Privacy Policy

This policy explains what personal data SAGALITH collects and why. The data controller is Torneus Studios, Sweden. Contact us through the contact form.

1. What we collect

• Account: your email address and password (stored scrambled), or your basic Google profile if you sign in with Google.
• Your work: worlds, entries, manuscripts, notes, maps and uploaded images.
• Usage of AI: how many credits you use and for which feature.
• Payments: plan, purchase history and billing country. Stripe handles your card details; we never see or store your full card number.
• Messages: what you send through the contact form, and community posts and comments you write.

2. Why we use it (legal basis)

• To provide the service you signed up for: your account, storing your work, AI features, payments (contract).
• To keep SAGALITH secure, prevent abuse and understand how the site is used (legitimate interest).
• To show content publicly only when you turn on a public wiki or post in the community (your choice).
• To keep payment records as Swedish accounting law requires (legal obligation).

We never sell your data and we do not use your private content to train AI models.

3. Who receives data

• Lovable (hosting, database, file storage and sign-in) stores the service and your content.
• AI providers, through Lovable's AI service: when you use an AI feature, the relevant text or image is sent to generate the reply.
• Stripe processes payments and taxes.
• Email delivery for password resets and service messages.
• Google, if you sign in with Google, and because our fonts load from Google Fonts, which receives your IP address and browser details when a page loads.

Some of these companies may process data outside the EU/EEA. Where they do, transfers rely on safeguards such as the EU's standard contractual clauses.

4. Visitor statistics

We use Lovable's built-in visitor analytics to see how the site is used. It uses no cookies, stores nothing on your device, doesn't keep IP addresses and doesn't identify visitors. It records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, and errors. This is recorded for every visitor. Detailed data is kept for 90 days and daily summaries for a year. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.

5. Cookies and browser storage

We use no advertising or tracking cookies. Your browser stores a few things the site needs to work: your sign-in session, your dark or bright theme, your language and some screen preferences such as pinned entries in the lore drawer. Stripe may set its own cookies on its checkout pages.

6. How long we keep it

We keep your account and content until you delete it or ask us to delete your account. Payment records are kept for seven years as Swedish accounting law requires. Contact messages are deleted when no longer needed.

7. Your rights

You can ask to see, correct, delete, restrict or move your data, and object to processing based on legitimate interest. You can export your worlds yourself at any time, free on every plan. To use your rights, contact us. You can also complain to the Swedish Authority for Privacy Protection (IMY), imy.se.

8. Changes

We will update this page if anything changes and tell you about important changes by email or in the app.