Privacy policy

1. Who this policy covers

This policy applies when you visit threaded.love, create a Threaded account, build a chapter, or join a shared game. Threaded is responsible for the personal information described here. Contact us at founders@threaded.love with privacy questions or requests.

2. Information we collect

Account information

We collect your name, email address, authentication provider, and account identifier when you create or use an account. Password authentication is handled by Supabase. Threaded does not receive your Google password.

Your memories and chapter content

We collect the photos you upload, the words you use to describe them, interview answers, stories, letters, chapter settings, generated artwork, and game manifests needed to build and replay your chapter.

Usage and device information

We may collect browser and device details, approximate location derived from IP address, referral pages, session events, errors, and interactions with the service. We use cookies and similar technologies for sign-in, security, analytics, and service operation.

Shared play information

When you use online play, we process join codes, connection information, gameplay inputs, and connection status so both players can join the same session.

3. How we use information

• Provide accounts, save chapters, and deliver the game you ask us to build.
• Generate stories, visual themes, and game artwork from your submitted words and writing.
• Let you invite a partner and play together.
• Protect accounts, prevent abuse, troubleshoot errors, and keep the service reliable.
• Understand product usage and improve Threaded.
• Comply with law and enforce our terms.

Where applicable, we rely on your consent, performance of our agreement with you, our legitimate interests in operating and improving the service, and legal obligations. You may withdraw consent where consent is the basis for processing, although some features may then stop working.

4. AI processing

Your memory tags, interview answers, approved story, and art prompts may be sent to AI providers such as OpenAI or OpenRouter to produce chapter text and artwork. The current creation flow does not send your original uploaded photos to those AI generation providers. We ask providers not to use these requests as stored conversation history where their APIs support that control, but their processing remains subject to their service terms and data handling practices.

AI output can be inaccurate or unexpected. Review generated stories before sharing them.

5. When information is shared

We share information only as needed to operate Threaded, when you direct us to share it, or when law requires it. Service providers may include:

• Supabase for authentication, databases, private file storage, and realtime rooms.
• Vercel for website and server hosting.
• OpenAI or OpenRouter for story, theme, and image generation.
• Resend for transactional emails, such as telling you when a generated world is ready.
• Cloudflare for online-play connectivity.
• Google for Google sign-in and website analytics.
• PostHog for product analytics when enabled.

When you share a join code, the person who enters it can receive the chapter content needed to play, including temporary links to its photos and generated assets. Share codes only with someone you trust. We do not sell your personal information.

6. Storage, retention, and international processing

We retain account and chapter information while your account is active or as needed to provide the service. Our providers may process information in Canada, the United States, or other countries where they operate. Those countries may have different privacy laws.

Deleting your account removes your active account data, chapters, original photos, and generated assets from Threaded systems. Limited copies may remain temporarily in provider backups, security logs, or caches until their normal deletion cycles complete, or where retention is required by law.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, export, object to processing, restrict processing, withdraw consent, or delete personal information. You can permanently delete your Threaded account and its stored chapter data from the account page.

For other requests, email founders@threaded.love. We may need to verify your identity before completing a request. You may also complain to your local privacy regulator.

8. Security and your responsibilities

We use access controls, private storage, encrypted connections, and short-lived signed links to protect your information. No online service is perfectly secure. Use a strong password, protect your join codes, and do not upload anything you would not want the invited player to see.

9. Children

Threaded is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has submitted information, contact us so we can remove it.

10. Changes to this policy

We may update this policy as Threaded changes. We will post the revised version here and update the effective date. If a change materially affects how we use existing information, we will provide additional notice where required.