Privacy Policy
Last updated: November 11, 2026
Your browser draft
AI Fanfic saves your story library, settings, and private notepad in local storage in this browser. We do not maintain a cloud library of your stories. Starting a new story keeps existing stories on your local bookshelf. Private notepad text is not included in AI requests. Clearing browser storage or using another device can make your stories unavailable. Download text copies or export a library backup to keep them.
What happens when you use AI
Generating a story sends your characters, fandom, tags, and premise through our server to OpenRouter and the selected model provider, Google. Continuation also sends recent draft text; a rewrite sends the selected passage, nearby text, and your instruction. A request may contain the full current draft when it reaches our server, although only relevant context is forwarded to the model. Manual editing does not send draft text to the AI service. Do not include private information you do not want processed by these services.
Usage records and security
Our database stores request identifiers, action, date, time, completion status, estimated charges, and reported charges. To limit abuse we derive a salted hash from your IP address. This table does not contain your story text, prompts, raw IP address, or API credentials. Records older than 30 days are removed when a subsequent writing request runs.
Infrastructure and third parties
Cloudflare hosts the service and processes network information such as IP addresses and request metadata. When enabled, Cloudflare Turnstile processes browser and network signals for human verification. Optional Cloudflare Web Analytics measures visits, and optional Sentry reports service errors. Provider logging, retention, and training policies depend on the services and account settings in use. We do not promise that all third parties retain no data.
Optional usage analytics
When configured, Google Analytics 4 is loaded only after you allow analytics. It measures visits, general device and referral information, and allowlisted feature events such as generation, continuation, rewriting, copying, and downloading. It uses analytics cookies to estimate visitors and sessions. We do not send story text, prompts, character names, notes, rewrite instructions, story identifiers, or filenames to Analytics. Page URLs and referrers are stripped of query strings and fragments. You can decline analytics or withdraw permission using Analytics preferences in the footer; writing still works. Blocking analytics or declining consent means visits and actions may not appear in these reports.
Storage, cookies, and controls
Local storage keeps your story library and private notes; site preferences can use cookies. A Secure, HttpOnly, host-only verification cookie lets a successful human check remain valid for up to 30 minutes on the same browser and connection. Its signed contents include an expiry and a salted fingerprint, not your story or raw IP address. It does not reset daily writing allowances. Expiry or changes to the browser or connection require another check. The initial release has no public account or payment flow. You can clear this site’s browser storage to remove your local stories, private notes, and preferences. Contact us about service-side usage records or privacy questions. We may need enough information to locate and verify the relevant record.
Contact and changes
Use the Contact page for privacy requests and questions. Updates to this policy appear on this page with a revised date.