Privacy Policy

1. Who we are

Chrona is operated from Ukraine by an individual operator.

Operator and Data Controller:
Kucherenko Oleksandr Vladyslavovych
Кучеренко Олександр Владиславович

Contact email:
[email protected]

For privacy requests, account deletion questions, or support, contact us at the email above.

2. What this Privacy Policy covers

This Privacy Policy applies to:

• the Chrona website;
• Chrona user accounts;
• world-building, writing, screenplay, map, manuscript, and media features;
• wiki features, currently marked as coming soon, if and when they become available;
• authentication and account security features;
• support communications;
• cookies, local storage, and similar browser technologies.
• This Privacy Policy does not apply to third-party websites or services that we do not control.

3. Data we collect

Chrona collects and processes the categories of data described below.

3.1 Account data

When you create or use an account, we may process:

• email address;
• username;
• display name, first name, surname, if provided;
• avatar or profile image, if provided;
• preferred language or locale;
• account status, email verification status, and timestamps;
• hashed password, if you use password login.
• We do not store your plain-text password.

3.2 Google Sign-In data

If Google Sign-In is enabled and you choose to use it, we may receive and store:

• Google account identifier;
• Google email address;
• whether Google reports the email as verified;
• login/linking timestamps.
• Chrona uses Google Sign-In only for authentication and account linking. Chrona does not currently store Google access tokens or Google refresh tokens for ongoing access to your Google account.

3.3 Security, device, and login data

For account security, abuse prevention, suspicious login detection, and session management, we may process:

• IP address;
• full user-agent string;
• approximate city-level location derived from IP address;
• country, region, timezone;
• browser, device, and operating system information;
• session identifiers;
• login, verification, reset, and security event outcomes.
• This data is used to protect accounts, detect suspicious activity, and show or manage authorized devices.

3.4 User-generated content

Chrona is a creative writing and world-building service. We process the content you create, upload, or store in Chrona, including:

• worlds;
• timelines and slices;
• maps and map data;
• wiki entries, if and when the coming-soon wiki feature becomes available;
• characters, events, locations, and related world data;
• manuscripts and outline nodes;
• screenplay documents;
• writing documents, including content JSON, text, and HTML representations;
• document versions and snapshots;
• goals and writing progress;
• exported files generated by Chrona, such as DOCX, PDF, FDX, Markdown, TXT, or similar formats.
• You remain responsible for the content you create and upload.

3.5 Media and uploaded files

If you upload media, Chrona may process:

• original file name;
• file type;
• file size;
• checksum or technical metadata;
• storage object key;
• public or private media URL, where applicable;
• owner user ID;
• avatar files, world images, maps, and related media.
• Media may be stored using Cloudflare R2 or similar storage infrastructure.

3.6 Browser storage and local device data

Chrona may use browser storage for authentication, preferences, user experience, and offline/local-first functionality, including:

• cookies;
• localStorage;
• sessionStorage;
• IndexedDB.
• Some world or writing content may be stored locally on your device through IndexedDB or similar browser storage. Deleting your Chrona account may not automatically remove all local browser data from every device. You can clear browser data manually through your browser settings.

3.7 Support communications

If you contact support, we may process:

• your email address;
• message content;
• attachments you send;
• technical information needed to resolve your request.

3.8 Consent-based analytics

If you opt in to Analytics Cookies, Chrona loads Google Analytics 4 (GA4) to help us understand how the service is used.

Depending on your browser and GA4 configuration, analytics data may include:

• page paths, page titles, and page locations;
• session and interaction information;
• browser, device, operating system, language, network, and approximate location information made available by GA4;
• analytics cookies and identifiers created by Google.
• Chrona does not send your story, world, manuscript, screenplay, or other creative content to GA4 as analytics event data.
• The GA4 tag is not loaded before you grant analytics consent. Withdrawing consent stops future analytics collection from Chrona on that browser unless you opt in again.

4. How we use your data

We use personal data to:

• create and manage your account;
• authenticate you;
• provide world-building, writing, map, screenplay, and export features;
• provide wiki features, currently marked as coming soon, if and when they become available;
• sync content across devices;
• store and display your user-generated content;
• provide security features and detect abuse;
• send transactional emails, such as verification, password reset, or account deletion emails;
• respond to support requests;
• understand service usage and improve Chrona when you consent to analytics;
• maintain, debug, and improve Chrona;
• comply with applicable legal obligations.

5. Legal bases for processing

Depending on your location and the context, we process personal data based on:

• performance of the service you request from us;
• your consent, including for Google Analytics 4 and Analytics Cookies;
• our legitimate interest in providing, securing, maintaining, and improving Chrona;
• compliance with legal obligations;
• protection of users, Chrona, and infrastructure from abuse or security threats.

6. Cookies and similar technologies

Chrona uses strictly necessary and functional cookies and browser storage for authentication, session management, language preferences, security, and app functionality.

If you opt in to Analytics Cookies, Chrona loads Google Analytics 4 and permits its analytics cookies and identifiers. Analytics remains off until you consent, and you can withdraw consent through Chrona's cookie preferences.

Chrona does not currently use advertising cookies, Google Ads, AdSense, or Meta Pixel.

For more details, see our Cookie Policy.

7. Third-party service providers

We may use third-party service providers to operate Chrona. These providers process data only as needed to provide their services to us.

Current or expected providers include:

• hosting and infrastructure providers;
• Cloudflare for edge protection, network security, Turnstile, and R2 media storage;
• Resend for transactional emails;
• Google Analytics 4, only after you opt in to Analytics Cookies;
• Google Sign-In, if enabled and used by you;
• the email provider used for support communications.
• Chrona does not sell your personal data.

8. International data transfers

Chrona is operated from Ukraine, but service providers may process data in other countries. When data is processed outside your country, we rely on appropriate safeguards where required by applicable law and use providers that maintain security and data protection practices.

9. Data retention

We retain personal data only for as long as needed for the purposes described in this Privacy Policy, unless a longer period is required by law.

In general:

• account data is kept while your account exists;
• user-generated content is kept while your account or relevant worlds/content exist;
• media files are kept while they are linked to your account or content, unless deleted earlier;
• session data is kept for the lifetime of the session;
• locale and preference data may remain in your browser until cleared or replaced;
• security and device records are retained as needed for account security, abuse prevention, and investigation;
• limited non-personal deletion receipts may be retained after account deletion for operational integrity.
• We may delete or anonymize data earlier when it is no longer needed.

10. Account deletion and data deletion

Chrona provides a self-service account deletion flow.

When you confirm account deletion, Chrona is designed to:

• lock the account;
• revoke sessions and authentication tokens;
• delete or remove account credentials and profile data;
• delete worlds owned by you;
• delete associated media owned by you;
• remove or anonymize related subscription or quota records where applicable;
• remove Google identity links if used;
• free your email address for future registration;
• keep only a minimal non-personal deletion receipt.
• Some data may not be deleted in the same way:
• content you contributed inside worlds owned by other users may remain if required to preserve those worlds;
• copies of content stored locally in your browser may remain until you clear local browser data;
• logs or backups may persist for a limited period and are handled according to operational retention and security practices;
• legal or security obligations may require limited retention in specific cases.
• For deletion questions, contact: [email protected].

11. Your rights and choices

Depending on applicable law, you may have rights to:

• access your personal data;
• correct inaccurate data;
• delete your data;
• restrict or object to certain processing;
• request a copy of your data;
• withdraw consent where processing is based on consent;
• lodge a complaint with a competent authority.
• To exercise your rights, contact us at:
  [email protected]
• We may need to verify your identity before processing a privacy request.

12. Children

Chrona is not intended for children who are not old enough to use online services under applicable law. If you believe a child has provided personal data to Chrona without appropriate permission, contact us.

13. Security

We use technical and organizational measures to protect personal data, including authentication, hashing of passwords, encrypted or hashed sensitive secrets where applicable, access controls, secure sessions, and infrastructure protections.

No online service can guarantee absolute security. You are responsible for keeping your account credentials safe.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date and may notify users through the service or by other reasonable means.

15. Contact

For privacy, support, or data requests:
Email: [email protected]