Svrn

Privacy

What we keep, and what we don't

Your stories can be intimate, so we've tried to be exact and plain about them: what we store, why, who else touches it, and how to take it back.

Last updated 3 November 2026

The short version

  • No ads, no trackers

    We don't sell your data, share it for advertising, or run analytics cookies.

  • Memory stays home

    What characters remember lives on our own servers, kept separately for each story.

  • One place text travels

    To write a reply, the relevant parts go to the AI model's host through OpenRouter. Chats are never public.

  • No one's reading along

    A person looks at a story only if it's reported, flagged by a safety check, or the law requires it.

  • Take it back

    Delete any chat, or your whole account, whenever. Backups age out within 30 days.

  • Not for training

    Your private stories are never used to train our AI or anyone else's.

That's the gist, not the contract. The details below are what counts.

SVRNSys (“we”) runs Svrn at svrnsys.com. This policy explains how we handle personal information when you use it. Your stories can be intimate, so we've tried to be exact and plain. Questions or requests: admin@svrnsys.com.

1. What we collect

  • Account details: your email, display name, ink colour, whether you confirmed you are an adult and opted into mature stories (and when), which version of these policies you accepted, and a scrambled (hashed) form of your passphrase and spare key. We can't read your passphrase.
  • Your stories: the characters you create, your chats and every message in them, alternative takes, notes, Codex entries, the direction you set, hearted keepsakes, and your settings. If you're signed in, this is saved to your account so it follows you between devices.
  • Portraits you upload: we resize each image and save a new copy on our own servers, tied to your account. Making that copy removes hidden photo data such as camera details and GPS location. Before saving, an AI model on OpenRouter looks at the image to check it follows our rules. A portrait is visible only to you, unless the character it belongs to is shared publicly.
  • Memory: to let a character remember, our memory engine stores the text of what was said, short facts drawn from it, and numerical fingerprints of that text (“embeddings”). These stay on our own servers and are kept separately for each story.
  • Safety and reports: messages flagged by our safety checks, and reports you send us, including any excerpt you include.
  • Technical data: your IP address and browser details when you sign in or use the service, used to run sessions and to rate-limit abuse. Records used for rate limiting expire within hours.
  • On your device: one essential session cookie that keeps you signed in, and local storage that holds your stories, drafts, sidebar width and (if you add one) your own API key. We don't use advertising or analytics cookies.

2. Why we use it, and our legal basis

  • To run Svrn for you (saving stories, signing you in, writing replies, remembering what happened). Basis: our contract with you.
  • To keep people safe and the service working (preventing abuse, enforcing our rules, blocking sexual content involving minors, detecting signs a user may be at risk, fixing faults). Basis: our legitimate interests, and legal obligations.
  • To show mature stories only to adults who ask for them. Basis: your consent, which you can withdraw in Settings.
  • To meet the law (for example, reporting child exploitation material and answering valid legal requests). Basis: legal obligation.

We don't sell your personal information, we don't share it for advertising, and we don't use your private stories to train our own or anyone else's AI models.

3. Who else handles it

  • AI model providers. To write a reply, we send the model the character's description, relevant Codex entries and memories, your direction, and the recent conversation. We use OpenRouter, which routes the request to the company that hosts the chosen model. These companies process your text to answer it. We have not turned on OpenRouter's optional prompt logging. Each provider has its own policies, which may differ.
  • Your own key. If you add your own API key, requests go from our server to the endpoint you configured, using your key, and that provider's terms apply. Your key is kept in your browser and is removed before your data is saved to our servers.
  • Hosting and infrastructure. We use OVHcloud to run our servers in the United States. They process data only on our instructions.
  • Everyone, if you share a character. A character you make public (its card, portrait, personality, first message and Codex) is shown to everyone on Svrn with your display name. Your chats with it stay private. Others who start it get their own copy, which stays with them if you make yours private later.
  • Authorities. We may disclose information if the law requires it, to protect someone's safety, or to report child exploitation to the National Center for Missing & Exploited Children or equivalent bodies.
  • A sale or merger. If Svrn is sold or merged, your information may transfer with it, under this policy or a notice to you.

4. How long we keep it

  • Your stories and memories: until you delete them or your account. Deleting a chat removes its memories as well.
  • When you delete your account, your saved data and memories are removed from our live systems straight away. Backups can take up to 30 days to age out.
  • Safety reports and flagged items: up to 365 days, or longer if needed for a legal matter or an ongoing investigation.
  • Rate-limit and session records: hours to a few weeks.

5. Your choices and rights

  • Access and export: download any chat as Markdown or JSON from the chat page.
  • Correct or delete: edit or delete your stories and memories yourself, or delete your account in Settings.
  • Other rights: depending on where you live (for example the EU, UK or California), you may also be able to object to or restrict our use of your data, ask for a copy in a portable format, withdraw consent, and complain to your data protection authority. California residents: we don't sell or share personal information for cross-context advertising, and we don't discriminate if you use your rights. Write to admin@svrnsys.com and we'll answer within the time the law allows.

6. Security

Passphrases are stored only as salted scrypt hashes, session tokens are stored hashed, and the cookie is HTTP-only. Our memory engine listens only on the server's private network. No system is perfectly secure, and your stories are not end-to-end encrypted, which means we can technically access them. We limit who can, and we only look at content when it's reported, flagged by a safety check, or needed to keep the service running or to comply with the law.

7. Children

Svrn is for adults (18+). We don't knowingly collect information from anyone younger. If you think a child is using it, tell us at admin@svrnsys.com and we will remove the account and its data.

8. Moving data between countries

Our servers are in the United States. If you use Svrn from elsewhere, your information is transferred there. Where the law requires it, we use safeguards such as standard contractual clauses for transfers out of the EU or UK.

9. Changes and contact

If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect. You can reach us at admin@svrnsys.com, or by post at SVRNSys, Georgia, United States. See also our Terms and Safety page.