Privacy Policy
This Privacy Policy explains how the Operator of Voidlust / Crave (“we”, “us”, “our”) collects, uses, and protects information when you use our website, PWA, and related services (the “Service”). It supplements our Terms of Service.
1. Who We Are
The data controller for the Service is the Operator — sole proprietor (individual entrepreneur) and owner of the Voidlust / Crave project. Registration details are published on our legal pages. We do not publish a physical mailing address. For privacy requests, contact: support@crave4.app.
2. Information We Collect
Account and profile
- Email address and display name (or pseudonym) when you register;
- Account identifiers and authentication data;
- Preferences stored in your browser (e.g., language, progress).
Usage and content
- Story choices, chat messages, and interaction history needed to deliver the Service;
- Technical logs: IP address, device type, browser, timestamps, and error diagnostics;
- Support correspondence when you email us.
Cookies and similar technologies
We use cookies, localStorage, and similar browser storage to:
- keep you signed in and maintain session state;
- remember age verification and language settings;
- store in-app progress and preferences;
- protect the Service against abuse.
You can control cookies through your browser settings. Disabling essential cookies may limit functionality, including login.
3. Payment Information — We Do Not Store Card Data
We do not store full credit or debit card numbers, CVV/CVC codes, or magnetic-stripe data on our servers.
All payment information is collected and processed by our PCI-DSS compliant payment gateway (including high-risk–enabled processors such as SegPay or other authorized providers). Card data is tokenized by the gateway: we may receive only a secure payment token, transaction ID, subscription status, and billing metadata necessary to fulfill your purchase.
Your payment is subject to the gateway’s privacy and security practices. We recommend reviewing the processor’s policies at checkout when provided.
4. How We Use Information
- Provide, personalize, and improve the Service;
- Generate interactive story content via AI providers (limited context is sent to API partners as needed);
- Process payments, subscriptions, and virtual currency (Crystals);
- Communicate with you about your account or support requests;
- Detect fraud, enforce our Terms, and comply with legal obligations;
- Analyze aggregated usage to improve performance and safety.
5. Legal Bases (EEA/UK Users)
Where GDPR or similar laws apply, we rely on: performance of a contract (providing the Service); consent (where required, e.g., non-essential cookies or marketing); legitimate interests (security, fraud prevention, product improvement); and legal obligation.
6. Sharing With Third Parties
We may share data with:
- Hosting and infrastructure providers;
- Payment processors (tokenized billing only);
- AI service providers (e.g., for text generation, limited to necessary context);
- Analytics and security tools, where used;
- Law enforcement or regulators when required by valid legal process.
We do not sell your personal information. A list of sub-processors may be provided upon request to support@crave4.app.
7. International Transfers
Your data may be processed in countries other than your own. Where required, we implement appropriate safeguards for cross-border transfers.
8. Retention
We retain information while your account is active and for a reasonable period afterward for backups, disputes, fraud prevention, and legal compliance. Chat and story logs are kept only as long as necessary for the purposes above.
9. Security
We use reasonable technical and organizational measures, including HTTPS encryption in transit, access controls, and keeping secrets out of public code repositories. No method of transmission over the Internet is 100% secure.
10. Your Rights
Depending on your location, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing or withdraw consent. To exercise these rights, email support@crave4.app. We will respond within 30 days where required by law.
EEA/UK residents may lodge a complaint with their local supervisory authority.
11. Children
The Service is not directed to anyone under 18. We do not knowingly collect data from minors. If you believe a minor has used the Service, contact us and we will delete the account.
12. Changes
We may update this Policy. The current version is always at privacy.html. Material changes may be communicated through the Service or by email where appropriate.
13. Contact
Voidlust / Crave — Operator
Email: support@crave4.app