Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

2. Information Collected

We collect the following types of information:

• Account Information: Email address used for authentication
• Story Content: Prompts you provide, generated stories, and choices made during gameplay
• Payment Information: Processed securely by third-party providers; we do not store card details
• Usage Data: Pages visited, features used, session duration, and device information

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: To provide you with the story generation service you signed up for
• Legitimate Interests: To improve our service, ensure security, and prevent fraud
• Consent: For optional analytics and marketing communications (you may withdraw consent at any time)

4. How Information is Used

Your information is used to:

• Provide and maintain the story generation service
• Save your progress and story state
• Process payments for arc credits
• Send important service updates
• Improve story generation quality
• Respond to your support requests

5. Data Retention

We retain your data for the following periods:

• Account Data: Retained while your account is active, plus 30 days after deletion request
• Story Content: Retained while your account is active; deleted upon request
• Payment Records: Retained for 7 years as required by law
• Usage Analytics: Retained for up to 2 years in anonymized form

6. Data Storage & Security

Your data is stored securely with the following measures:

• Data encrypted in transit (TLS/SSL) and at rest
• Servers located in secure data centers
• Access controls limiting who can view your data
• Regular security audits and updates

Stories are associated with your account and are not shared publicly unless you explicitly choose to share them.

7. International Data Transfers

Your data may be transferred to and processed in countries outside Ukraine, including:

• United States: Story content is processed by OpenAI for generation
• European Union: Authentication and database services

These transfers are protected by standard contractual clauses and other appropriate safeguards to ensure your data remains protected.

8. Third-Party Services

We use the following third-party services:

• Supabase: Authentication services
• OpenAI: Story content generation
• Payment Processors: Secure payment handling
• PostHog: Optional analytics (with consent)

Each provider has their own privacy policy governing their use of data. We encourage you to review their policies.

9. Your Rights

Under applicable data protection laws, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limitation of processing
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for processing based on consent

To exercise any of these rights, contact us at admin@fisher.tech. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority if you believe your rights have been violated.

10. Age Restriction

Remnant Codex is intended for users who are 18 years of age or older. We do not knowingly collect personal data from anyone under the age of 18.

If we discover that we have collected data from a user under 18, we will promptly delete that information. If you believe a minor has provided us with personal data, please contact us at admin@fisher.tech.

11. Cookies

We use essential cookies for authentication and session management. These are necessary for the service to function.

Analytics cookies (PostHog) are only used with your consent. You can manage your cookie preferences in your browser settings.

12. Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or a prominent notice on our service.

We encourage you to review this policy periodically. Your continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact

For questions about this privacy policy or to exercise your data rights, contact us at: