Privacy Policy

The book you build — every case, its clues, its solution and its design settings — is stored in your own web browser, on your own device. It is not uploaded to us and we cannot see it.

This has a consequence worth stating plainly: we cannot recover your work for you. If you clear your browser data, use a different browser or a different computer, your book will not be there. The Studio provides a Back Up Project action that saves a project file to your device — that file is yours, and it is the only backup that exists.

Generating a case sends your settings to our server: the mystery type, the number of suspects and areas, the map size and Map Style, the difficulty, the solution goal, which clue types are enabled, the environmental-clue level, and the seed.

So that a new case fits and varies within the book it joins, a few facts derived from your book go with it: the book’s page count, its content language when that is not English, how much wider than standard its fonts set, and short abstract descriptions of the deduction shapes and object kinds used by your most recent cases.

If you use Customize Cast, the request also includes the suspect names and optional occupations you entered for that case. Portraits you upload never leave your browser.

If you use Kids Mystery Edition, generating a case sends its settings: the age band, the mystery type, the language, the number of characters, the case size, the difficulty and the seed. Your Kids book itself is not sent.

Book Cover Studio sends nothing you create to our server. Your cover, and the images and fonts you add to it, stay in your browser.

If the case is part of a Bulk Production or Kids batch, the request also says so, with a random number for the batch, so its cases can be counted together (clause 5).

That is the whole list. Your book itself — its cases, clues, solutions and pages — is not sent, and the request contains no account name or email address. The finished case is returned to your browser, and the generation step keeps no copy.

The request is made from your signed-in session, so we can check your access. On the Cluevora Trial, a successful generation is counted against your Trial allowance.

Note that the seed can be typed by you. If you type personal information into the seed field, it is sent as part of the request — so please don’t.

PDF, PNG and PowerPoint files are produced entirely inside your browser. Your pages are never uploaded to us to be rendered, and we never hold a copy of a file you export.

When you are signed in and an export finishes or fails — in the Studio, Kids Mystery Edition or Book Cover Studio — your browser tells our server that it happened: which tool, the format, whether it was a whole book, a page, a case or a cover, and, for a book, how many pages it had. The same happens when you save a cast in Customize Cast. The file, the cover and the names are never sent. These notes become part of your usage record (clause 5).

Purchases are handled by a third-party checkout platform — WarriorPlus, the platform used to process Cluevora purchases — not by us. WarriorPlus and its payment processors collect your payment details and are responsible for them under their own privacy policies. We do not receive or store your card or bank details.

When a purchase, refund or chargeback is reported to us, we record the sale and transaction identifiers, the product, the email address used for the purchase, and the result, so your access can be granted or revoked. We do not keep the rest of the notification (such as a postal address).

You sign in to Cluevora with your email address: we email you a single-use sign-in link, and a session cookie keeps you signed in. This applies to customers and to people using the Cluevora Trial. To give you access, we store only what that needs:

• your email address, used to send sign-in links and to identify your access;
• sign-in link and session records, kept as one-way hashes of their tokens rather than the links themselves, with their timestamps;
• for customers: purchase and transaction identifiers received from the checkout platform, which product or plan you bought, whether your access is active, timestamps for the purchase and for changes to access, and — when support changes your access — the reason and any note recorded with it;
• for the Cluevora Trial: how many Trial generations and Trial PDF exports you have used, and when your Trial record was created and last updated;
• a usage record of what you do while signed in, kept with your email address: each request to generate a case (which tool, whether it succeeded, failed or was refused, and why, as a short code), each export (clause 3) and each saved cast, with the time. It contains nothing you create — no cases, clues, names, portraits, covers or files — and no IP address or device details. We use it only to understand how Cluevora is used and to improve it; it is not shared, sold or used for advertising, and each entry is deleted after 13 months;
• operational event logs (for example, that a sign-in link was sent or a case was generated, and how long it took). They do not contain your email address, IP address or browser details. Our hosting provider may keep its own request logs.

Your IP address and email address may be used briefly, in memory, to limit repeated sign-in requests; they are not written to storage or logs for that purpose. Your IP address is also looked up, in memory and on our own server, against an IP-to-country database to decide which analytics choice applies to you (clause 6); only whether you are in the region where we ask first is kept, in your browser, for the rest of your visit, and the address is not stored or logged. We do not use device fingerprinting and do not collect your precise location. Trial usage is counted against your email address, not your device, and your Trial cases — like every book — stay in your browser.

On your own device, Cluevora keeps:

• your book, and — on the Cluevora Trial — your Trial book, under a name derived from a one-way digest of your email address rather than the address itself;
• whether Trial cases have been brought into your paid book;
• your choices of site theme, Studio theme and Studio language;
• fonts you upload for your book (in your browser’s IndexedDB store);
• if you use the Expansion Vault: your Kids Mystery Edition book; portraits you upload in Customize Cast, saved with your book; and your Book Cover Studio cover, with the images and fonts you add to it (in IndexedDB);
• your analytics choice, if you make one, so we do not ask again on every page;
• for the rest of your visit only, whether you were found to be in the region where we ask first (below).

A project backup file you save contains your book and, if you use them, your uploaded fonts. It contains no email address, sign-in token or purchase information.

• We do not store your projects, books or exports.
• We do not use advertising trackers. Our only analytics tool is Google Analytics, used as described in clause 6. Our checkout pages may load WarriorPlus functionality needed for purchase attribution, checkout operation and affiliate tracking.
• We do not sell or rent personal information.
• We do not send your work to any AI service, and we do not use it to train models.
• We do not use cookies for advertising. Sign-in uses a session cookie; analytics cookies are set only as described in clause 6.
• We do not send your name, email address, sign-in links or your books to Google Analytics.

Each provider processes information only as needed to provide its service:

• Render — website hosting and the database that holds the account records above;
• Namecheap Private Email — sending sign-in emails from support@cluevora.com;
• WarriorPlus — the checkout platform used to process Cluevora purchases and, on sales pages, to provide checkout and affiliate-attribution functionality;
• Google (Google Analytics) — when analytics is on for you (clause 6): counting visits and how the site is used, such as the pages viewed, the page you came from, and your device and browser type, and the two milestones described in clause 6. Google receives your IP address when your browser contacts it and derives an approximate location from it; our server’s milestone reports do not include your IP address. Google signals and advertising features are turned off, and we tell Google not to use these reports for advertising.

The IP-to-country lookup in clause 5 uses DB-IP’s free database (IP Geolocation by DB-IP, licensed under CC BY 4.0), which runs on our own server: your address is not sent to DB-IP.

The fonts on this site are served by Cluevora itself; your browser does not contact a font service to load them.

• Sign-in links and sessions. A sign-in link stops working after 15 minutes or its first use, and a session after 30 days or when you sign out. Sign-in links and sessions expire automatically. Expired records are periodically removed during authentication activity.
• Purchase, access and support records — including records of refunds, reversals and chargebacks — are kept so that your access can be provided and restored and purchases can be verified. They are not deleted on a fixed schedule.
• Trial records (your Trial usage counts) are kept so the Trial allowance stays accurate. They are not deleted on a fixed schedule.
• Analytics milestone reports (clause 6) wait on our server only until they are delivered to Google Analytics — at most about three days. The Google Analytics identifiers in them are then deleted; what remains is a one-way code recording that the milestone was reported, so it is never reported twice.
• Logs. Our event logs contain no email or IP address. How long they, and our hosting provider’s request logs, are kept is set by our hosting provider.

You can ask us to delete records about you at any time (clause 11). We may need to keep some of them where the law requires it, for example for accounting.

Information stored in your browser stays until you clear it. You can remove it at any time by clearing your browser data for this site — back your project up first.

We use reasonable technical and organisational measures to protect the limited information we hold. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete or restrict use of personal information we hold about you, or to object to certain processing. Contact us at support@cluevora.com and we will respond as the applicable law requires.

Because your projects are stored only in your browser, a request about them is something you carry out yourself by clearing your browser data.

Cluevora is a business tool intended for adults. It is not directed at children, and we do not knowingly collect information from them. Kids Mystery Edition is a tool for adults who create books for children; it is not intended to be used by children.

We will update this policy as Cluevora changes. The effective date at the top shows the current version.

Anas Jaouhar
support@cluevora.com