Privacy Policy
v2026-10-14.1 · Oct 2026Chill Play Games LTD, Angel Dimitrov str. 38, office 5, 8016 Burgas, Bulgaria, VAT BG206618799, operates Lorika and is responsible for the personal data described here. For privacy questions and requests, contact [email protected].
Account data includes your email, nickname, account and interface languages, sign-in and session records, and the versions, displayed languages and times of legal actions. Security records can include technical network or browser information and hashes used to protect access and document those actions. Information comes from you, your use of the service and, if chosen, your sign-in provider.
Authoring and upload data includes ideas, instructions, characters, plans, manuscripts, generated and translated text, analysis results, book metadata and the files you submit. Requested AI functions send relevant content and context to external model services. Submit personal information about others only where you have authority to do so; you can use fictional or anonymised material instead.
We use information needed to open and manage your account, store your work and deliver requested writing, analysis, translation and other product functions on the basis of performing our contract with you or taking requested steps before it. We use proportionate security, abuse-prevention, service-diagnostic and support information for our legitimate interests in keeping the service reliable and protecting users; applicable rights to object remain available.
Purchase and usage records include the offer, account, price, currency, payment status, impulse or entitlement movements and information needed to resolve failures or refunds. We process these to provide the requested transaction, keep necessary records and meet applicable accounting, tax and legal obligations. Stripe payments currently operate in test mode. Payment details submitted to a payment provider are also governed by that provider's applicable privacy information.
The waitlist uses your email and recorded optional permission for the promised launch message. It is not permission for a later newsletter or for analytics. You may withdraw before the message by contacting [email protected] or using the available waitlist-removal route. Withdrawing does not make earlier lawful processing unlawful.
Your private workspace is not published merely by writing or uploading. If you enable a public book link, its approved chapters and displayed book and author metadata become available to anyone with that link and can be copied or shared. Disabling the link stops future access through Lorika; it cannot retrieve copies others already made. Your account email is not a public author identifier.
Hosting is provided through Hetzner in Germany, with Cloudflare in front of the service. Email delivery uses Resend and SMTP services. Optional Google or Discord sign-in involves the provider you select. Operational tracing uses a Lorika-hosted Langfuse service. These services receive information relevant to hosting, delivery, authentication, security or diagnostics.
AI requests pass through Lorika's own gateway and OpenRouter to the provider serving the request. Depending on the action and route, providers include Anthropic, Google, OpenAI and xAI in the United States, Mistral in the EU, and DeepSeek, Qwen/Alibaba, Z-AI and MiniMax in China; models by Sao10k and TheDrummer are also available through OpenRouter. Retry or fallback can involve more than one provider for a requested operation.
Support messages, data requests and book reports may be handled by the operator and with a Claude AI assistant supplied by Anthropic. Send only information needed to handle your request, and avoid passwords or sign-in codes. You can ask for a person to review your request or a decision.
External processing may take place outside the European Economic Area, including in the United States and China. Recipients' retention, training and processing conditions depend on the service, endpoint, terms and settings used. Contact us for information about recipients handling your data and the applicable international-transfer safeguards, including how to obtain relevant information about them.
Our retention policy for Lorika account data is to keep it while the account exists and for 30 days after account deletion. Book content is kept by default, including after account deletion, and is not erased automatically. Retention to establish, exercise or defend legal claims concerning content created with Lorika requires a documented lawful basis, necessity and balancing with your rights, review and an end condition taking applicable limitation periods into account. You can request manual erasure of book content at [email protected]. We erase it on request unless specific content is necessary for an existing or reasonably anticipated legal claim. We explain any such exception and retain only the content needed for as long as necessary. Accounting records are preserved separately; technical logs are kept for 30 days. Waitlist information is kept until six months after launch, unless removed earlier following withdrawal. Payment and legally required transaction records are retained for the period required by applicable Bulgarian accounting or tax law. These periods describe Lorika's policy; external providers' processing is governed by their applicable retention arrangements.
You may request access, correction, deletion, restriction, portability or objection where applicable, and withdraw permission for processing based on consent. Contact [email protected] and identify the account and request; we may need proportionate information to confirm identity. GDPR requests normally receive a response within one month; if a lawful extension is needed, we inform you within that month. You may complain to the competent data protection authority, including Bulgaria's Commission for Personal Data Protection, or the authority in your country where applicable.
Google Analytics starts only after a specific analytics opt-in is successfully saved. You can reject analytics or change and withdraw the choice through Cookie settings. Silence, continued browsing, Terms acceptance and an old general acceptance do not count as that permission. Withdrawal stops future analytics under the choice; clearing cookies alone does not undo processing already performed.
Analytics measures aggregate visits using sanitised routes, without query strings or fragments and with book and article identifiers replaced by templates. Sign-in, registration, onboarding, account, settings, admin, payment, KIB and unknown routes are excluded. We do not send Google manuscripts, author-written titles or text, email, Lorika account or visitor identifiers, payment data or raw page URLs or referrers. Google separately processes technical visit data such as IP and browser information and may use its own analytics cookies. Advertising personalisation and Google Signals are disabled.
We give appropriate notice of material changes before materially different processing begins. A notice or acknowledgment of this Policy is distinct from agreement to Terms and is not blanket consent to every purpose. Where a new purpose requires consent, that permission is requested separately. Dated versions remain available.
For privacy, support or book reports, contact privacy@lorika.co