Privacy Policy
Controller: see Imprint
This page explains in plain words what Lila stores about you and where it goes.
What we store
- Account: your username, the time you registered, and whether you have admin rights.
- Password: only as a salted scrypt hash. We never store or see your password in plain text.
- Chat messages: your messages and Lila's replies, stored encrypted on a server in Helsinki, Finland, run by Hetzner (a German hosting company).
- Profile picture (optional): stored encrypted; only you can load it.
- Character sheet (optional): the name, pronouns and bio you write for your character, stored encrypted.
- Album: the scene pictures you had painted and the stickers Lila has sent you, so your collection stays after a chat reset. Scene pictures are stored encrypted; only you can load them.
- Photos you send Lila (optional): stored encrypted with your chat; only you can load them. A reset of the chat deletes them.
- Picture credits: how many scene pictures you can still have painted, and which picture codes you redeemed.
- Access status: how many free messages you have used, until when your access runs, and which access codes you redeemed.
- Shop orders: for each purchase, the email address you used on Ko-fi, what you bought, the amount, Ko-fi's transaction number and the codes we sent you, stored encrypted. This is not linked to your chat account until you redeem a code.
Scene pictures and photos
Scene pictures and photos are not handled by the AI provider below. When you press the picture button, the recent messages of your chat, your character sheet and Lila's story notes are sent to the operator's own computer, where local AI models write a picture description and paint the picture; the picture is then stored encrypted on the server. When you send Lila a photo, it is sent to that same computer, where a local AI model describes it; that description becomes part of your message so Lila can react to it. Nothing of this goes to an outside AI company, and the operator's computer keeps no copy after the job is done.
AI provider
To write Lila's replies, your messages (together with recent conversation context, your character sheet, and your local time and time zone, so she knows whether it is morning or night for you) are sent to an AI provider: OpenRouter, which routes the request to the company hosting the AI model. That provider processes the text to generate the reply, and its own terms and privacy policy apply. The description of a photo you send is part of your message and is sent along. Please do not share anything you would not want processed this way.
Shop purchases
Bundles are sold through Ko-fi, which handles the payment with PayPal or Stripe; Ko-fi's own terms and privacy policy apply there, and we never see your card or PayPal details. After a purchase, Ko-fi tells our server what you bought and your email address. We use that address only to send your code, and to send it again if you ask us to. The email is sent through Resend (Resend, Inc., USA), which receives your email address and the text of the email with your code. Order records are kept as long as the law requires for sales records.
IP addresses
IP addresses are used only briefly in the server's memory for rate limiting. They are not stored with your account. Standard web-server logs may keep them for a short time.
Cookies and tracking
Lila sets one session cookie, which is strictly necessary to keep you logged in. There is no tracking, no analytics, no advertising and no third-party fonts or scripts. The site only talks to its own server.
Your choices
- Reset chat: in the menu, you can wipe the conversation. Lila forgets it and your visible history is cleared. Your character sheet, profile picture and album stay until you change them or delete your account.
- Delete account: in the menu, you can delete your account and everything stored with it (chat history, character sheet, profile picture, album, scene pictures, photos) at any time.
- Change password: also in the menu.
Your rights
Depending on where you live (for example in the EU), you may have the right to access, correct or erase your data, to restrict or object to its processing, to receive a copy, and to complain to a data protection authority. Most of this you can do yourself in the menu; for anything else, contact us through the Imprint.
Age
Lila is for adults only (18+). We do not knowingly collect data from anyone younger.
Changes
If this policy changes, the date at the top changes too.
Contact
You can reach the operator through the Imprint.