Legal
Privacy Policy
What we store, why we store it, and what we never do. Last updated 24 July 2026.
Who we are
YourPlotline is operated by Lyramic, a sole proprietorship in the Netherlands. For anything in this policy: [email protected].
What we store
- Account data — your email address, a hashed password, and the invite code you redeemed.
- Your reading state — playthroughs, choices made, off-plot forks, personal endings, commissioned stories, and exported editions, private to your account.
- Commission conversations — intake-chat transcripts and story briefs, stored tenant-scoped for the life of the commission. They're the platform's only free-text surface and are treated accordingly: moderated before generation, never written to logs or analytics, and redacted from our internal AI telemetry.
- Usage and billing records — the credit ledger of metered operations and, when self-serve billing is active, Stripe customer and subscription identifiers. Card details go to Stripe and never touch our servers.
- Support tickets — if you open a ticket through the support portal, we keep the correspondence.
What we never do
No advertising, no selling or sharing of personal data, no third-party trackers, no cross-site anything. Product analytics is our own first-party, cookie-free system (LyraPulse): aggregate page and product events under a salted, irreversible subject hash, used only to understand what the product should do next.
AI processing
When the service generates story content for you, the relevant story context — and, for commissions, your brief — is sent to our AI provider (Anthropic) under our own keys, through our own gateway, solely to produce your result. We use the provider's API, which doesn't use your content to train models.
Cookies
A sign-in session cookie and an anti-forgery token. That's the list — which is why there's no cookie banner.
Where it lives
The service runs on our own infrastructure in the European Union, behind industry-standard TLS, with passwords stored hashed. Payment processing (Stripe, when active) happens with that provider under its own safeguards.
Retention and your rights
We keep your data while your account exists, plus what bookkeeping law requires for billing records. Under the GDPR you can ask for access, correction, export, or deletion of your personal data — email [email protected] and we'll act on it promptly. You can also complain to the Dutch DPA (Autoriteit Persoonsgegevens), though we'd rather fix it first.
Changes
If this policy changes materially we'll say so by email or in the app before the change applies.