Privacy Notice · SagaCrest

1. Who operates SagaCrest and what this notice covers

SagaCrest is currently operated by Yeshaya Blalock in Pennsylvania, United States.

This Privacy Notice applies to the SagaCrest public website, author application, account and authentication services, cloud workspaces, offline and recovery features, Atlas, backup and import/export functions, feedback and support channels, and related platform operations.

For privacy questions or requests, contact support@sagacrest.com.

2. Information SagaCrest handles

Account information, including email address, verification status, display name, username, authentication state, account lifecycle state, and security-related account metadata.
Workspace content, including manuscripts, books, chapters, scenes, characters, places, worldbuilding records, relationships, notes, Atlas data, maps, paths, story trials, settings, and other content you choose to store in SagaCrest.
Files and media that you intentionally provide, such as covers, portraits, place or species images, Atlas source images, map assets, backup files, imported archives, and other supported attachments.
Workspace and device information needed to synchronize, authorize, cache, recover, back up, import, export, and protect your work.
Support and feedback information, including messages, issue descriptions, status information, and attachments you intentionally send.
Operational and security information, including session and device identifiers, authorization state, policy acceptance evidence, synchronization state, backup and recovery state, audit events, rate-limit records, error information, and security events.
Limited product analytics and reliability information designed to measure feature use, reliability, device class, browser family, environment, and aggregate product behavior without maintaining an unrestricted raw behavioral history.
Ordinary website and infrastructure request information, which may include IP address, browser or user-agent information, requested URL, timestamps, and security diagnostics.

3. Passwords, authentication, and local device storage

SagaCrest uses authentication services to verify accounts and maintain authorized sessions. SagaCrest does not place your readable account password into workspace data.

The application may use IndexedDB, browser storage, Origin Private File System storage where supported, caches, and other local browser mechanisms for performance, offline features, recovery, drafts, and authorized local copies.

Clearing browser data, losing a device, using unsupported browser tools, or removing local storage may delete local-only material. Cloud-authoritative workspace content remains subject to the cloud account and workspace state, while unsaved local recovery drafts may exist only on the affected device until successfully saved or discarded.

4. How and why SagaCrest uses information

Create and authenticate accounts and maintain secure user sessions.
Provide cloud workspaces, authoring features, Atlas, synchronization, explicit offline editing, backups, imports, exports, recovery, and other requested product functions.
Protect accounts and workspaces, enforce authorization boundaries, prevent abuse, investigate incidents, detect failures, and preserve service integrity.
Respond to support requests, feedback, bug reports, and recovery requests.
Measure feature adoption, reliability, and operational health using bounded analytics and diagnostic information.
Comply with applicable law, enforce the Terms of Service, resolve disputes, and establish or defend legal claims.

5. Legal bases where applicable

Where data-protection law requires a legal basis, SagaCrest generally processes information as necessary to provide the service you request and perform its agreement with you, to pursue legitimate interests such as security, reliability, fraud prevention, support, and product improvement, to comply with legal obligations, or on the basis of consent where consent is specifically required.

Where consent is the legal basis for a particular optional activity, you may withdraw that consent as allowed by applicable law without affecting processing that was lawful before withdrawal.

6. Service providers

SagaCrest currently relies on service providers including Supabase for authentication, database services, private object storage, and secure Contact-message processing; Vercel for web application and website hosting and delivery; and Resend for delivery of Contact messages to SagaCrest support.

SagaCrest may use additional infrastructure, email, monitoring, security, support, or operational providers when necessary to operate the service. Such providers are permitted to process information only for authorized service purposes and subject to applicable contractual and legal protections.

SagaCrest does not currently represent a third-party generative AI provider as an active processor of ordinary workspace content. If that changes, SagaCrest will update its disclosures and identify the relevant feature behavior.

7. Sharing and sale of personal information

SagaCrest does not sell personal information.

SagaCrest does not currently share personal information for cross-context behavioral advertising or use third-party advertising trackers as part of the core public website or author application.

Information may be disclosed to service providers operating SagaCrest, when you direct or authorize a disclosure, when required by law or valid legal process, when reasonably necessary to protect users or the service, or as part of a merger, acquisition, financing, reorganization, or transfer of the SagaCrest business subject to appropriate protections.

8. Retention

SagaCrest retains personal information only for as long as reasonably necessary for the purposes described in this Notice, including providing the service, maintaining security and integrity, honoring account and workspace lifecycle functions, resolving disputes, and meeting legal obligations.

Active account and workspace data is generally retained while the account or workspace remains active. Deleted or closed data may remain temporarily in recovery systems, backups, audit records, security records, or other protected operational systems before it is removed through normal lifecycle and backup processes.

Policy-acceptance evidence, fraud-prevention information, security records, transaction evidence, and records needed to establish or defend legal rights may be retained longer where reasonably necessary or legally required.

Local copies on a user's device remain subject to the user's browser, device, offline package, recovery state, and local storage controls.

9. Security

SagaCrest uses technical and organizational safeguards designed to protect account and workspace information, including scoped authorization, row-level security, private storage, account and workspace boundaries, integrity checks, revision controls, checksums, authenticated sessions, and other security mechanisms appropriate to relevant features.

No internet service or storage system can guarantee absolute security. SagaCrest does not claim universal end-to-end encryption or a security certification unless that protection or certification has actually been implemented and verified.

10. International processing

SagaCrest is operated from the United States and may make the service available internationally. Service providers and infrastructure may process information in the United States and other countries.

Where applicable law requires protections for international transfers, SagaCrest will use legally recognized contractual, organizational, or other transfer safeguards appropriate to the service and provider involved.

11. Your privacy rights

Depending on where you live, you may have rights to request access to personal information, correction, deletion, portability, restriction of processing, objection to certain processing, or withdrawal of consent where consent applies.

You may also have a right to complain to a privacy or data-protection regulator in your jurisdiction.

SagaCrest may need to verify your identity before completing a privacy request and may retain or withhold information where permitted or required for security, fraud prevention, legal obligations, dispute resolution, or protection of another person's rights.

Privacy requests may be sent to support@sagacrest.com.

12. Children and age eligibility

SagaCrest accounts are intended for people who are at least 16 years old.

SagaCrest does not knowingly permit children under 16 to create accounts. If SagaCrest learns that an account was created by a child under 16 in violation of this rule, it may take appropriate steps to close the account and delete or restrict associated personal information, subject to applicable law and necessary security or legal records.

13. Cookies, browser storage, and analytics

SagaCrest may use cookies, browser storage, authentication tokens, and similar technologies when necessary for sign-in, security, preferences, application state, offline behavior, recovery, and other requested functionality.

SagaCrest does not currently use third-party advertising cookies or advertising trackers for behavioral advertising.

SagaCrest may use bounded product analytics and operational diagnostics to understand reliability and feature usage. If SagaCrest later introduces optional analytics or tracking that legally requires consent, it will provide the required choice before activating that processing for affected users.

14. Account closure and deletion

SagaCrest provides account and workspace lifecycle controls through supported application flows. Account closure may require identity verification and may include a protected recovery or processing period before deletion is finalized.

Deletion does not necessarily remove every record immediately. Backup copies, security records, audit evidence, policy-acceptance records, fraud-prevention records, legal records, and other information may remain for limited periods or longer where law or legitimate security and dispute-resolution needs permit.

15. Changes to this Privacy Notice

SagaCrest may update this Privacy Notice as the service, providers, legal requirements, or data practices change.

Updated notices carry a new version and last-updated date. Material changes may also be presented in the application or otherwise communicated when required by applicable law.

16. Contact