Privacy Policy

Last updated: June 7, 2026

Overview

This policy explains what we collect, how we use it, and the choices you have when you use Chaptered.

We collect the minimum information needed to run the app and keep your work available across devices.

Account data (such as your email address).
Content you create (projects, scenes, notes, and related metadata), plus content hashes and moderation results when you submit scenes for publication.
Basic usage and diagnostic information to keep the app reliable and secure.

We use your data to provide and improve the service, and to keep it secure.

To provide core functionality like syncing, saving, and exporting.
To understand performance and fix bugs.
To prevent abuse and protect accounts.
To screen content submitted for publication, apply our publication rules, and support staff review.

We use Umami to understand how Chaptered is used and to improve reliability and usability.

Provider: Umami (privacy-focused, open-source product analytics).
It may collect event data such as page views, clicks, feature usage, device/browser information, and approximate location derived from IP address.
We configure analytics to avoid sending the text you write in the editor or the contents of your scenes/notes as analytics payloads.
You can turn product analytics on or off using the controls under “Analytics choice” on this page, or the prompt when you first visit.

We use Cloudflare Turnstile in invisible mode to protect the service from automated abuse, spam, and fraud.

Provider: Cloudflare, Inc. Turnstile operates without showing a traditional challenge widget.
Turnstile may collect your IP address, browser and device information (such as user agent, screen resolution, and interaction patterns), and other signals to distinguish humans from bots.
This processing is based on our legitimate interest in maintaining the security, integrity, and availability of the service.
Data may be transferred to and processed by Cloudflare in the United States and other jurisdictions. Cloudflare's processing is subject to their Privacy Policy and Privacy Addendum (https://www.cloudflare.com/privacypolicy/).
Using Turnstile alone does not automatically make this site GDPR or CCPA compliant. We conduct Data Protection Impact Assessments (DPIAs) and maintain appropriate data processing agreements where required.
Because Turnstile runs in invisible mode, no interactive cookie consent is required for Turnstile itself. Other analytics and tracking on this site are subject to the consent controls described above.

We use automated moderation, including a third-party large language model (LLM), to screen author content before it is made available to readers.

Chaptered does not use your writing or project content to train AI models.
Draft content is not sent to the LLM merely because you write or save it. Processing starts when you choose to publish or push an update.
We send the plain text extracted from the scenes in the publish request. We do not intentionally include your account identity in the LLM request.
The LLM provider processes the submitted text to return a moderation classification and reason. Provider processing is subject to its data-handling terms and our applicable service arrangements.
The result may approve publication, block publication, or keep a snapshot hidden from readers while it awaits staff review.
On our systems, cached content hashes and moderation verdicts are scheduled for deletion after 90 days. Published snapshots and associated moderation records may be retained while needed to operate the publication, review decisions, enforce our terms, or meet legal obligations.
Authorised staff may review content that is flagged. Automated moderation can be wrong; contact support if you believe a moderation result is an error.

We do not sell your personal data. We may share limited information only in the situations below.

With service providers who help us operate the app, including hosting, database, analytics, and AI moderation providers.
If required to comply with law or to protect the rights and safety of users.
As part of a business transaction like a merger or acquisition (you will be notified of material changes).

We use reasonable measures to protect your data, but no method of transmission or storage is completely secure.

We keep your data for as long as needed to provide the service, and for legitimate business or legal purposes.

Depending on your location, you may have rights to access, export, or delete your data.

If you have questions about this policy, contact us through the support option in the app.