiction appetite exists solely to tune your next chapter's emotional resonance and is never monetized for ad profiling.

Creative Revisions & Provenance: Character attributes, custom world rules, and line edits you perform in the reader. These form your verifiable Creative Contribution Record.

Payment Records: Payment cards are processed securely by our authorized Merchant of Record, Paddle (certified PCI-DSS Level 1). We store only transaction verification identifiers and active expiration windows, never raw payment card credentials.

2. Purposes of Use & 18+ Minor Protection (COPPA / UK Children's Code)

Deliver long-form personalized novel prose, neural audio narration, and reading position synchronization;
Enforce Private Novel First architecture, shielding your reading universe from public exposure;
Maintain AI provenance metadata compliant with Article 50 of the EU AI Act.

[Strictly 18+ Underage Prohibition]: TaleMeld is strictly not directed to or permitted for minors under 18 years of age under US COPPA and the UK Children's Code. If we learn that personal data of anyone under 18 has been submitted, we will immediately purge the account.

3. Third-Party Technical Boundaries

We never monetize or sell your personal data. We interact exclusively with vetted technical partners:

• Paddle (Merchant of Record): Facilitating global web checkouts, automatic VAT/sales tax compliance, and receipts;
• AI Inference Gateways: Streaming prose and neural speech over encrypted TLS channels without retaining user stories for public model training.

4. Cookies & Local Storage Disclosure (EU ePrivacy & GDPR Compliance)

TaleMeld adheres to the highest standards of "Pure Reading & Data Minimization". We strictly do not employ third-party cross-site advertising tracking cookies, social pixels (such as Meta Pixel or TikTok Pixel), or external behavioral profiling scripts.

Under Article 5(3) of the EU ePrivacy Directive (Directive 2002/58/EC) and official guidance from the European Data Protection Board (EDPB), we rely solely on legally exempt "Strictly Necessary" and user-requested "Functional Preference" storage:

Key / Technology	Category	Lifespan	Operational Purpose
HttpOnly Session	Strictly Necessary (Exempt)	Session / 7 days	Authentication credential preventing token tampering and Cross-Site Request Forgery (CSRF).
foryou_ui_locale / foryou_content_lang	Functional Preference	1 year	Remembers your selected UI and story language preference across visits.
foryou_theme	Functional Preference	1 year	Remembers your dark/light reader theme to prevent white flash during page load.
Browser LocalStorage	Core Functionality	Until manually cleared	Locally caches story creation drafts and reading position; remains strictly on your device.
Cloudflare Edge Tokens	Security (Exempt)	Session	Perimeter security defending the platform against malicious botnets and DDoS attacks.

[Why You Do Not Encounter an Intrusive Cookie Banner]:

Under EDPB guidelines, opt-in consent banners are mandatory only when platforms deploy non-essential tracking or marketing cookies. Because TaleMeld is completely free of advertising trackers and uses only legally exempt operational storage, we are legally entitled to spare you annoying pop-up banners. You remain free to clear all cookies and storage via your browser settings at any time.

5. Your Rights: Reader Profile Export & Instant Reset

Under EU GDPR and the UK Data Protection Act, you maintain complete data sovereignty:

View & Export Profile (Data Portability): Export your reading appetite and narrative preferences in standard JSON format;
Instant Reset (Right to be Forgotten): Reset your reader profile with one click to purge all accumulated narrative bias and historical logs;
Account Deletion: Permanently erase your account, private library, and associated assets within 30 days via Settings.

Data Protection Officer contact: [email protected].

6. Contact Information