← Back to SceneRally

Privacy Policy

Last updated September 20, 2026

1. Scope and contact

This notice explains how the SceneRally team handles information for interactivestory.io. Contact cnvx.studio@gmail.com about privacy.

The information processed depends on the features you actually use. Browsing alone does not create an account or purchase. Account, participation and generation records arise from the corresponding activity. Payment-related processing below applies to an actual purchase or a request concerning one.

2. Information used and why

  • Website access: technical request data such as IP address, browser details, requested URLs and time, used to deliver pages and media, investigate errors and protect the site.
  • Support, content reports and appeals: your email address and the details you send, used to answer you, investigate an issue and retain relevant evidence.
  • Google sign-in: the account identifier, email address, name/profile image provided by Google and authentication/session records. These identify your account and protect access. SceneRally does not ask for your Google password or permission to read your Gmail.
  • Purchases and Credits: order and provider references, pack, amount, currency, payment/refund status, balance and ledger entries. These deliver purchased Credits, reconcile payments, correct mistakes and investigate disputes. Full payment-card details are entered with the checkout provider, not in a SceneRally support message.
  • Participation: confirmed choices, amounts reserved/spent/released, round outcomes, delivery evidence and any public display name, honours or share information you choose to use. These run rounds, keep account history and prevent duplicate charging.
  • AI requests and results, when generation is used: scene descriptions, selected actions, prompts, reference frames, generated media and provider request/results needed for generation and troubleshooting. Relevant content-review or support decisions may be kept with an incident record.

3. Service providers and disclosure

We share information needed for the service with the providers involved in the feature you use:

  • Vercel serves the public website and processes technical requests.
  • Google provides sign-in and handles email sent to our support mailbox.
  • Neon provides database storage where configured for account, order, participation and Credit records. The data stored depends on the features used.
  • Waffo, if used for an actual purchase, processes checkout, billing, payment-risk and refund information under its own privacy notice. The seller and payment provider are identified at checkout.
  • fal and the relevant model providers process AI-generation inputs and results. Where a round requests new AI-generated video, the video generation integration uses MiniMax H3 Max Turbo via fal. A generation request is based on scene material and action information, not a need for your card number or Google password.

Provider use, retention and model-training practices depend on the applicable provider terms and configuration. We do not promise that every provider stores nothing or applies identical rules. We may disclose limited information where necessary to comply with law, address abuse, protect rights or resolve a payment dispute. SceneRally does not sell personal information. Our product analytics is stored with Neon; we do not send it to an advertising network.

4. Public scenes and private account information

Battle videos form a shared, publicly viewed story. Public name, honour or share features, when used, can make their displayed information visible to others. Your account email, session credentials and individual payment details are not intended for public display. Avoid adding private information to public names, shared content or support attachments that do not need it.

5. Cookies and local storage

Necessary session cookies support sign-in and authenticated requests. Local storage may preserve a return destination or an unfinished choice when you move through the sign-in flow; restoring that choice does not itself confirm a commitment. Hosting and identity providers may also process technical security information. Blocking necessary cookies can prevent sign-in.

Basic audience counts: we count page views, browsers and button activations by date, broad source category, country and device category to improve this service. A separate random first-party browser reference lasts for up to 30 days. These basic counts do not automatically connect browsing to your account or purchases or enable optional detailed analytics. Our analytics does not store IP addresses, full browser strings, full referrer URLs, search terms or page-query contents. Event references prevent duplicate counting. Individual basic events are kept for up to 90 days, with browser references removed after 30 days; totals are kept for up to 395 days. Turning basic counts off clears this browser reference and removes its recorded associations. You can turn these counts off in Analytics preferences at the bottom of the page. We also honour browser Do Not Track and Global Privacy Control signals.

Optional product analytics is off by default. If you enable it in Analytics preferences, we use random visitor and visit references to measure actual viewing, participation, sharing and repeat use. When signed in, this can connect that visit's source, country and device to your participation and provider-confirmed purchase. This helps us understand which visits lead to use or payment. Optional event records are kept for up to 90 days; the visitor reference expires after 90 days and a visit ends after 30 minutes of inactivity. You may withdraw permission in the same control at any time. This clears this browser's optional references and removes its active account association; it does not undo an existing order or the operational records required to provide the service.

Your privacy and test-traffic preferences may be saved so we can respect them. No device fingerprinting or advertising profiling is used. Operational order, balance, generation and delivery records remain necessary to run and reconcile the service independently of optional browsing analytics.

6. Retention, security and international processing

Records are retained only as needed for their purpose: active-account operation, resolving requests, security investigations, bookkeeping or applicable legal/payment obligations. There is no single retention period for every record. We consider the type of information, whether an account or dispute remains active, applicable duties and provider backup cycles before deleting or de-identifying it.

Deletion from active records may not remove isolated backup copies immediately; copies age out under the applicable backup arrangements and should not be restored into normal use without applying relevant deletion requirements. We do not promise instant deletion from every provider or backup.

Access is restricted to service needs, and security measures are used to protect data; no service can promise absolute security. Providers may process information in countries other than your own, where rules differ. Required safeguards and transfer arrangements must apply where relevant law requires them.

7. Privacy requests

Email cnvx.studio@gmail.com to request access, correction, deletion or an explanation of processing. Depending on the law that applies, you may also have rights to portability, restriction, objection or withdrawal of consent. We verify identity proportionately and explain any record we need to retain, including payment or dispute evidence.

Information is used to provide requested services, pursue legitimate operational/security needs, comply with applicable obligations or obtain consent where required. A request should not require disclosure of your password or full card number. You may also complain to the data-protection authority available in your jurisdiction.

8. Children and updates

Account-based participation and paid AI features are intended for adults. Do not submit children's personal information. Contact us if you believe a child has provided information so we can investigate and take appropriate action.

Material changes will be reflected in this notice and communicated as appropriate before materially different processing begins.