Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your email address and a hashed password. We also store display names and bio text you choose to provide.

Content You Create

Works, chapters, comments, bookmarks, and other content you post are stored in our database. Chapter content you upload (text and images) is retained until you delete it.

Usage Data

We collect reading progress and bookmark data to provide personalized features. We do not use third-party analytics services.

Authentication Data

If you sign in with Google, we receive your Google account ID and profile image. We do not access your Google contacts, drive, or other services.

2. How We Use Your Information

• To provide and operate the fanfiction.fyi service
• To authenticate you and maintain your session
• To display your content (works, comments, profile) to other users as you intend
• To communicate with you about your account (e.g., moderation notices)
• To maintain site security and prevent abuse

3. Data Storage

Your data is stored on Cloudflare infrastructure (D1 database and R2 storage) in the United States. We use industry-standard practices to protect your information.

4. Cookies

We use a single essential cookie (session) to maintain your login state. No tracking cookies, ad cookies, or third-party cookies are used. Your theme preference is stored in your browser's localStorage.

5. Content Visibility

Published works, comments, and public profiles are visible to all site users. Draft works are only visible to their authors. Email addresses are never shown publicly unless you explicitly set your email visibility to public.

6. Third Parties

We do not sell, share, or transfer your personal information to third parties, except:

• Cloudflare — our hosting and infrastructure provider
• Google — only if you choose to sign in with Google OAuth

We do not use advertising networks or third-party analytics.

7. Data Retention & Deletion

You can delete your content at any time through the site interface. To request full account deletion, contact us at the email below. We will remove your account data within 30 days of a verified request.

8. Security

Passwords are stored using salted SHA-256 hashing — we never store plaintext passwords. Session tokens are randomly generated and expire after 30 days. All data is transmitted over HTTPS.

9. Children's Privacy

fanfiction.fyi is not intended for children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this privacy policy from time to time. We will note the "Last updated" date at the top of this page. Continued use of the site after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Reach us at admin@fanfiction.fyi.