Your writing. Your information.

Unpublished drafts stay in your browser

Storyteller stores stories, local profiles, settings and gesture shortcuts in an IndexedDB database called storyteller. Pictures use a separate browser-local picture store. Browser storage also holds preferences and profile/session-return hints. Saving a local draft does not send its text to Pallantide's server, and drafts do not automatically sync between devices.

Clearing site data, changing browsers/devices, private browsing, quota failures or browser cleanup can lose local writing. If persistent storage is unavailable, the app can fall back to temporary memory; that is not durable storage. Export a full backup from Settings → Data, including pictures if needed. Restore adds copies and avoids replacing existing stories. Keep backups private: local profile PINs are a convenience lock, not encryption.

ChatGPT sign-in and public profiles

Writing locally does not require a Community account. Publishing, commenting, liking and following require ChatGPT sign-in. ChatGPT Sites manages the sign-in redirect, callback and session. Pallantide receives a Site-specific user identifier, email address and an optional name. It stores a Community profile, identity email, display name, public username, biography, role and account timestamps in its hosted database.

Your public username, display name, biography and published stories can appear on your writer page. Email is not included in ordinary public profile responses. Choose a display name you are comfortable sharing. New usernames are generated without using the email address.

The app does not receive your ChatGPT password, request access to conversations or memories, or store an OpenAI API key. It does not implement its own OAuth token store. The hosting provider manages authentication/session cookies. Signing out of Community does not erase the local IndexedDB draft databases. See how sign-in works.

Publishing and Community data

Publishing sends the selected story text, episode title and associated pictures to the server. Story/series descriptions, covers, character details and any notes included in that text can also become public. Published episodes can be read without signing in, linked from your public profile, and receive comments, likes or follows. Do not publish confidential information or material you lack permission to share.

Community stories, episodes and profiles are currently marked noindex and omitted from the sitemap. This discourages compliant search engines; it is not privacy protection and cannot prevent sharing, copying or every crawler. Removing the online episode does not remove copies readers already saved. Workspace drafts remain on the device.

Pictures

Pictures are selected locally, resized/re-encoded in the browser and uploaded to Pallantide's hosted R2 storage when publishing needs them. New files have a 2 MB limit. The server stores the received bytes and dimensions; it does not promise to remove all embedded metadata. Original pictures and generated thumbnails use the site's media URLs. Anyone who has a working published picture URL can request it; this is not private file storage. The editor does not automatically load arbitrary externally linked story images.

Hosting, cookies, logs and third parties

The current application uses ChatGPT Sites, Cloudflare Workers, D1 and R2 for hosting, Community records, files and security processing. Requests necessarily pass through that infrastructure, which may process IP addresses, browser/request details and security/session cookies. A Cloudflare security cookie and a secure, HttpOnly login-state cookie were observed during read-only testing; post-login session details and provider retention have not been independently audited.

No advertising, analytics SDK, third-party tracking script or AI-generation API was found in the active app. Error logs use generic error classifications, not story text or credentials. Hashed account/IP-derived request counters support abuse protection; cleanup is opportunistic. A manual AI copy workflow sends text only when you choose to paste it into an outside service, whose policy then applies.

Support requests

The contact form stores your reply email, chosen category, message and submission time in Pallantide's private operator inbox. Only administrators may read or delete inbox records. Do not submit passwords, authentication codes, API keys or unnecessary sensitive information. No automatic support-email delivery or response-time promise is configured.

Retention and deletion

Local drafts stay until you or your browser remove them. You can delete local stories/profiles and export backups in the workspace. Community records remain until deleted by the user or moderated; there is no general automatic retention deadline in the application.

Delete a published episode through its author controls to remove its online database record. Delete Community account in Account settings removes the account and its owned story/episode records; comments are erased and marked deleted. It does not delete local drafts or your ChatGPT account. Signing in again can create a new Community profile.

Deleting database records does not guarantee erasure from logs, exported backups, reader/browser caches or orphaned R2 objects. The app does not yet have a verified provider-wide erasure schedule or automated backup expiration policy. Ask the operator about remaining copies; do not rely on account deletion as immediate erasure from every storage layer.

Questions and requests

Use Contact Pallantide for privacy, access or deletion questions. built by @vvrs with love. Provider retention, operator identity and the final policy must be confirmed before this draft is approved.