Privacy

Everbranch is operated from the United Kingdom and is the controller of the personal data described here. This notice says what is kept, why, who else touches it, and how to get it back or get rid of it. Write to hello@everbranch.ink about any of it.

What is stored

Your email address, username, display name and bio.
A hash of your password. The password itself is never stored.
The fact that you confirmed you are 18 or over, and when. No date of birth, no ID.
Your seeds and branches, including everything you typed and everything the writer produced.
Pictures you asked for, and the prompts they were made from.
Your credit balance and an append-only record of every credit change.
What you liked, saved, followed, and how far you read.
Any thumbs up or down you give a turn, with the reasons and comment you add, and a copy of that turn’s move and scene so we can review it even after you rewrite or rewind it. Deleting your account deletes it, and so does deleting a branch you never published. Feedback on a branch you published and then delete is kept with that branch’s words, and you can ask us to delete both.
Short private notes on how you play and read, so the writer can tailor your stories: the kinds of move you make, which suggestions you take, how long you spend on a scene and the kinds of story you stay in. An AI model writes them from your activity here. They describe your tastes in a story, never you as a person, are used only to write your stories and suggestions, and are deleted with your account. You can ask us for them, or ask us to delete them.
Session records, so you stay signed in.
A scrambled code made from the internet address (IP address) you sign up and sign in from, never the address itself. Accounts on the same connection get the same code, which is how we keep the free sign-up credits to one account per person and spot accounts made again and again. Many people can share one connection, so it never closes an account by itself. Each code is deleted 90 days after we last saw it.

We keep this to run the service you asked for and to keep it usable and lawful. There is no advertising profiling, no data broking and no sale of anything to anyone.

Safety records

When something is refused by the content rules, we record that it happened: which rule, at which stage, and a one-way hash of the input. We deliberately do not store the offending text itself, and refused model output is discarded rather than saved. Where the law requires us to report something, we keep the account and timestamp records needed to do so.

Who else sees it

Running the service means handing parts of it to other companies. The ones that touch your data are:

Model providers. The text of your story (your premise, your moves and the prose so far) is sent to whichever writer you chose, routed through OpenRouter to providers including Anthropic, Google, DeepSeek, Moonshot, xAI and Z.ai. Picture prompts go the same way to an image model. This is unavoidable: it is how the story gets written. Do not type anything into a story that you would not want a third party to process.
Vercel hosts the site and stores generated pictures.
Neon hosts the database.
Resend sends confirmation and password emails, and therefore handles your email address.
Stripe takes payments. Card details go to Stripe and never reach us; we see only that a purchase succeeded and for how much.
Google Analytics counts visits. Until you answer the cookie banner, and always if you decline it, it runs cookieless: what reaches Google is anonymous page-view pings rather than a profile of you. If you accept, it sets an analytics cookie so repeat visits are counted as one reader. Either way we use it to see which pages are read, not who reads them, and nothing about it is used for advertising.
Google Ads tells us whether an advert brought you here. It runs the same cookieless way whatever you answer on the banner and never sets an advertising cookie: what reaches Google is an anonymous signal that an ad click led to a visit or a sign-up, not a profile of you, and none of it is used to show you ads.

Data is stored in the United States (Neon, US East), so using the service involves an international transfer out of the UK. Anything you publish is public by your own choice and readable without an account.

How long it is kept

Account data and your stories are kept until you delete them or delete your account. Deleting your account wipes your name, address and bio, takes down your seeds and published branches, and cannot be undone. A seed or published branch you delete, on its own or with your account, is taken down straight away. Its words stay in our records, out of sight, and you can ask us to delete them completely. Deleting a branch, a seed or your account deletes its pictures too. The exception is a deleted seed’s chosen cover and character pictures, which stay while branches played from that seed are still there to show them. Pictures on turns you rewind away are deleted as well, and so are covers drawn for a finished branch you then carry on playing. Records we are obliged to keep, which are the credit ledger for accounting and the safety records, are kept beyond that, in the smallest form that serves the purpose. An account whose email address is never confirmed is deleted after 30 days, and the address is free to sign up with again.

Your rights

You can ask for a copy of your data, ask for it to be corrected, ask for it to be deleted, or object to how it is used. Finished branches can be exported as a PDF from your own account without asking anyone. Published branches can be retracted at any time. If you think we have handled your data badly and we have not put it right, you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

One cookie for keeping you signed in, and a short-lived one to remember who invited you if you arrived through somebody’s link. A third one notes which accounts have signed in on this browser, so nobody can use an invite link to invite themselves, and so the free sign-up credits go to one account per person. It lasts about 13 months and stays when you sign out. It holds a scrambled code for each account, never your name, email or account ID. Analytics cookies are set only if you say yes to the banner asking about them; decline it, or ignore it, and the visit counting described above stays cookieless. You can change your mind by clearing this site’s data in your browser, which brings the banner back. No advertising cookies, ever. Your theme, text size and reading preferences stay in your browser and are never sent to us. See the terms for the rest.