1What this document covers
Here we explain in plain words what data Selidar collects, why, where it is stored, who receives it and how you control it. This policy applies to selidar.com, the blog, the app and the game.
The rules of using the service are in the Terms of use.
2What data we collect
At sign-up: email, a protected password hash (we never store the password itself), language, time zone, confirmation that you are 18+ and acceptance of the terms.
For sign-in security: your sessions — browser or device type and the first part of the IP address — to warn about new devices and prevent break-ins. If two-factor protection is on — its secret, encrypted.
In the game: your messages to characters and actions in worlds; characters’ memory of you, including what you chose to share about your life; the traveller questionnaire if you filled it in; a description of your look for shots; generated shots and postcards; lesson records and your dream journal.
For payments: amount, time and transaction hash, the sender’s wallet address on the TRON network. We never ask for bank cards or passport details.
From the website: your email and message if you wrote via the Contacts form; your email and what you asked to be notified about if you pressed “Notify me” or subscribed to the blog.
Technical logs: request times, errors and AI costs — to keep the service reliable and prevent abuse.
We do not collect photos of third parties and do not use third-party advertising or analytics trackers.
3Why we need this data
- so you can sign in and your account stays protected;
- so characters can reply, remember you and continue the story;
- to create shots, postcards and narration;
- to credit your wallet and keep payment records;
- to answer your emails and notify you about what you asked for;
- to find and fix errors and protect against break-ins and abuse;
- to meet legal requirements.
We do not sell data, do not show ads based on it and do not use your conversations to train AI models.
4Who receives data
AI providers receive conversation text and scene descriptions — only what is needed for a reply or picture, without your email or password:
- Anthropic (USA) — character replies;
- OpenAI (USA) — images and meaning-based memory search;
- Cartesia (USA) — voice narration.
If you connect your own models, replies and pictures are made on your computer. If you connect your own cloud AI key (e.g. OpenRouter or DeepSeek), the conversation goes to the provider you chose under its rules.
Hosting: the server, database and backups are in an OVH data centre in France (EU). Emails are sent by our own mail server.
Payments: to detect a payment we query public TRON network data via TronGrid. Blockchain transfers are public by nature.
Password check: at sign-up we check whether the password appeared in known breaches. Only the first 5 characters of its hash go to Have I Been Pwned — the password cannot be recovered from them.
Otherwise we share data only when the law requires it.
5Transfers abroad
Our server is in the EU and AI providers are in the USA, so conversation text is transferred outside your country. We choose providers that do not train on data from their paid APIs and protect it by contract.
6How long we keep data
- account, stories, memory and shots — while you use the service and until you delete them;
- backups — database 14 days, shots 7 days; deleted data disappears from backups after that period;
- website requests — while needed to reply or notify you; deletable on request;
- payment records — as long as the law requires; detached from you after account deletion;
- technical logs — briefly, only to run and protect the service.
7Your rights and how to use them
Under “About me” you can yourself:
- view and edit your questionnaire and look description;
- see what characters remember;
- erase facts about your real life;
- switch off or erase a companion’s memory;
- delete your account — with it go journeys, conversations, memory, shots, questionnaire and sessions.
To get a copy of your data, correct or delete it, withdraw consent or ask a question, write to privacy@selidar.com from your account email. We reply within 30 days, usually sooner.
If you believe we are violating your rights, you can contact the data protection authority in your country.
8How we protect data
- the connection is encrypted (HTTPS);
- passwords are stored only as protected hashes; two-factor secrets and players’ AI keys are encrypted;
- protection against password guessing and alerts about new devices;
- links to shots are signed and temporary;
- admin access only for staff with two-factor protection, with actions logged;
- daily backups.
9Cookies
We use only an essential cookie to keep you signed in. There are no third-party advertising or analytics cookies. The blog uses WordPress service cookies for editors only.
10Shared journeys
Once shared journeys open, only you and the guide will see your personal questionnaire — never your companion. Shared shots go into the shared album only if both agree, and memory of a shared trip carries over only on a “yes” from both.
11Children
Selidar is for people 18+ only. We do not knowingly collect data from minors. If we learn an account belongs to a minor, we will delete it with its data.
12Changes to this policy
We may update this policy. We will announce material changes in advance — by email or in the service. The edition date is shown at the top of the page.
13Data controller and contacts
- Controller
- to be specified before the open beta
- Country and registration number
- to be specified before the open beta
- Address
- to be specified before the open beta
- Governing law
- to be specified before the open beta
- General questions
- hello@selidar.com
- Player support
- support@selidar.com
- Data questions and deletion
- privacy@selidar.com · Terms of use