Privacy policy

Last updated September 14, 2026

This is working legal text written for clarity. It has not been presented as a substitute for professional legal review.

This policy covers apocky.com and the website features it currently provides. A separately hosted project may have its own policy. Links to services such as Ko-fi, Patreon, GitHub, Medium, and other project sites take you to services operated by other organizations.

Short version

Apocky does not sell personal information or use it for targeted advertising.
Optional diagnostic sharing is off until you save a choice.
The site can still be used when optional diagnostic sharing is off.
The public homepage does not require an account.
Do not upload a log, image, or other file until you have checked it for private information.

Information the site may process

Basic web requests

Hosting and security systems may process an internet address, browser information, requested page, timestamp, and response status to deliver the site and respond to abuse or failures. These are ordinary server records, not a promise that no infrastructure provider ever receives an internet address.

Optional site data

If you choose to share it, the site may send limited diagnostic information. The choice panel describes each level before you save it. Depending on the selected level, this can include page errors, timing measurements, or technical details needed to reproduce a failure. “Diagnostics” means information used to find and fix technical problems.

Account information

If you use an account feature, the authentication provider may supply an email address, provider account identifier, display name, and session information. A session is the temporary record that keeps you signed in. The public homepage and project links do not require this.

Payments and external support

Ko-fi, Patreon, and other linked support services apply their own privacy policies. If apocky.com offers a direct payment screen, the payment processor handles card details; Apocky may receive transaction identifiers, status, amount, and contact information needed for the transaction or refund.

Content you deliberately submit

A publishing or sharing feature processes the text, file, title, account attribution, and settings you choose to submit. Nothing on the public homepage requires you to publish. Review private material before submitting it.

Talking to Apocrypha

When you send a message to Apocrypha, the message is stored on the server as a work item so the machine that answers can pick it up, and the reply is stored with it. This is how the answer reaches you; it is not a separate copy kept for analysis.

Signed out. No account is attached. You are identified only by a random value placed in a cookie, and that value reaches the database only as a one-way hash. The stored message and reply are deleted automatically after 30 days. The visible conversation in your browser stays on your device and is not uploaded.
Signed in. Conversations are kept against your account so the same conversation is available on your other devices, and are retained until you remove them or close your account.
Training. What you type is not used to train a model. Each answer carries a statement to that effect, and the page checks it before displaying anything.

Answers are produced on hardware operated by Apocky rather than sent to a third-party AI provider, so the content of a conversation is not shared with one.

Camera, microphone, and local files

The public homepage does not request camera or microphone access. A separate private experience may offer those inputs, but the browser and the page must ask before access begins. A local game log, screenshot, or save file remains on your computer unless you choose a feature that uploads it.

Browser storage and cookies

The site can use browser storage to remember your optional-data choice and interface preferences. Account features use session storage or cookies to keep you signed in. Blocking or clearing this storage may sign you out or reset preferences.

Public quests and the symbolic Spellbook use separate versioned browser-local records. Quest progress is saved as completion markers. The Spellbook stores only workings you explicitly choose to save, including their source text, symbolic plan, interpretation, and integrity receipt. Oracle questions and unsaved Spellcraft input are not written by those tools. The symbolic tools do not send question or working text through site telemetry, and the Spellbook provides export, delete-one, and delete-all controls.

Why information is used

To deliver pages and files you request.
To keep an account signed in when you choose to use one.
To complete and document a transaction you initiate.
To display content you deliberately submit.
To secure the service and diagnose errors.

Sharing with service providers

Hosting, authentication, database, email, and payment providers may process information only as needed to provide their services. Their own systems, locations, and retention practices also apply. Apocky may disclose information when legally required or when reasonably necessary to protect people and the service.

Retention and deletion

Different records need different retention periods. Session data may be short-lived; security and transaction records may need to remain longer. This policy does not promise an automatic deletion period that the current system has not verified. You may ask what is held about you or request correction or deletion. Some records may need to remain when required by law, fraud prevention, or an unresolved dispute.

One period is stated because it is enforced rather than intended: signed-out Apocrypha messages and their replies are deleted 30 days after they are created, by a scheduled job that runs daily.

Your choices

Keep optional site data off or change the saved level.
Use the public pages without creating an account.
Sign out and clear browser storage.
Export or delete one or all device-local Spellbook entries.
Choose whether to submit or upload content.
Ask for access, correction, export, or deletion of personal information associated with you.

Children

The service is not directed to children under 13, and Apocky does not knowingly collect their personal information. Contact Apocky if you believe a child has submitted personal information.

Security

Reasonable technical and organizational measures are used to protect information, but no website or storage system can promise perfect security. Report a suspected security issue privately rather than posting sensitive details in public.

Contact

For a privacy request, email apocky13@gmail.com with [privacy] in the subject.

Changes to this policy

The date at the top changes when this policy changes. Material changes should be explained before they take effect when advance notice is reasonably possible.