1. Who controls your data
PlotSaga is currently operated from Hungary by an individual. Privacy and data-subject requests may be sent to plotsaga@plotsaga.com. The operator’s complete legally required identity and contact details will be published before broader commercial operation and whenever required by applicable law.
2. Data we process
Depending on how you use PlotSaga, we may process account and profile data; authentication and account-verification data; Sagas, Stories, Episodes, Fanart, comments and other content; likes, follows, saves and viewing/progress information; reports and legal notices; support communications; security and device/log information; AI Studio prompts, optional reference media, generated files and related technical data; and information received from optional connected services.
3. Purposes and legal bases
Where the GDPR applies, PlotSaga processes personal data only when a legal basis applies. We use data to create and operate accounts, provide publishing, community, moderation and AI features, and deliver requested services where processing is necessary to perform our agreement with you. We may process limited security, fraud-prevention, service-integrity, abuse-prevention and product-operation data where necessary for our legitimate interests, balanced against your rights. We process information where necessary to comply with legal obligations, respond to valid legal notices and establish, exercise or defend legal claims. Where consent is the appropriate legal basis, such as for optional non-essential cookies or another optional feature specifically presented as consent-based, you may withdraw consent for future processing.
4. Public content
Content and profile information you choose to publish may be visible to other users and the public. Private AI Studio creations remain private unless you choose to publish them or otherwise share them through PlotSaga.
5. AI Studio and connected services
When you request an AI generation, the prompt and any optional reference media may be sent to the third-party AI infrastructure needed to perform that request, which may include Cloudflare Workers AI and, when enabled, Hugging Face or a related inference service. Optional account connections may transmit authorization credentials and basic account information needed for the connected feature. External providers also process data under their own privacy notices and terms.
Do not place passwords, financial information, health information or other unnecessary sensitive or confidential personal data in prompts or reference media.
6. Recipients and international transfers
Data may be disclosed to service providers that support hosting, content delivery, email, authentication, security, analytics where enabled, storage, moderation support and AI generation, and to professional advisers or authorities where lawfully required. Some providers may process data outside the EEA. Where the GDPR requires a transfer safeguard, PlotSaga will use an applicable mechanism such as an adequacy decision, Standard Contractual Clauses or another lawful safeguard appropriate to the provider and transfer.
7. Retention
Account information is kept while an account is active. After account closure, ordinary profile and content data is targeted for deletion or anonymisation within 30 days unless it must be retained for security, legal obligations, disputes or another documented lawful purpose. Security, login and rate-limit records are generally retained for up to 90 days. Copyright/IP complaints, illegal-content notices and associated moderation decision records may be retained for up to 3 years where reasonably necessary to document handling, resolve disputes, establish or defend legal claims or meet legal obligations. Records showing acceptance of material Terms, Privacy or Community Guidelines versions may be retained for the life of the account and up to 3 years afterward. Backup copies may remain until the relevant rolling backup cycle expires, normally no longer than 90 days where technically supported by the active backup provider. A longer or shorter period may apply where law requires it or a specific incident, dispute or legal hold reasonably requires preservation.
8. Your rights
Where applicable, you may have rights to access, rectify or erase personal data; restrict processing; receive portable data; object to processing based on legitimate interests; and withdraw consent where processing is based on consent. You may also lodge a complaint with the competent data-protection supervisory authority. Requests may require reasonable identity verification.
9. Required and optional data
Information marked as required during registration, publishing, legal-notice or other workflows is needed to provide that function or process the request. If required information is not provided, PlotSaga may be unable to create the account, publish the content or process the request. Optional fields may be left blank.
10. Children and account age
PlotSaga accounts are intended for users aged 16 or older. We do not knowingly offer account creation to children under 16. If we reasonably learn that an account was created by a person under 16, we may restrict or close it and take appropriate steps regarding associated personal data.
11. Automated decisions
PlotSaga does not currently use solely automated decision-making that produces legal effects or similarly significant effects on users. Moderation decisions that restrict content through the administrator tools are recorded as manual decisions unless PlotSaga explicitly states otherwise.
12. Security and contact
PlotSaga uses technical and organizational measures intended to protect account and service data, but no online service can guarantee absolute security. For privacy questions or to exercise applicable rights, contact plotsaga@plotsaga.com.
Last updated: September 11, 2026.
