Privacy Policy
Preview notice: operator details still need to be completed before a public launch. These notes describe the current data handling and use of the preview. Adults should operate the service. Do not enter a child’s name, school or contact details.
Accounts and sessions
When email sign-in is enabled, we store email and account records. The staging site also has a restricted test account. Sessions use HttpOnly cookies; codes are stored as digests and test passwords as salted hashes.
Topics and models
Topics, tasks, quota records and model metadata are stored in Cloudflare D1. Models are stored in private R2 storage. Topic text or a Gallery reference image is sent to Aholo Lux3D for generation. Task and model access is checked against the signed-in account.
Browser records
Language preferences and earlier demo records are stored in your browser. Clearing browser data does not delete cloud models. Signing out or switching accounts clears the current user cache.
Service providers
Cloudflare provides hosting, data storage, Turnstile checks and transactional email delivery. Avoid entering sensitive personal information.
Managing records
You can delete models in My projects. The project team currently handles account and service-record deletion requests manually. Contact hi@tangisprout.com.
GitHub sign-in
If you choose GitHub, we receive a stable account ID, name and verified primary email to create or link your account. GitHub authorization tokens are used for that sign-in and are not retained in our database.
Administrative records
Changes to account status, generation access or quotas are logged in Cloudflare D1 with the administrator, target account, changes, reason and time. Regular registered accounts cannot read administrative records.
Generation records and support
Prompts, references and records belong to your account. Administrators can review them for support. Avoid entering children’s personal information.
Stories and search
Your idea is sent to Cloudflare AI to generate a story. Derived search queries are sent to configured search services, such as Exa, Serp or Tavily. Scripts, versions, sources, AI reviews and usage records are stored in Cloudflare D1. Private stories are not shared with other regular accounts by default; administrators can inspect them for support. Do not submit children’s real names, schools, addresses or contact details.
Drafts and recordings
Guest drafts use an essential HttpOnly visitor cookie and can be reopened in My projects in the same browser. They become inaccessible after seven days and their content is periodically cleared. Clearing browser data or changing devices may prevent recovery of an unclaimed draft. Claimed drafts are saved to your account. Deleting an original story clears its text, versions and AI replies; allowance, usage and audit records may remain. Private recordings for standard-story projects use private file storage and can be deleted within the project. Browser read-aloud is not automatically saved as a recording.
Sharing and attribution
Creations are private by default. Creating a share link lets anyone with it view the selected version without signing in. Private recordings, notes, email and internal generation records are excluded. You can update the shared version or close the link. Deleting the work or a private model it depends on, or disabling the account, stops access. First-party anonymous cookies last seven days and support sharing analytics and last-share attribution for visits, experiences and successful creation. Channel clicks indicate intent. Events do not contain OTPs, work text or raw IP addresses.
Optional Google Analytics
With your permission, Google Analytics (G-0HFE0V5WQ9) measures public page visits and language navigation. We send stable public page titles and URLs without query parameters or fragments. Account, admin, creation, workspace, saved-project and token-sharing routes are excluded. We do not send account IDs, creative text, email, recordings, form entries or original referrer URLs. Only cleaned public same-site routes or search-engine origins may be kept as sources. Google receives standard browser, device and network information; analytics cookies and your preference last up to 180 days. Google signals, advertising personalization and automatic form, search, link, download and video collection are disabled. Use Analytics choices in the footer to decline or withdraw: future analytics stops and this property’s analytics cookies are removed. The essential first-party sharing statistics described above remain separate.