Researchers once counted 223 trackers in a single minute inside a competing companion app, and twenty undisclosed advertising SDKs — none of them disclosed to the people being tracked. This page exists so you can check what we do, including what would change if we ever show ads.

Advertising, plainly

We do not show ads today. No advertising code is loaded on any page, on any plan, for anyone. Nothing on this site sends anything to an ad network, and there is no ad slot rendered anywhere — not an empty one, not a hidden one.

We are being straight about the plan rather than waiting: the intention is that a free tier is eventually paid for by advertising, and paid plans never are. That is the reason a free tier exists at all rather than a fourteen-day trial. If and when that starts, here is the arrangement, and this page will say so before it does:

• If you are on Free, whether you are browsing anonymously or using an account, we would serve ads through Google AdSense. They would load only after you consent, personalisation would be off unless you turn it on, and we respect Global Privacy Control.
• If you are on Plus or Deep, the ad code never loads. Not muted, not hidden — not loaded.
• Your conversations are never used for advertising, ever, on any plan. Nothing you say to a companion would reach an advertiser, an ad network, or a targeting profile. Ads would be chosen from the page you are on and from whatever Google already knows about your browser, and we would not add to that.
• We would tell Google your age bracket only to restrict what you are shown, never to target you with it. If you are under the age of consent where you live, personalised advertising is switched off and cannot be switched on.

What we don't do

• Your conversations are never used to train models — ours or anyone else's.
• We never sell your personal information, and we never share it for cross-context behavioural advertising.
• We do not build a profile of you from your conversations for any purpose, including our own recommendations.

What we store

• Your account: email, name, and the state of your plan.
• Your characters and companions: exactly what you wrote.
• Your conversations: kept per companion so your companion can remember them. They are yours; you can read, export, or destroy all of them.
• Your Memory Ledger: the facts your companion has learned, visible and editable by you, with an audit trail of every change.
• Your age, coarsely: the birth year you tell us when you create an account — not a full date, because we never need the day. If it is below the minimum where you live, we keep only the fact that you were turned away, and delete the year itself.
• Age eligibility: today we use only the birth year described above. We do not ask for an identity document, selfie, or biometric template. If a future age-assurance method requires a vendor, this policy must be updated before it is enabled.
• Moderation records: the rule that fired, the surface, and a hash of what was checked. Never the content itself.

Analytics

First-party product analytics, self-hosted or EU-hosted, measuring how features are used. We do not build advertising profiles from it, and it is separate from the ad stack described above — the analytics we run for ourselves and the ads Google serves on the free tier are different systems that do not share data.

Export and deletion

Both are self-serve, on your account page, and neither is behind a plan.

• Export gives you one JSON file with everything: characters, companions, every transcript, the whole Ledger, and your billing history. It works on a lapsed account and on an account under moderation review.
• Delete is a hard delete, immediately. Every character, conversation, memory, uploaded image, and the per-account vector namespace is destroyed — not deactivated. There is no recovery window, and we cannot undo it for you.

The one thing that outlives a deletion is the moderation and safety log, and it survives with your user id removed: what remains is a rule name, a timestamp, and a hash, linked to nobody. We are required to keep those counts; we are not required to keep them attached to you.

Your rights

Access, portability, correction, and erasure are all self-serve above, which is faster than emailing us. If you want something we haven't built a button for, ask.

Changelog