Privacy Policy
Last updated 3 November 2026
The short version: we collect what we need to run your account and your books, we never sell your data or train AI on your writing, and you can export or delete your data yourself.
1. What we collect
- Your account: name, email address, a scrambled (hashed) version of your password, and an optional bio. If you use “Continue with Google”, your Google account id.
- Your writing: books, chapters and everything in your story bible, plus the results of analyses you run.
- Your activity as a reader: comments you post (shown publicly with your name), books you appreciate and books you follow. When you are signed in, your place in each book, your bookmark and your highlights are saved to your account so they follow you between devices.
- Reports and blocks: comments you report (and your reason), and readers you block from commenting on your books.
- Reading statistics for writers: which chapters of a published book were opened and read to the end. Each browser gets a random id; we store only a scrambled (hashed) version of it that differs for every book, never your name, email or IP address, and writers see only totals per chapter. You can turn this off in the reader (“Reading statistics”).
- Usage counts: how many analyses you ran this month (for your plan’s allowance), and how many times each published book was opened (a count only, not who opened it).
- Technical data: your IP address, used briefly to limit abuse (sign-in attempts, rate limits) and kept in our server logs for a limited time.
- If you join the waitlist or report copied work: the email and details you send us.
- Book visits: when you open a published book, we use your IP address and browser name to tell people from automated visits such as search engines. We keep only your country, the name of the site you came from (not its full address) and a scrambled code that changes every day and is deleted after 30 days, never the IP address itself. Writers see only totals.
- Sign-in history: each time your account is signed in, we record the IP address, approximate country and browser, so you can spot a sign-in that wasn’t you. You can see it under Profile; it is kept for 90 days.
- Error reports: if a page fails to load, we keep a report of the error with the page address (without anything after the question mark), your browser name and, if you are signed in, your account, for 30 days, so we can fix it.
- Pictures you upload: book and volume covers, pictures in your chapters and your profile photo. We store them as image files and remove details such as the camera or location from them.
- Saved versions and AI requests: the versions of a chapter you save, and what you send to AI features (such as a passage to proofread) together with the results. They are kept with your book.
- Your author page: once you publish, your name, bio, profile photo, published books and number of followers are shown publicly on your author page. You can hide the page under Profile.
- Messages, picture and book reports: what you send us through the contact form (with your email address and, if you give it, your name), and pictures and books you report, with your reason.
2. Why we use it
- to run your account and keep it secure;
- to store, show and publish your writing as you choose;
- to run the features you use, such as chapter analysis and search;
- to send emails about your account (verification, password resets, approval and similar);
- to email you when a book you follow publishes a new chapter (turn this off under Profile, or with the unsubscribe link in any of those emails);
- to show writers how their chapters are read, as totals;
- to prevent abuse and handle copyright and comment reports.
- to alert our staff to new accounts, messages and reports so they can respond;
- for our staff to read your books, unpublished drafts included, when they need to: to check that an account is used for writing, and for support, moderation and reports. Staff only read them; each time they open a draft, who opened it and why is recorded;
3. What we never do
- We don’t sell your data.
- We don’t use your writing to train AI models.
- We don’t show ads or use advertising trackers.
4. Services that help us run Kanonara
These companies process data for us, only to provide their part of the service:
- Vercel hosts the website and provides visit statistics. Its analytics uses no cookies and records pages viewed without identifying you.
- Fly.io runs our server (in Singapore), and Neon hosts our database.
- OpenRouter and the AI model providers it connects to receive chapter text when you run an analysis, saved chapter text for “Related passages” search, and what you send to the other AI features you use (proofreading, co-writer drafts, character portraits and narrative reports). They process it under their own terms.
- Resend sends our emails.
- Google, only if you choose “Continue with Google”.
- Cloudflare stores and delivers the pictures you upload.
- Telegram delivers alerts to our staff. Alerts about new accounts, messages and reports can include names, email addresses and the text of messages and reports, and security alerts can include IP addresses and browser names.
Some of these services are outside your country, so your data may be processed abroad.
5. Cookies and storage on your device
We use only what the site needs to work:
- sign-in cookies that keep you signed in (a short-lived one, and one that lasts up to 30 days);
- a cookie that remembers your interface language;
- a short-lived cookie that protects “Continue with Google” sign-in;
- your browser’s storage for preferences and reading conveniences: theme, bookmarks, your place in a book, highlights, and unsaved drafts. These stay on your device (and are also saved to your account when you are signed in);
- a random reading-statistics id in your browser’s storage, and whether you turned reading statistics off.
No advertising or tracking cookies.
6. How long we keep it
Your account and writing stay until you delete them. Deleted chapters wait in your book’s trash for 30 days. When you delete your account, everything in it is deleted straight away; backup copies are overwritten over time. Copyright reports are kept as the record of what was claimed and decided. Sign-in history is kept for 90 days; error reports and the daily visitor codes for 30 days. Pictures are deleted with their book or your account. When we take a picture down for breaking the rules, we keep a fingerprint (hash) of it so it cannot be uploaded again. Saved chapter versions stay until you delete them or their chapter.
7. Your choices and rights
- See and change: your profile is editable under Profile.
- Take your data with you: export any book, or a full backup of it, from its Settings.
- Delete: delete your account yourself under Profile, or delete single chapters and books.
- Ask us: for anything else about your data, reply to any email you have received from Kanonara.
8. Children
Kanonara is not for children under 13 (or older where the law requires). If you believe a child has made an account, tell us and we will delete it.
9. Changes
If we change how we handle your data in a significant way, we will tell you by email or on the site first. See also our Terms of Use.