The short version
- You never create an account. We don't ask for a name, a password, or a login.
- Your stories are private. They are never published, never listed, and never shown to another visitor. Sharing one takes a link plus a passcode you control.
- We only learn your email if you buy something, and Stripe collects it during checkout. It is also how you get back to your stories if you change browser.
- We do measure where visitors come from — which ad, search or link brought you here. That is marketing measurement, and it is described in full below.
- We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
Who this policy covers
This policy applies to Roma Llama ("we", "us") and to romallama.com and its subdomains. Roma Llama is written for adults and is intended only for people aged 18 or over.
Information we collect
Information you give us
- Story inputs. The characters, names, settings, tropes, heat level and any free-text you enter to build a story. This is the most personal thing here, and we treat it that way.
- Reference photographs, if you use the cover-likeness feature. These are uploaded by you, stored with the persona you created, and used only to generate cover artwork for your own stories.
- Email address, collected by Stripe during checkout and passed to us so we can deliver your purchase, provide support, and send you a secure link back to your stories when you ask for one.
Information collected automatically
- IP address and browser user agent, recorded once when your visitor record is first created.
- Marketing attribution. When you arrive we record which channel sent you — the campaign tags on the link you followed (the standard UTM parameters), the website that referred you, the page you landed on, and the click identifier an advertising platform adds to its own links. We keep the first channel that brought you and the most recent one. This tells us that a visit came from a particular ad, search or link. It does not tell us who you are.
- Purchase records — what was bought, the amount paid, and any promotion code used.
Payment information
Payments are processed by Stripe. Card numbers are entered directly into Stripe's checkout and never reach our servers. We receive the amount, the outcome, an email address, and a Stripe customer identifier.
Cookies and browser storage
We use a session cookie to remember your browser between visits, which is how your stories stay available without a login. We do not use advertising or analytics cookies, and nothing we set follows you to other websites.
We also use your browser's local storage, which stays on your device and is not a cookie. It holds the marketing attribution described above, the story choices you have made but not yet finished — your characters, plot, setting and heat level — and small display preferences such as your reading mode.
Clearing your browser's site data removes all of it, and disconnects that browser from the stories you created. If you have made a purchase, you can reconnect by asking for a secure link at the email address you used at checkout. If you have not, we hold no email address for you, and there is no other route back to them.
How we use this information
- To generate, store and deliver the stories you ask for
- To take payment and provide customer support
- To send transactional email about a purchase you made
- To email you a secure sign-in link when you ask to restore access to your stories
- To understand which marketing channels bring people who find the product worth paying for, so we can stop spending on the ones that don't
- To detect abuse, prevent fraud, and keep the service running
Who we share it with
Running Roma Llama takes a handful of third-party service providers. Each receives only what it needs to do its job, and we use them on terms that do not permit them to market to you or to train their own products on your stories.
| Service | What it receives, and why |
|---|---|
| AI model providers | Receive your story inputs — characters, setting, plot and heat level, and any reference photograph — in order to generate the story text, cover artwork and audio narration you asked for. |
| Cloud hosting and storage | Run the application and hold your stories, personas, images and audio. |
| Payment processing (Stripe) | Takes payment and collects your email address. Card details are entered directly with Stripe and never reach us. |
| Email delivery | Sends the email we owe you — your purchase, and the secure link back to your stories when you ask for one. |
| Content delivery and security | Serves this website and protects it from abuse. |
We name Stripe because you deal with it directly at checkout and it is where your card details actually go. The others are described by the job they do rather than by name: vendors change, and a list of names that has quietly gone out of date is worse than an accurate description of what leaves this site and why. You can contact us for the current list at any time.
We may also disclose information if we are legally required to, or where it is necessary to protect our rights or someone's safety.
What we don't do
- We do not sell your personal information, and we have not in the preceding 12 months.
- We do not share it for cross-context behavioural advertising.
- We do not publish your stories, list them anywhere, or show them to other visitors.
- We do not use your story content or reference photographs to advertise to you.
How long we keep it
Your stories, personas and reference photographs are kept for as long as you may want access to them. There is no expiry date, because for most people the only route back to a story is the secure link we email to the address used at checkout, and deleting content on a timer would quietly break it. Purchase records are kept as long as tax and accounting rules require. Marketing attribution is kept for as long as it is useful for measuring a channel, and is not tied to anything that identifies you unless you later make a purchase.
You can ask us to delete any of it at any time — see below.
Your rights
Wherever you live, you can ask us to give you a copy of what we hold about you, correct it, or delete it. If you are a California resident, the CCPA gives you the rights to know, to delete, to correct, to opt out of sale or sharing (we do neither), and not to be discriminated against for exercising them.
To exercise any of these, email [email protected]. Because we hold no account credentials, please write from the email address used at checkout, or include the link to the story concerned, so we can find your records and be confident they are yours.
Children
Roma Llama is strictly for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has used the service, contact us and we will delete the records.
Security
Traffic is encrypted in transit. Payment card data never touches our systems. Access to production data is restricted. No service can promise perfect security, and we won't pretend otherwise — but we do not hold passwords, and we hold as little identifying information as the product allows.
Changes to this policy
If we change how we handle your information — for example by adding analytics or advertising measurement tools — we will update this page and change the date at the top. We aim to do that before the change takes effect, and to do it promptly in any case. We would rather tell you that as an intention than promise timing we cannot guarantee. The date at the top is the honest answer to when this page was last revised, so it is worth a glance if this matters to you.
Contact us
[email protected]
Roma Llama