Privacy policy

The data controller is the publisher of Flicker Inn, in France. Contact: our team (contact details coming soon).

• Account: display name, e-mail address, password (stored as a non-reversible hash), language, reading and game preferences, minimum-age declaration, accepted document versions and the date of your acceptance. With Google or Discord: the identifier and profile picture that service sends.
• Security: your sign-in sessions (IP address and browser), sign-in attempts, two-step sign-in if you turn it on.
• Game: your games and messages, your heroes, notes, adventures and pictures, the GM’s replies, what you write out of character.
• AI usage: for each call, the date, the step, the model, the amount of text and the cost. This log is used for limits and statistics; it does not contain the text of your messages and it is kept even after a game is deleted.
• Checks: warnings, the passage of the message concerned, your appeals and the reports you send.
• Your own AI or voice keys, if you link any: stored encrypted, used for the features you request (play, voice, pictures, writing help).
• Notifications: your choices, and your browser’s subscription if you turn notifications on.

• To run the game and your account (performing the terms of use).
• To secure the service, prevent abuse and enforce the rules of conduct (legitimate interest).
• To follow usage and costs in order to apply the plans and improve the game (legitimate interest).
• To send you optional notifications or e-mails, if you turn them on (consent, which you can change at any time).

• AI providers. On each turn, the text the GM needs (your recent messages, the state of the game, your hero’s sheet, the adventure’s notes) is sent to the model chosen by our team, mainly through OpenRouter, which passes it to the model’s provider (for example Google, OpenAI or Anthropic), or directly to OpenAI or Anthropic. With your own key, it goes to that key’s provider. Pictures go through OpenRouter or OpenAI. Messages being checked may also be sent to a moderation provider used by the service, including when you use your own key.
• Voice, if you use it: the text to read is sent to the chosen voice service (OpenAI, ElevenLabs, Cartesia, Fish Audio or Inworld). Recordings to transcribe are sent to OpenAI. Your recordings are not kept; readings of the story may be kept so they can be replayed. Your device’s dictation is handled by your browser.
• Hosting and e-mails: Hostinger (hosting of the site and database, sending e-mails).
• Google or Discord, if you sign in with them.
• The other players of your group games see what you write at the table (not your asides), and the people you share a link with see what you share.
• Our team may look at an account and its games for support, reviewing warnings and security.

Some providers may process data outside the European Union, including in the United States. Countries, retention periods and safeguards depend on the provider and model used. Avoid writing sensitive personal information in the story.

• Account, games and creations: as long as the account exists (see “Your rights” to delete it).
• A deleted game or adventure: It stays 30 days in the team’s trash so it can be restored, then it is erased. An administrator can keep an item longer.
• Sign-in sessions: 30 days, renewable with activity; password reset links: 1 hour.
• AI and voice usage log (without the text of messages): 13 months, for limits, statistics and costs.
• GM response times (diagnostics): 3 months.
• Warnings: 1 year after they end (expiry or withdrawal); a permanent warning still in force is kept.
• Problem reports: 1 year after they are resolved.
• Log of the team’s actions: 3 years.

The team sets these periods; the values shown here are the current ones. Erasure happens on the next automatic cleanup.

Flicker Inn only uses necessary cookies, with no ads and no audience measurement:

• your sign-in session (30 days, renewable) and, if you choose it, “trust this device” for two-step sign-in (30 days);
• gs_locale: the interface language (1 year);
• gs_reading: the theme and text size (1 year);
• temporary security cookies during Google or Discord sign-in; a temporary viewing cookie for administrators;
• gs_guest: your trial game without an account (24 hours).

Your browser also keeps a few display settings (sidebar, panels, reading comfort, messages already seen). None of it is used to follow you on other sites.

Without creating an account, you can play a few turns of an official adventure. We keep that trial game, your hero and your messages, linked to a cookie (gs_guest), and a hashed fingerprint of your IP address to limit abuse. No email address is asked.

If you don't create an account, the trial game and its data are deleted after 24 hours; the IP fingerprint and the usage count after 7 days. If you sign up or sign in, the game joins your account.

The trial may use a free AI model whose provider may record conversations; the trial page says so. Don't write anything personal there.

Online connections use HTTPS. Passwords are never stored in clear, your own keys are encrypted and sensitive team actions are logged.

You can access your data, correct it, have it erased, restrict or object to its use, receive it in a reusable format, and give instructions about what happens to it after your death.

In the settings you can change your name and password, change your e-mail when e-mail delivery is available, manage notifications and keys; in each game, download your story; and delete your games and adventures.

In Settings › Account › Your data, you can download a full copy of your data (a JSON file) and delete your account, after confirming with your password or your e-mail address.

Deletion erases at once your name, e-mail, preferences, sign-in methods, heroes, keys, notifications, reports and the games you play alone. What remains, without your name or e-mail: the AI usage log (limits and costs) and warnings, for the periods above. In a group game, your messages stay in the other players’ story; if you host it, it goes on with another player. An adventure you wrote stays available, made private, for other players’ games that rely on it; otherwise it is erased.

For any other request, write to our team (contact details coming soon).

If you believe your rights are not respected, you can complain to the CNIL, the French data protection authority (www.cnil.fr).

The service is for people aged 16 or older. If you learn that an account belongs to someone younger, write to us: we will delete it.

If this policy changes significantly, the new version will be shown at your next visit.