Privacy Policy

This privacy policy explains what information LLOAA ("we", "us") collects when you use lloaa.xyz, why we collect it, who we share it with, and how you can exercise your rights over it.

What we collect

• Account information. Email address, password (stored hashed by Supabase Auth), and the display name you choose at signup.
• Generated content. The vocabulary words, character names, settings, and other inputs you enter, plus the stories and letters that LLOAA generates from them.
• Sharing data.When you share a generation, we record the destination (e.g. KakaoTalk, Instagram), the tracking-link short ID, and clicks on that link. Click data includes a one-way hash of the visitor's IP (with a salt) and a randomly-assigned cookie ID — both used only to deduplicate counts toward the leaderboard and never to identify individual visitors.
• Anonymous-session data. If you use LLOAA without signing up, we store a random session token in a cookie so we can count your generations against the free tier.
• Analytics.Page views and product events (e.g. "generation_completed", "share_initiated") collected by PostHog. Includes browser, device type, and language.

How we use it

• To deliver the core service: AI generation, storage, sharing.
• To enforce free-tier limits and prevent abuse.
• To compute the leaderboard.
• To send you transactional email (verification codes).
• To understand which features people use and improve the product.

Third parties

We share data with these processors solely to operate the service:

• Anthropic — receives your generation inputs to produce stories and letters.
• Supabase — hosts our database (your account, generations, shares).
• Vercel — hosts the application.
• Resend — sends verification emails on our behalf.
• PostHog — receives product-analytics events.

We do not sell your data.

How long we keep it

Account information and generations are kept until you delete your account. Anonymous session data is kept for one year from the most recent activity. Click logs are kept for one year for leaderboard and abuse-prevention purposes.

Your rights

You can ask us to access, export, or delete the data we hold about you by emailing hello@lloaa.xyz. We will respond within 30 days.

Cookies

LLOAA uses cookies for authentication, anti-abuse, and the click deduplication described above. We do not use third-party advertising cookies.

Children

LLOAA is not directed at children under 13. If you believe a child under 13 has signed up, contact us and we will delete the account.

Changes

We may update this policy as the product evolves. Material changes will be reflected in the "Effective" date at the top of this page.

Contact

Privacy questions: hello@lloaa.xyz.