Your little space stays yours.

Your account and conversations

Google and Supabase Auth handle sign-in. Supabase stores your account ID, email, basic Google profile information, and adult-only confirmation. We do not receive your Google password. Necessary cookies maintain your session.

Neon PostgreSQL stores your account-linked conversations, messages, editable memories, image references, and request usage. Each character has a separate conversation. Signing in to the same account on another device restores the most recent 80 messages and saved memories; older messages remain stored until you clear the conversation. We send a compact conversation summary, relevant saved memories, and a limited recent conversation window (up to 40 messages) to the language model. We keep the original messages for your chat history.

This browser keeps an account-specific backup and temporarily retains verified replies awaiting cloud synchronization. A reply can appear before cloud saving finishes; failed saves are retried. Clearing browser data before synchronization can remove that local recovery copy. On first use, earlier text and memories saved in this browser under this same account can be imported once. Older local drawings remain in the original browser backup; anonymous chats are not automatically claimed. Browser cleanup removes local backups and cookies, but does not erase cloud history.

AI processing and image storage

In live mode, your message, recent conversation, and relevant memories are sent through our server to OpenRouter and its model provider for a reply. Separate model calls classify text input and output for safety. Text demo mode, when explicitly labeled, uses preset replies.

When you request or confirm a drawing, the idea and, for character scenes, the fictional character reference images are sent to Volcengine Ark in its Beijing region. Basic request filtering and Ark safety refusals remain enabled. A separate generated-image moderation service has not been added.

Generated images are uploaded to Cloudflare R2. Their public, unlisted links have no signed expiry, but anyone who obtains a link can view the image. Avoid including sensitive information. Links continue working only while the file and public domain remain available. Voice is currently paused.

We log request IDs, providers, duration, status, fixed error categories, and reported usage, not message bodies, images, credentials, or authorization headers. Hosting and AI providers may retain data under their own policies. Do not share confidential information.

Memory and usage limits

We keep a few explicit details: a name or nickname, an ordinary interest, and a note you choose to remember. You can review, edit, or remove them in chat settings. The app does not infer a detailed personal profile.

Request allowances are stored in the database and shared across devices. Failed attempts count because a provider may have processed them. Clearing chats or signing out does not reset allowances. Hourly and daily windows use UTC. A temporary burst limiter may also use a hashed address supplied by a trusted hosting proxy.

Clear your information

Chat & memory settings lets you edit memories or clear one character's cloud conversation, summaries, memories, image references, and local account backup. Generated R2 files are queued for deletion; if storage is unavailable, the app tells you that file deletion is pending. Copies downloaded or cached elsewhere cannot be recalled.

Clearing keeps request accounting metadata and quota counters without the generated reply or image link. Repeat for other characters to clear their conversations. Signing out does not delete your account or history. This preview does not yet offer self-service account deletion or deletion of provider-held records.

For adults only

This service is for adults aged 18 or older. All characters are fictional. Do not share identifying information about real children or recreate a real child's identity.