Privacy Policy

Last updated: October 26, 2026

Overview

TassandraInk respects your privacy. This policy explains what data we collect, how we use it, and the choices you have. It covers your account, your writing, your comments and reactions, the sharing tools, and how community interactions are moderated.

Data We Collect

  • Account information: email address and name when you register, plus your self-confirmed adult status (a boolean, the date you confirmed, and a declaration version) required to use account features. This is a self-declaration, not verified age.
  • Writing you submit: text you paste into the Revision Desk and Writing Studio, optional details such as book type and where you are stuck, saved drafts, and revision history that includes AI-generated feedback, next steps, and practice exercises.
  • Comments and reactions: the text of comments you post, your display name, the content item you commented on, your like and helpful reactions, and any report reasons you submit.
  • Community posts and replies you choose to share publicly.
  • Newsletter signups: email address and the signup source (such as the homepage).
  • Contact form submissions: name, email, the topic you select from the "What can we help you with?" list (such as account help, membership and billing, cancellation or refund, Revision Desk or Writing Studio, community or reporting, privacy or account deletion, or a general question), an optional subject line, and your message. Submissions are saved to our database and sent via email to the site administrator for follow-up.
  • Usage data: AI review counts and dates to enforce daily and trial usage allowances.
  • Game records: which literary game you played, the level played, your score, how many answers were right, the number of answers or words tried, and the date. Finished games are kept in your account history, and the progress shown in the Game Room — games played, accuracy, streaks, personal bests, badges and recent rounds — is worked out from them.
  • Collaborative stories (Story Weavers): the story you and one other member write together, held a turn at a time with the name of the writer of each turn, the invitations sent and received, whether each writer has agreed to share the story, and whether a moderator has released it. Each writer retains ownership of their own contributions. Stories are not publicly listed: access is limited to their writers and authorized administrators for operation, support and moderation, unless both writers consent to Showcase sharing and a moderator approves it. The Showcase is available to signed-in, age-confirmed readers, not signed-out visitors. Either writer withdrawing consent removes the story from the Showcase. Inactivity closes a story as unfinished without automatically deleting its text; retention and privacy requests are described below.
  • Showcase reports: which shared story you reported, the reason you gave (optional), and whether a moderator dismissed the report or held the story back. A report is visible only to administrators in the moderation queue, where your display name is shown so the story can be reviewed, and the report record is kept as moderation history even if the story is later withdrawn.
  • Tournament entries: which tournaments you joined or stepped away from. Standings are worked out from the same verified game records above; no separate score is kept for a tournament.
  • Daily challenge records: the day, which question of the bank was offered, the answer you chose, whether it was right, and the points recorded for it. A visitor who is not signed in has no such record: their answer is shown back to them and stored nowhere.
  • Profile settings: whether your literary profile is public, whether your badges, your bests and totals, and your recent rounds are shared on it, whether you are ranked on the Game Room leaderboards (off until you switch it on), and whether you have already seen the Game Room’s welcome. Every one of these is off or private until you choose otherwise.

How We Use Information

  • To deliver the service: displaying reading content, lessons, and your portfolio.
  • To generate AI feedback on writing you submit to the Revision Desk and Writing Studio.
  • To save your drafts and revision history so you can return to your work.
  • To moderate comments, reactions, and community posts before they appear publicly.
  • To respond to support and contact requests.
  • To manage subscriptions, trial periods, and paid access.
  • To enforce daily and trial usage limits on AI tools and games.
  • To decide the level each member is offered in the literary games, from their own recent game results.
  • To secure the platform and prevent abuse, fraud, and unauthorized access.
  • To send newsletters to addresses that have signed up for them.

Adult Confirmation

Account features — including the free trial, AI tools, community participation, comments, reactions, and checkout — require an 18+ self-declaration. We store the declaration linked to your account, the confirmation timestamp, and the declaration version. This is a self-declaration, not verified age; we do not collect your date of birth or any identity documents for it.

If you sign up or sign in with Google, your TassandraInk account may be created and you may be signed in before you complete the declaration; the declaration is then requested before account features become available. Public reading content remains available without an account and without confirmation. You do not need to complete the declaration to cancel an existing subscription, check billing status, make a privacy request, retrieve or delete your saved writing, or sign out; those controls remain reachable without confirmation.

Private Writing and AI Processing

Your drafts and revisions are not displayed publicly by default. Authorized administrators and service providers may access or process your information as needed to operate, support, secure, and provide the requested services. Access to your private drafts is controlled on the backend through row-level security tied to your account.

When you use the Revision Desk or Writing Studio, the text you submit is processed through Base44’s AI integration to generate feedback. Optional details you provide, such as book type or where you are stuck, are also sent to tailor the response. The specific AI provider and model are determined by the Base44 platform, not by TassandraInk, and may change over time. Automatic model selection does not identify which provider handles each request. We label all AI feedback clearly. Next steps, when provided, are optional guidance based on the excerpt you submitted, not an assessment of an entire book.

Base44’s published documentation permits the use of non-Enterprise workspace data for model training and provides no opt-out setting. Support has not confirmed how that rule applies specifically to end-user submissions made through the AI integration used by these tools. As a result, provider-specific training practices, retention periods, human review, and downstream deletion procedures for your submitted text remain unconfirmed. We cannot confirm whether your writing is used to train AI models, and we cannot confirm that it is excluded from training. We also cannot promise deletion of your submissions from AI-provider systems or a specific deletion timeline. Until we have verified terms to share, please treat any text you submit to these tools as potentially visible to the third-party service that processes it, and avoid submitting confidential, sensitive, or unpublished writing you are not comfortable sharing with these services.

This app-level AI processing is separate from the Base44 app-building assistant, which is a tool used to build and maintain this app and is not part of your in-app experience.

You retain ownership of your writing. Saving a draft or submitting text for AI feedback does not transfer ownership to TassandraInk, Base44, or any AI provider. You can delete your drafts and revision history at any time using the controls described in the Moderation and Delete Controls section, and you can request deletion of your account and associated data through our contact form. Deletion from AI-provider systems, if any occurs, is governed by those providers’ own terms and is not within our control.

Sharing your writing in the community always requires an explicit action from you. Drafts are not published to the community automatically.

Membership and Billing

Payments are processed through Base44 Payments. TassandraInk does not collect or store full payment card numbers. We retain membership and payment-related records needed to manage access, cancellations, refunds, and payment reconciliation.

The records we retain include your membership status and plan, subscription and order identifiers, checkout session identifiers, buyer email, charged amount and currency, billing period dates, and cancellation events. We do not store full card numbers. Card processing is handled by the payment provider.

Comments, Reactions, and Reports

When you comment on a Library work, blog post, lesson, or weekly prompt, we store the comment text, the content item it is attached to, your user ID, and your display name (taken from your account name). Your user ID is linked to your account but is never shown to other readers. Comments from members start in a pending state and become visible only after a moderator approves them. Comments posted by administrators are approved automatically.

When you click Like or Helpful, we store a record linking your user ID to the content item and the reaction kind. The total count of reactions is shown to all readers, but who reacted is not displayed publicly. Each account can have one active reaction of each kind per item.

When you report a comment, we create a report record that links your user ID to the comment you reported, the reason you provide (optional), the date, and a status (open, dismissed, or actioned). Report records are visible only to administrators in the moderation queue, where your display name is shown to help a moderator review the report. You cannot report your own comment, and a duplicate active report from the same account is not created. Report records are kept as moderation history even after the reported comment is removed, and their status is updated when a moderator resolves them.

What Other Readers Can See

  • Approved comments: your display name and comment text can be read by anyone who has access to the content. On free content, that includes signed-out visitors. On members-only content, only readers with access to that content and administrators can read the comments.
  • Pending and rejected comments: visible only to you and to administrators. You can see your own pending and rejected comments on any content you have commented on, including members-only content you no longer have access to. A pending or rejected badge appears on your own comment so you know its status.
  • Reaction counts: the total number of likes or helpful marks is visible to all readers. Your individual reaction is not shown to others.
  • Reports, the reporter’s display name, and report reasons: visible only to administrators.
  • We do not intentionally display your account email address or internal user ID to other readers. Your display name appears with approved comments and community posts. Any personal information you include in your public posts or comments may also be visible.
  • Game records and your literary profile: your scores, levels, game history, badges and daily challenge answer are visible to you and to administrators, and are not ranked publicly. They are private to you by default. They become visible to anyone only if you turn your literary profile public, and even then only the parts you choose — your badges, your bests and totals, or your recent rounds, each switched on separately. A public profile shows the display name and biography you set, and never your email address or your internal account id. Turning the profile private again closes it at once.

The Literary Duel

A duel is recorded as a match in your account: which game it was, the level, who you played against, the answers each of you gave, both scores and the outcome, and when the match was offered, begun, settled or abandoned. It is kept so the round can be played fairly and so your results appear beside your other rounds. As with a solo round, the score is worked out on the server.

Your opponent sees your display name and nothing else — never your email address, your account id or any part of your literary profile that you have not made public. A member you invite who cannot be reached is told only that you are not accepting invitations; the reason is never disclosed to you.

Two settings of your own are kept for duelling: whether you accept invitations, and whether you have snoozed them, together with the list of members you have blocked. That list is private. A blocked member is never told that they have been blocked, and no invitation passes in either direction between you. Dismissing an invitation removes it from your own view only. Our administrators can see duel records for moderation, support and the reconciliation of game allowances, as they can see other game records.

Moderation and Delete Controls

All member comments are reviewed by a moderator before they appear. Administrators can approve, reject, or delete any comment. Comments posted by administrators are approved automatically and appear without waiting for moderation. You can edit your own comment at any time; a non-admin edit returns the comment to pending for re-moderation, while an administrator edit may set the moderation status directly. You can delete your own comment at any time from the comment area. Administrators can also delete any comment.

Community posts and replies from members start in a pending state and become visible only after a moderator approves them. Posts and replies by administrators are approved automatically. Posting or replying in the community requires a paid membership or administrator access. You can edit your own community posts and replies; a non-admin edit returns the post or reply to pending for re-moderation, while an administrator edit may set the moderation status directly. You can delete your own community posts and replies from the community pages. Administrators can also delete any community post or reply.

Reactions can be removed by toggling them off. You can delete your drafts from the portfolio page. Deleting a comment, reaction, post, or draft removes it from the active database.

Retention

Cancellation itself does not delete your saved writing, drafts, or revision history. Data retention and deletion are governed by this Privacy Policy.

We retain information for as long as needed to provide the service and for the purposes described in this policy:

  • Account data: kept while your account is active and thereafter as needed to meet legal, security, and operational obligations.
  • Adult declaration: the confirmation record is retained with your account. We do not automatically delete it, and re-confirming under a new declaration version does not automatically delete earlier records. You may request deletion of your account and associated adult-confirmation records through our contact form. Requests are handled subject to applicable legal retention requirements and backup limitations.
  • Writing: drafts and revision history are retained until you delete them or request deletion. Membership expiration or cancellation does not automatically delete your saved writing.
  • Collaborative stories: the normal writing controls do not let one writer overwrite or delete either writer’s turns. Account deletion does not currently trigger automatic removal of collaborative stories. Account or privacy deletion requests are reviewed individually, including each contributor’s ownership, the other writer’s rights, personal information in the text and attribution, and any applicable legal, security or dispute-retention requirements. A request may require removing or de-identifying personal information, restricting access, or deleting content where appropriate; we do not promise permanent retention or automatic complete deletion of the shared work. Withdraw sharing consent to remove a story from the Showcase, or contact us if you cannot access your account.
  • Contact submissions: the message and your contact details are retained for support follow-up. A copy may also be retained in the email system of the administrator who received it.
  • Moderation records: comments, reactions, posts, comment reports and showcase reports are retained until deleted by you or a moderator. A report record, including the reporter’s user ID and display name, is retained when the reported comment is later removed, so moderation history is preserved.
  • Usage records: AI usage counts are retained to enforce daily and trial limits.
  • Game records and daily challenge records are retained with your account so your history and level are kept; they are not deleted when a membership expires. Your literacy profile settings and the badges you have earned are kept with them, so a badge you have earned is not lost and a profile you have made private stays private.
  • Billing records: membership and payment-related records are retained as needed to manage access, cancellations, refunds, and reconciliation.

We may retain information longer where required by law, needed to protect against fraud or abuse, or needed to resolve disputes. Removal from the active service does not establish removal from recoverable records or backups. Platform recovery and backup retention periods have not been verified, so we do not promise a deletion deadline, permanent retention, or immediate removal from all copies.

Sharing and Social Platforms

The Share button lets you share a link to a Library work, blog post, lesson, or weekly prompt on Facebook, Instagram, LinkedIn, WhatsApp, or X. When you choose a platform, the app opens that platform’s share page in a new browser tab. What is sent depends on the platform:

  • Facebook and LinkedIn: only the content link is passed to the platform’s share page.
  • WhatsApp: the content title and link are passed as share text.
  • X (Twitter): the preview excerpt and link are passed as tweet text.
  • Instagram: Instagram does not support direct sharing from websites. The app copies the excerpt, author name, and link to your clipboard, then shows instructions to paste manually into Instagram. You can also download the preview image. No data is sent to Instagram automatically.

The Copy Link button copies the content’s link to your clipboard using your browser’s clipboard feature. No data is sent to any server when you copy a link.

The share preview shows only public information: the title, author name, a spoiler-free excerpt, and the link. No account data, email, or private writing is included in any share action. Visiting a third-party sharing page may disclose technical information such as your IP address and browser details to that provider. Once you are on a social platform, that platform’s own terms and privacy policy apply to what you post.

Cookies, Analytics, and Third-Party Services

The TassandraInk app code does not load analytics services, advertising networks, social media tracking pixels, or social media SDKs. The sharing tools use plain links to each platform’s share page and do not embed Facebook, Instagram, Twitter, or LinkedIn plugins on our site.

The contact form uses Cloudflare Turnstile, a bot-detection service. Turnstile loads a script from challenges.cloudflare.com and may set cookies or collect technical data such as your IP address and browser information to verify you are human. The verification token is checked server-side before your message is saved or sent. Cloudflare’s practices are governed by its own privacy policy at cloudflare.com/privacypolicy.

Fonts are loaded from Google’s font service (fonts.googleapis.com). Google may log your IP address as part of serving the font files, as is standard for any CDN. Google’s practices are governed by its privacy policy at policies.google.com/privacy.

The app is hosted on the Base44 platform, which manages authentication, the database, and file storage. Base44 sets a session identifier to keep you signed in and may set or read additional cookies or log technical data as part of hosting and securing the service. Base44’s practices are governed by its privacy policy at base44.com/privacy-policy.

Payments are processed through Base44 Payments. The payment provider may set cookies or collect technical data on its checkout pages. Its practices are governed by its own privacy policy, which is presented during checkout.

We do not load analytics or advertising cookies from within the app code itself. We cannot make guarantees about cookies or tracking set by the Base44 hosting platform, Cloudflare Turnstile, Google’s font service, or the payment provider, as those are controlled by their respective providers and may change without our knowledge.

Your Rights and Privacy Requests

You can delete your drafts, comments, reactions, and community posts at any time using the controls described in the Moderation and Delete Controls section. To request access to, correction of, or deletion of your personal data, or to request deletion of your revision history or your account, contact us through the contact form. We will verify your identity before acting on a request. Some requests may be subject to applicable legal exceptions, such as where retention is required by law or to protect against fraud.

To unsubscribe from the newsletter, contact us through the contact form and we will remove your email from the newsletter list.

The availability of specific legal rights regarding your personal data depends on your jurisdiction. We will review and respond to privacy requests within the time required by applicable law.

Contact and Updates

Questions about privacy? Use our contact form. We may update this policy from time to time. When we do, we will post the revised policy here with an updated date.