Privacy policy
What we hold, and what we do not
Plain words, in the order a parent tends to ask. The warmer version of the same promise lives on Privacy & Safety ; this page is the complete one.
Last updated 7 September 2026
01 The short version
You make the account. Your child never signs in, and we never ask for their surname, birthday, school or address.
One photo is used once to draw the hero, then it is gone. The drawing stays, the photo does not, and no photo is ever used to train anything.
Nothing is public unless you create a share link yourself. You can delete a hero instantly, or the whole account, without asking us.
02 What you give us
To open an account we store your email address and either a password, kept only as a one-way hash, or the fact that you signed in with Google.
That is all we hold until you choose to make a hero. Browsing the site needs no account.
03 What we ask about your child
A first name, whether they are 4 to 6 or 7 to 10, whether the hero is a boy or a girl, their eye colour, and the colour and drawing style you pick.
We ask for the eye colour because a drawing tends to get it wrong, and children notice. Nothing here identifies your child to anyone outside your account.
04 The photo
The photo you crop in the wizard is sent once, over an encrypted connection, to the service that draws the hero. It is never written to our database and never saved to our disks.
Two providers receive the photo, both through OpenRouter: Google’s Gemini, which checks that it shows a face, and ByteDance’s Seedream, which paints the hero. They receive the photo for that single request and are bound by their own terms. Costumes and story scenes are drawn later from the painted hero, never from the photo.
We do not use photos to improve, train or fine-tune any model, ours or anyone else’s. There is no setting that turns this on, because there is nothing to turn on.
If the drawing fails, the hero is created without a portrait and the photo is discarded all the same.
05 What we keep
The hero: the details above, the finished drawing, and the pictures drawn from it for costumes and story pages. Images live as files on our server, and the database only points at them.
What your child finished: which books, adventures and games, which endings they found, best scores, the words a story put in front of them, and roughly how long a session lasted. This is what the parent dashboard shows.
A record of consent: what you agreed to, which version of the wording you were shown, when, and the network address the request came from. That record is what lets us prove a parent agreed. It is kept for as long as the account exists, and erased with it.
06 Analytics
We load no analytics at all until you allow it in the banner. If you decline, or simply never answer, no analytics code is fetched and no analytics cookie is set. The site works the same either way.
If you allow it, we use Yandex Metrika to count page views, clicks and links followed. It sets a first-party cookie and does not track you across other sites.
It never receives your email, your child’s name, the photo, or anything from the parent dashboard.
You can change your mind: clearing the site’s cookies in your browser brings the banner back.
07 Cookies
A session cookie keeps you signed in. Your answer to the analytics banner is remembered so we stop asking. There are no advertising cookies, and we run no ads.
08 Who else can see any of this
Our hosting provider, Railway, runs the database and stores the image files.
The drawing services named above see one photo per hero, once.
The analytics provider named above sees page views, and only after you allow it.
Nobody else. We do not sell data, we do not share it for advertising, and we do not send your child’s name or picture to anyone you have not chosen.
09 Share links
A share link is the only page of ours that opens without signing in. It exists only when you create it.
It shows the hero’s first name and picture, the title, and what your child finished in it. Search engines are asked not to index it.
You can revoke a link in Settings, and every link stops working the moment you ask to delete your account.
10 Children, and who agrees to what
A child cannot create anything here. Before an account exists there is a step only an adult is expected to pass, and creating a hero requires you to confirm you are the parent or guardian and that you may use the photo.
We ask for the least we can and still tell a story with your child in it. That is why there is a first name and no surname.
11 Keeping it, and deleting it
Deleting a hero is immediate: the hero, every picture drawn for them and their progress are removed at that moment.
Deleting the account is self-serve. Share links stop working straight away, and everything else is erased after 30 days in case you change your mind — signing back in within that window cancels it. A job runs daily to carry out the erasures that have come due.
After that window the account, the heroes, the pictures, the progress and the consent record are gone. What stays is our own bill of what each drawing cost, which no longer points at anyone.
12 When this page changes
This is version 2026-09 of the wording, and that version is stored alongside every consent, so it is always clear which text you were shown.
If we change what we collect or who receives it, we will ask again rather than quietly widen an old agreement.
13 Questions and requests
The controls that matter are in Settings and need no request: delete a hero, revoke a share link, delete the account.
For anything else, write to [email protected].