Privacy Policy

What you give us

• Account details: your email address, username, display name, and a password, which we store only as a one-way hash, never the password itself. If you choose, also a profile picture, bio, location, website and time zone.
• Your welcome answers: whether you want to use AI, your main genre, how you heard about us and where your story is right now.
• Your writing: projects, chapters, scenes, world entries, images, comics, plans, your conversations with Manta, and their version history.
• Feedback and reports you send, with any screenshots you attach. Each one also notes the page you were on, your browser and your window size, to help us reproduce the problem.
• API keys for AI providers, if you choose to add your own.
• Who you follow, who you invite to projects and the roles you give them.

What is recorded as you use MantaInk

• Sign-in records: the email or username used, how you signed in (password, email code, Google or GitHub), whether it worked, the IP address and the browser. These protect your account against break-ins.
• Sessions: one per signed-in browser, with when it started and was last used.
• AI usage: for each AI request, the feature, the model, how many tokens it used, the credits and estimated cost, and whether our key or yours paid for it.
• Activity: the days you write (for streaks), badges you earn and your notifications.

What others share with us

• Google or GitHub, when you sign in with them: your email address, name and account ID. From GitHub also your username.
• Collaborators, when they add you to a project by your username.

We don’t collect payment details, because MantaInk takes no payments. We don’t use advertising or analytics trackers.

• To run MantaInk: saving your work, keeping its history, showing it to you and your collaborators, and searching it.
• To run the AI features you use (see When AI is involved).
• To keep accounts secure: checking sign-ins, limiting repeated attempts and spotting misuse.
• To apply your plan’s credits and limits.
• To email you what your account needs, such as sign-in and reset codes, password change alerts and project invitations, and occasional announcements about MantaInk.
• To set up your account the way you asked (for example, AI on or off) and to understand how people find us.
• To answer your feedback, fix problems and improve MantaInk.
• To enforce our Terms and meet our legal obligations.

We don’t sell your information, use it for advertising, or use your writing to train AI models.

If you are in the European Economic Area or the UK, we rely on these legal bases: providing the service you signed up for (contract); keeping MantaInk secure and improving it (legitimate interests); your consent, where we ask for it; and complying with the law.

AI is optional. With AI turned off under Account › AI, nothing you write is sent to any AI model, including in the background: search matches your words instead of their meaning, and continuity checks and chat titles skip themselves.

With AI on, when you ask Manta something or use an AI feature, the text the request needs (your message and the relevant parts of your project) is sent to the provider of the model in use. Some background work sends text too: keeping your world searchable by meaning, continuity checks, and naming chats.

Depending on the model you pick and the setup of your plan, that provider may be Anthropic, OpenAI, Google, OpenRouter, xAI, DeepSeek, Mistral, Stability AI or Replicate. We use their developer APIs, and each provider handles requests under its own API terms, which set how long it keeps them and what it may use them for. If you use your own key, your own agreement with that provider applies.

The help bot on our website works the same way, account or not: your question and the conversation so far go to the provider of the model that answers it. We don’t keep the conversation. To stop anyone overusing the bot, we count each visitor’s questions for an hour using a scrambled form of their IP address, held in memory and never saved.

We don’t use your writing to train AI models.

• Your collaborators: members of a project see its content and history, including who made each change, and each other’s username, display name and picture.
• Other MantaInk members: your profile is shown according to your profile settings (public, followers only or private), and you can hide your activity, projects or badges. Projects you make unlisted or public can be read by people signed in to MantaInk. Your username can always be found by exact match, so collaborators can add you.
• Companies that help us run MantaInk: hosting and file storage, email delivery, sign-in with Google and GitHub, and the AI providers above. They receive only what they need to do that work.
• People who operate MantaInk: they can see account details, usage and feedback in order to run the service and help you. We look at your writing only when we need to: to help you when you ask, to keep the service working and secure, to look into a report, or because the law requires it.
• Authorities, when the law requires it, or when it is needed to protect someone’s safety or rights.
• A new owner, if MantaInk is ever sold or transferred. This policy would continue to protect your information, and we would tell you first.

We don’t sell or rent your personal information, and we don’t share it for targeted advertising.

MantaInk uses only the cookies it needs to work:

• loreforge_session keeps you signed in. Your browser can’t read it from scripts, and it lasts up to 30 days.
• loreforge_signup holds a Google or GitHub sign-up for up to 30 minutes while you choose a username.

Your browser’s storage also keeps a few things on your device only: whether the chat panel is open, how you have arranged the Comic Studio, and short messages carried from one page to the next.

We don’t use advertising or analytics cookies, which is why there is no cookie banner. Google and GitHub set their own cookies on their own sites when you sign in with them.

• Your account details: for as long as you have an account.
• Your writing: until you delete it or your account. Deleted content leaves the live service and can remain in backups for a limited time.
• Sign-in and reset codes expire within minutes. A record that one was sent is kept to limit how often codes can be requested.
• Sign-in records and AI usage records: for as long as they are needed for security, preventing abuse and keeping accurate accounts, after which they are deleted.

When you delete your account, we sign you out everywhere and remove your profile details, settings, API keys, private conversations, follows and notifications, and we delete the projects you alone own. Some things stay because other people or our records depend on them: your contributions to projects other people own, shown as “Deleted account”; sign-in records, which include the email and IP address used; AI usage records; and records of actions taken by MantaInk’s operators.

• See and correct your details under Account and on your profile.
• Download your work: a project’s Export page gives you a story bible, your canon as JSON and a full repository backup.
• Delete content whenever you like, and delete your account yourself under Account.
• Choose who sees your profile and each project.
• Turn AI off under Account › AI.
• Account emails such as codes and security alerts are part of having an account. If you’d rather not receive announcements, tell us and we will stop sending them.

Depending on where you live, for example in the European Economic Area, the UK or California, you may have the right to access, correct, delete or take a copy of your personal information, to restrict or object to how we use it, and to withdraw consent. Write to us from the email address on your account and we will answer within the time the law allows. You also have the right to complain to your data protection authority.

Passwords are hashed with Argon2id. Session tokens and email codes are stored only as hashes, and API keys you add are encrypted. Repeated failed sign-ins lead to a lockout, every request to a project checks that you are allowed to see it, and projects start private.

No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.

MantaInk is for people aged 13 and over. We don’t knowingly collect information from children under 13. If we learn that we have, we will delete it. If you think a child under 13 has an account, please write to us.

MantaInk and the companies that help run it may process information in countries other than yours, including the United States. Where the law requires it, we use the safeguards that law recognises for these transfers.

We will update this policy when MantaInk changes how it handles information. For changes that matter, we will tell you in the app or by email before they take effect. The date at the top of this page shows the current version.

Questions or requests about your information? Write to hello@mantaink.com, or, when signed in, use the Feedback button beside the bell.