Privacy Policy

1. Data Controller

Sebastian Sünkler
Gartenholz 130
22926 Ahrensburg
Germany
sebastian.suenkler@gmx.de
+49151 58 56 35 76

2. Scope of Data Processing

When using our website, standard technical access data is automatically stored in server log files. This includes:

• Anonymized IP address (last octet is set to 0, e.g., 192.168.1.0)
• Date and time of access
• Accessed pages and URLs (e.g., '/', '/archive', '/story/...')
• HTTP status code
• Amount of data transferred
• Browser type and version (User-Agent)
• Referrer URL (if provided by your browser)

We do not use cookies (except for potentially essential session management if needed by Flask, though currently minimized), tracking tools, or analytics services to monitor individual user behavior.

Story Generation and Storage:

• The inputs you provide for story generation (selected genres, number of ideas, language, additional instructions, selected idea prompt/setting/title) are sent to an AI service (see Section 8) to generate the story content.
• **Generated stories are stored permanently in our public archive.** This includes the story text itself, along with metadata derived from your input (title, genre, prompt, setting, language).
• **Crucially, we do not store any information linking a specific user session or IP address to a generated story.** The stored stories are anonymous in the sense that we do not retain data about *who* initiated the generation. The archive is publicly accessible to all users.

No other personal data is collected or stored by this application.

3. Legal Basis

The processing of technical access data (server logs) is based on our legitimate interest according to Art. 6(1)(f) GDPR to ensure the functionality, security, and stability of our website.

The processing of story generation inputs by the AI service is based on Art. 6(1)(b) GDPR (necessary for the performance of a service requested by you - i.e., generating the story).

The storage of the anonymized generated story and its metadata in the public archive is based on our legitimate interest according to Art. 6(1)(f) GDPR to provide a useful repository of generated content for all users and potentially for further analysis or improvement of the generation process itself (without linking it back to individuals).

4. Storage Duration

Technical access data (server log files) is automatically deleted or fully anonymized after 7 days at the latest.

Generated stories and their associated metadata stored in the public archive are intended to be kept **indefinitely** as part of the application's core feature, unless technical reasons or legal requirements necessitate their removal. As this data is stored anonymously (without linkage to the generator), standard data subject deletion requests (Art. 17 GDPR) regarding *specific stories* cannot typically be fulfilled based on user identity alone.

5. Rights of Data Subjects

Regarding the technical access data (server logs), you have the standard rights:

• Request information about the potentially stored log data concerning your access (Art. 15 GDPR)
• Request correction (not applicable to logs) or deletion (Art. 17 GDPR)
• Request restriction of processing (Art. 18 GDPR)
• Lodge a complaint with a supervisory authority

Regarding the generated stories stored in the archive: As we do not link generated stories to specific users, exercising rights like access, correction, or deletion based on user identity for specific stories is generally not possible. The stories are treated as anonymized, published content.

To inquire about log data or general data protection practices, please contact us using the details in section 1.

6. Right to Lodge a Complaint

In the event of violations of data protection law, you have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the State Data Protection Officer of the federal state in which our company is headquartered. A list of Data Protection Officers and their contact details can be found at: https://edpb.europa.eu/about-edpb/about-edpb/members_en.

7. Currency and Amendment of this Privacy Policy

This privacy policy is currently valid and was last updated April 20, 2025.

Due to further development of our website or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed and printed out at any time on this website.

8. Use of AI Services

Our application uses AI services to generate story ideas and the full story text. We use the following services:

Nebius AI Platform (using Microsoft Phi-4 model)

Type of data processed: When you request story ideas or story generation, the relevant inputs (such as selected genres, language, number of ideas, chosen idea prompt/setting/title, additional instructions) are transmitted to Nebius AI servers. These inputs are processed by the underlying AI model (e.g., Microsoft Phi-4) hosted on the Nebius platform.

Purpose of processing: The data is processed solely to generate the story ideas or the full story text as requested by you.

Legal basis: The processing is based on Art. 6(1)(b) GDPR (performance of a service requested by you) and our legitimate interest according to Art. 6(1)(f) GDPR to provide users with creative AI-powered generation capabilities.

Storage duration: The data transmitted to Nebius AI is processed according to their terms and privacy policy. They may temporarily log requests for operational purposes or potentially use anonymized data to improve their services. For specific details, please refer to the Nebius Privacy Policy and any terms applicable to the specific AI models used.

Your rights & Anonymity: While you initiate the request, the inputs sent to the AI service are not directly linked back to your specific IP address or session identity in a way that is stored long-term by our application. If you object to your creative inputs being processed by these external AI services, you should refrain from using the generation features of this application.