Privacy policy

Last updated: 9 November 2026

1. Who we are

chapterheat is an interactive fiction reader for adults, operated by SIA "Canarics" (reg. 40203741245), Latvia ("we", "us"). We are the data controller for the personal data described here and we operate under the General Data Protection Regulation (GDPR).

2. What we collect

chapterheat has no sign-up. We keep as little as the product needs:

• A reader id. When you first open the site we create a random id and store it in a signed cookie on your device. It is not linked to your name, phone number or any account, and we cannot tell who is behind it.
• Your reading state. Which stories you opened, the choices you made, the chapters you unlocked, your coin balance and any Unlimited pass, and the preferences you set: the heroine's name, his name, the detail about him, the heat ceiling and the kinks a book leans into. These are stored against the reader id so your book is there when you come back.
• Age confirmation. The fact that you confirmed you are 18 or older, and when.
• Email, only if you buy. If you enter an email at checkout we store it with your reader id so a receipt can reach you and so you can ask us to restore a purchase.
• Purchase records. What you bought, when, the amount, and the payment provider's order reference. We never see or store your card number.
• Server logs. Our hosting provider keeps standard request logs (IP address, time, path, user agent) for security and debugging, for a limited period.

We do not run analytics or advertising trackers, and there is no cookie banner because the only cookie we set is the strictly necessary session cookie. A day/night theme choice is kept in your browser's local storage and never leaves your device.

3. How your book is written

Seeded books are written on demand by a large language model. To write a chapter we send the story outline, the names and the detail you entered, your heat ceiling and the choices you have made so far to a model provider. We do not send your reader id, email or any payment data. The provider processes the text to return the chapter and, under the terms we hold with them, does not use it to train models. Rendered chapters are cached on our servers so that the same seed produces the same book for anyone who enters it.

4. Why we may process your data (legal bases)

• Performance of a contract: delivering chapters you unlock, keeping your place, crediting coins and passes you pay for.
• Legal obligation: keeping purchase records for accounting and tax, and confirming that readers are adults.
• Legitimate interest: keeping the service secure, preventing abuse and fraud, and fixing bugs.

5. Who else sees it (processors)

• Hosting and database: Google Cloud, in a European Union region (Belgium). Your reading state and purchase records live here, encrypted at rest.
• Payments: Revolut Payments UAB (Revolut Business, Merchant services). When you pay, you are on Revolut's hosted checkout page; Revolut processes your card details under its own privacy policy and tells us only that an order was paid and its reference.
• Text generation: the model provider described in section 3, which receives only story text and the names and preferences you entered.

Where a processor handles data outside the European Economic Area, the transfer is covered by an adequacy decision or the European Commission's Standard Contractual Clauses. We never sell personal data and we do not share it with advertisers.

6. How long we keep it

• Reading state and preferences: until you ask us to delete them, or two years after you last opened the site.
• Purchase records and the email attached to them: as long as accounting law requires, in Latvia five years after the end of the financial year.
• Server logs: up to 30 days.

Clearing your browser's cookies removes the reader id from your device. The reading state behind it stays on our servers until the retention above runs out or you ask us to delete it; without the cookie, or your seed code and purchase email, we cannot connect it to you again.

7. Your rights

Under the GDPR you can ask us for a copy of the data we hold about you, to correct it, to delete it, to restrict or object to its processing, and to receive it in a portable form. Because readers are anonymous, you will need to make the request from the device that holds the cookie, or give us the email you used at checkout, so that we can find the right record. You can also complain to a supervisory authority; in Latvia this is the Datu valsts inspekcija (dvi.gov.lv).

8. Children

chapterheat is for adults only. We do not knowingly process data of anyone under 18. If you believe a minor has used the site, contact us and we will delete the record.

9. Changes

We will update this page when our processing changes and move the date at the top. Material changes are shown in the app the next time you open it.

10. Contact