← Back to SceneRally

Privacy Policy

Last updated September 20, 2026

1. Scope and contact

This notice explains how the SceneRally team handles information for interactivestory.io. Contact cnvx.studio@gmail.com about privacy.

The information processed depends on the features you actually use. Browsing alone does not create an account or purchase. Account, participation and generation records arise from the corresponding activity. Payment-related processing below applies to an actual purchase or a request concerning one.

2. Information used and why

  • Website access: technical request data such as IP address, browser details, requested URLs and time, used to deliver pages and media, investigate errors and protect the site.
  • Support, content reports and appeals: your email address and the details you send, used to answer you, investigate an issue and retain relevant evidence.
  • Google sign-in: the account identifier, email address, name/profile image provided by Google and authentication/session records. These identify your account and protect access. SceneRally does not ask for your Google password or permission to read your Gmail.
  • Purchases and Credits: order and provider references, pack, amount, currency, payment/refund status, balance and ledger entries. These deliver purchased Credits, reconcile payments, correct mistakes and investigate disputes. Full payment-card details are entered with the checkout provider, not in a SceneRally support message.
  • Participation: confirmed choices, amounts reserved/spent/released, round outcomes, delivery evidence and any public display name, honours or share information you choose to use. These run rounds, keep account history and prevent duplicate charging.
  • AI requests and results, when generation is used: scene descriptions, selected actions, prompts, reference frames, generated media and provider request/results needed for generation and troubleshooting. Relevant content-review or support decisions may be kept with an incident record.

3. Service providers and disclosure

We share information needed for the service with the providers involved in the feature you use:

  • Vercel serves the public website and processes technical requests.
  • Google provides sign-in and handles email sent to our support mailbox.
  • Neon provides database storage where configured for account, order, participation and Credit records. The data stored depends on the features used.
  • Waffo, if used for an actual purchase, processes checkout, billing, payment-risk and refund information under its own privacy notice. The seller and payment provider are identified at checkout.
  • fal and the relevant model providers process AI-generation inputs and results. Where a round requests new AI-generated video, the video generation integration uses MiniMax H3 Max Turbo via fal. A generation request is based on scene material and action information, not a need for your card number or Google password.

Provider use, retention and model-training practices depend on the applicable provider terms and configuration. We do not promise that every provider stores nothing or applies identical rules. We may disclose limited information where necessary to comply with law, address abuse, protect rights or resolve a payment dispute. SceneRally does not sell personal information. Optional advertising or analytics tracking must be described with applicable controls before it is introduced.

4. Public scenes and private account information

Battle videos form a shared, publicly viewed story. Public name, honour or share features, when used, can make their displayed information visible to others. Your account email, session credentials and individual payment details are not intended for public display. Avoid adding private information to public names, shared content or support attachments that do not need it.

5. Cookies and local storage

Necessary session cookies support sign-in and authenticated requests. Local storage may preserve a return destination or an unfinished choice when you move through the sign-in flow; restoring that choice does not itself confirm a commitment. Hosting and identity providers may also process technical security information. Blocking necessary cookies can prevent sign-in. Optional advertising or analytics tracking requires an updated notice and applicable controls before use.

6. Retention, security and international processing

Records are retained only as needed for their purpose: active-account operation, resolving requests, security investigations, bookkeeping or applicable legal/payment obligations. There is no single retention period for every record. We consider the type of information, whether an account or dispute remains active, applicable duties and provider backup cycles before deleting or de-identifying it.

Deletion from active records may not remove isolated backup copies immediately; copies age out under the applicable backup arrangements and should not be restored into normal use without applying relevant deletion requirements. We do not promise instant deletion from every provider or backup.

Access is restricted to service needs, and security measures are used to protect data; no service can promise absolute security. Providers may process information in countries other than your own, where rules differ. Required safeguards and transfer arrangements must apply where relevant law requires them.

7. Privacy requests

Email cnvx.studio@gmail.com to request access, correction, deletion or an explanation of processing. Depending on the law that applies, you may also have rights to portability, restriction, objection or withdrawal of consent. We verify identity proportionately and explain any record we need to retain, including payment or dispute evidence.

Information is used to provide requested services, pursue legitimate operational/security needs, comply with applicable obligations or obtain consent where required. A request should not require disclosure of your password or full card number. You may also complain to the data-protection authority available in your jurisdiction.

8. Children and updates

Account-based participation and paid AI features are intended for adults. Do not submit children's personal information. Contact us if you believe a child has provided information so we can investigate and take appropriate action.

Material changes will be reflected in this notice and communicated as appropriate before materially different processing begins.