ASH-FALL / YOUR DATA

Privacy Policy

Effective date: October 26, 2026

Ash-Fall is a community and creative platform operated through the ash-fall.com website. This policy describes the categories of information the service may process and why. The operator should review and complete the contact and provider details before using this page as a formal store submission policy.

Important: Ash-Fall includes social features, user-created content, messaging, browser games, push notifications, and AI-powered features. Do not post information in public areas that you would not want other members to see.

Information we process

Account information: username, display name, email address, password authentication data, profile details, account role/status, and account/session metadata.
Content you submit: forum threads and replies, profile content, friend requests, messages, bot configurations, game scores and progress, journal entries, shop listings, reports, and other content needed to provide the feature you use.
AI feature inputs: prompts, messages, and settings you send to Miss Chaos or other enabled AI tools, plus responses and conversation history needed to provide saved-chat functionality.
Notifications: push subscription endpoint and cryptographic subscription keys when you enable web push, plus notification preferences and delivery-related metadata.
Technical and security data: request and diagnostic information, activity timestamps, rate-limit/security events, and information needed to prevent abuse and troubleshoot the service.

How information is used

Information is used to create and secure accounts, display profiles and community content, deliver messages and notifications, save game progress, provide AI responses, moderate abuse, enforce site rules, maintain the service, and diagnose failures. Private areas are intended to be accessible only to the signed-in account and authorized administrators as required for service operation, moderation, or security.

Administrative access to private content

The designated God/owner account and authorized administrators may review stored direct messages, Miss Chaos chats, personal-bot chats where stored, and restricted content for moderation, safety, security, support, and service operations. Access to stored private content is not the same as public visibility. Administrative access should be authenticated, limited to legitimate purposes, and logged where supported. Not every AI conversation is stored; some data may expire or be permanently deleted. Do not assume that chats with AI bots are confidential.

Service providers and infrastructure

Ash-Fall uses Cloudflare-hosted website and backend infrastructure. Depending on which features are enabled, information you submit may also be processed by configured AI, authentication, or notification providers to deliver those features. The operator must keep this section aligned with the actual providers and contracts in production; do not assume every feature is active merely because it appears in the interface.

Sharing

Public profile fields, public posts, public bot listings, and other content marked public can be seen by other visitors. We do not describe private messages, journal entries, account data, or saved conversations as public content. Information may be processed by infrastructure providers, disclosed when legally required, or used to investigate abuse and protect the service. The operator should document any additional sharing arrangements before launch.

Retention and deletion

Read the public account deletion instructions.

Information is retained for as long as needed to operate the feature, maintain account security, comply with applicable obligations, resolve disputes, or enforce site rules. Some features support soft deletion or a recovery window; that does not necessarily mean every associated copy is immediately erased from backups, logs, or service-provider systems.

Account deletion instructions are available at the public account deletion page. Signed-in users can submit a deletion request from Account settings, confirming with their current password or, for social-login accounts, their exact username while authenticated. Pending requests can be cancelled before processing, and requests are queued for operator processing. Submission does not itself erase the account or associated data. The operator must complete deletion within the stated period and verify treatment of posts, messages, AI conversations, game progress, push subscriptions, logs, and backups. The service is not ready for app-store submission until this full deletion workflow and its data cleanup are tested.

Security

The service uses server-side access controls and security measures intended to protect accounts and private content. No internet service can promise perfect security. Keep your password private and report suspected account compromise through the site's available support or moderation channels.

Children and age-sensitive content

Ash-Fall contains user-generated content and features that may not be appropriate for children. Some areas are marked for adults and require an age confirmation. That self-attestation is not identity or age verification. The operator must set an accurate target audience, content rating, and age/access controls before publishing through an app store.

Your choices

You can control information you submit through available profile, content, chat, and notification controls. Browser or Android settings can control notification permissions. These controls do not replace the need for a complete account-deletion process.

Changes to this policy

This policy may be updated as features and providers change. The effective date above should be revised whenever a material change is published.

Contact

The site operator must publish a monitored contact method for privacy questions and account-deletion requests before submitting the app to Google Play. A public privacy policy URL alone does not replace a contact method or a working deletion process.