STORY LAUNCHPAD

Privacy

Understand how your information is used before deciding what to share.

Start without an account. You decide when to publish.

Updated: September 9, 2026

What you provide

A random browser identifier connects you to your stories. No name or account is required. Answers, story settings, chapters, checks and continuity notes are stored on the server. An edit link is a key to your work: do not forward it.

Optional recovery email

We store a keyed email hash and AES-GCM encrypted address, not plaintext. Resend sends recovery messages and receives the recipient address and delivery records. Verification and login links expire after 10 minutes and work once. Confirming recovery signs out older devices and retires old edit links.

Models and your writing

When you request generation or a check, relevant settings and text go to model services: OpenRouter and its providers, with the official DeepSeek API as a fallback. Moli does not train its own models on your stories. Provider retention and training policies vary; we cannot promise that every provider excludes training. Avoid identity documents, passwords and other people’s private information. External detection requires separate consent.

Retention and deletion

Stories and optional email records remain until a verified deletion request or service cleanup. Recovery tokens are removed 24 hours after expiry; email rate-limit records remain for 2 days. Operational statistics and safety logs are retained as needed to maintain the service. For deletion or privacy questions, contact moli@freem.ai with your project ID from a browser that can edit it. We verify the request before acting.

Publication and statistics

Public stories can be read by anyone and indexed by search engines. Anyone with an unlisted link can still read it. Rate limits use a keyed IP hash, not raw IP addresses in application tables. We record workflow stages, platform, language, country or region, model cost and error categories without story text to manage cost and fix failures. Infrastructure and email providers may retain their own operational logs.

Service locations

Cloudflare, Supabase, Resend and model providers may process data across borders. Submit only content you have the right to use. Minors should use the service with a guardian’s consent and guidance.