Privacy Policy

DRAFT Last updated: November 1, 2026

In short: We do not store your roleplay messages, character cards, or AI replies. We only record token counts, model names, timestamps, and costs so we can bill accurately and show your usage chart.

1. What we do NOT collect or store

When you send a request to /v1/chat/completions, your messages, character descriptions, personas, lorebook entries, expanded [[tav:pack/block]] preset blocks, and the model's generated replies pass through memory on our Cloudflare Worker solely to format the request and stream the response back to you. We do not write your prompt text, preset content, or completion text to our database or disk logs.

2. What we collect

  • Account information: Your email address, display name, and avatar (if you sign in with Google or Discord), plus your account balance, credit pack status, preset entitlements, and ledger history.
  • Usage metadata: For each API call, we log the user ID, API key ID, model name, input token count, cache read/write token counts, output token count, cost in USD, HTTP status code, request latency, and timestamp.
  • Security data: Session IP address and browser user-agent string stored with your active login session to prevent account hijacking, and Cloudflare Turnstile verification tokens at sign-in.

3. Upstream AI providers & third-party services

To generate replies, your formatted request is forwarded to official upstream AI providers (Anthropic Claude via AWS and Google Cloud, Google Gemini via Google AI Studio, and DeepSeek via the official DeepSeek API). Those providers process the request under their own privacy and data-retention policies. We also use Cloudflare (hosting and security), Resend (sending sign-in verification emails), and NOWPayments (processing cryptocurrency payments).

4. Cookies

We use a single HttpOnly session cookie (tav_session) to keep you signed in to the console, and functional security cookies required by Cloudflare Turnstile. We do not use third-party advertising, analytics, or cross-site tracking cookies.

5. Data retention & deleting your account

You can revoke your API keys at any time in the console. If you want your account and associated usage metadata deleted, email support@tavernapi.com from your registered email address.