'/%3e%3crect%20x='2.75'%20y='2.75'%20width='58.5'%20height='58.5'%20rx='15.25'%20stroke='%23F3D5AF'%20stroke-opacity='.22'%20stroke-width='1.5'/%3e%3cpath%20d='M42.7%2018.8C39.8%2016.6%2036.4%2015.5%2032.4%2015.5C25.2%2015.5%2020.4%2019.2%2020.4%2024.6C20.4%2029.3%2023.6%2031.7%2030.8%2034.1C35.4%2035.6%2037.1%2036.7%2037.1%2039C37.1%2041.6%2034.8%2043.2%2031.1%2043.2C27.4%2043.2%2023.7%2041.7%2020.8%2038.9L17.5%2043.2C21%2046.8%2025.8%2048.6%2031%2048.6C39.2%2048.6%2044.4%2044.6%2044.4%2038.3C44.4%2033.4%2041.3%2030.9%2033.9%2028.5C29.4%2027%2027.7%2026%2027.7%2023.9C27.7%2021.8%2029.6%2020.7%2032.6%2020.7C35.5%2020.7%2038%2021.6%2040.6%2023.5L42.7%2018.8Z'%20fill='%23FFF3E1'/%3e%3cpath%20d='M18%2052C22.2%2054%2026.9%2055%2032%2055C37.1%2055%2041.8%2054%2046%2052'%20stroke='%23E98463'%20stroke-width='3'%20stroke-linecap='round'/%3e%3cpath%20d='M49.5%2010L51%2013L54%2014.5L51%2016L49.5%2019L48%2016L45%2014.5L48%2013L49.5%2010Z'%20fill='%23F3D5AF'/%3e%3c/svg%3e){kind=small}
Legal
Privacy
Effective 8 September 2026
Controller
The data controller is Emanuele Pavanello, independent operator of Storyloom. Privacy requests may be sent to hi@emadev.co.
Data processed
Storyloom processes account and session data, books and prompts you provide, generated artifacts, encrypted provider credentials, job records, favorites, listening progress, rights declarations and content reports.
Purposes and legal bases
Data is processed to provide the requested service and manage accounts, to publish content at your request, to comply with legal obligations, and for the legitimate interests of securing the service, preventing abuse and handling reports. Listening is associated with an account so the same person is counted once per book.
Providers and recipients
Infrastructure, authentication, email, database and storage providers process data where configured. When you request cloud generation, relevant prompts or book passages are sent to OpenRouter and the selected model provider. Your API key is encrypted at rest and is never returned to the browser after storage.
Public information
A public story exposes its title, creator display name, summary, language, category, selected chapters and published media. Email addresses, provider keys, jobs, private registries and internal provenance are not public.
Retention and control
Account and project data are retained while the account or project remains active. You can unpublish, remove a key, move a book to recoverable trash and permanently delete it. Security, rights and moderation records may be retained for as long as reasonably needed for legal claims, abuse prevention or compliance.
Your rights
Depending on jurisdiction, you may request access, correction, deletion, restriction, portability or objection, and lodge a complaint with your supervisory authority. Send requests to hi@emadev.co. Private routes use authentication; robots.txt is not treated as a privacy control.
Cookies
Storyloom uses authentication and security storage necessary to operate the service. If optional analytics or advertising technologies are introduced, this notice and the consent interface will be updated before they are enabled.