Last updated: September 14, 2026
Witold Klimczak
Email: android.witek@gmail.com
Liber Meus is an independent project operated by an individual based in Poland.
When you sign in with Google, we receive and store:
We do not collect your password or your location, and we receive nothing else from your Google account.
Server logs. Like any website, our servers record each request in technical logs: your IP address, the time, the page requested, technical details such as your browser type, and the data sent in forms, with email addresses and secret values filtered out. We use these logs only to keep the service secure and to fix errors, on the basis of our legitimate interest (Article 6(1)(f) GDPR). They are not backed up or analysed for any other purpose, and they are overwritten automatically once they reach a fixed size.
Where visitors come from. When you first open the sign-in page or the demo, we record the address of the page that linked you here and any campaign tags in the link, so we can see which places bring visitors. This record is not connected to an account or a cookie. We also count anonymous milestones, such as a game being started, with the mode and language, likewise without any link to an account.
If you play the demo without signing in, we create a temporary account that holds no personal information — only the demo game you play. It is deleted automatically 24 hours after it was created if you never play a turn, or 7 days after you last played.
As you play, the application creates and stores:
If you subscribe to Premium, we additionally store your subscription status, the date your access runs until, any scheduled cancellation date, and the customer and subscription identifiers assigned by our payment provider (see section 5). We do not store any card or billing details.
If you cancel a subscription through the cancellation form without signing in, we keep what you enter there (your email address, name, the subscription identifier and the reason you give) as a record of the cancellation.
Your data is used solely to:
We do not use your data for advertising, profiling, or marketing. We do not sell your data to third parties.
Our legal basis for this processing is performance of a contract (Article 6(1)(b) GDPR) — the terms you accept when you use the service, and the subscription you enter into if you buy Premium. Where we act to prevent abuse of the token system, our basis is our legitimate interest (Article 6(1)(f) GDPR) in keeping the service available and affordable to run. Screening what you write, and suspending accounts that repeatedly try to generate prohibited content, is likewise based on our legitimate interest in keeping content that is illegal or forbidden by our Content Policy off the service.
A suspension can be applied automatically, when screening records reach a set level within 30 days. If that happens, you can contest it by writing to the address in section 1, and a person will review the decision.
To generate game content, your in-game actions, the world and hero descriptions you write, and the narrative context are sent to AI providers through OpenRouter (OpenRouter, Inc., United States). These requests contain game text only — never your email, name, or account details. Please do not include real personal information about yourself or anyone else in what you write.
The AI models used include DeepSeek models for narration and turn analysis; OpenAI models (GPT-4o-mini, GPT-5 and text embeddings) for story summaries, story memory, world maps and portrait descriptions; and Krea for hero portraits. OpenRouter may route a request to any provider that serves the chosen model, and those providers may process it outside the European Union. We recommend reviewing their respective privacy policies.
Hero portraits. Your hero's description is never sent to the image model as written. An AI model first rewrites it, together with the world description, into a short English description of how the hero looks, and only that description is sent to the image model. If you draw your hero's current look, the rewrite also uses the game's note on how the hero looks at that point in the story, and the first portrait drawn from your hero's description is sent to the image model as a style reference, so that later portraits keep the same look. The finished image is returned to us directly and stored on our servers (see section 7).
Content screening. The text you write when setting up or editing a game, and each action you type, is sent to OpenAI's moderation service (OpenAI, L.L.C., United States), which scores it for sexual content involving minors. Only the text is sent, never your account details. We keep the result as described in section 3; OpenAI's handling of the text is governed by its own policies.
We use Google OAuth 2.0 for authentication. Google's handling of your data during sign-in is governed by Google's Privacy Policy.
If you buy a Premium subscription, payment is handled by Paddle.com Market Ltd (United Kingdom), acting as the merchant of record. When you open the checkout, we pass Paddle your email address and your Liber Meus account identifier so that the purchase can be matched to your account. You then enter your payment and billing details directly with Paddle — card numbers and billing addresses never reach our servers. Paddle acts as an independent data controller for the data it collects; its handling of that data is governed by Paddle's Privacy Policy. Paddle returns to us your subscription status, billing period dates, and the identifiers described in section 3. The United Kingdom is covered by a European Commission adequacy decision, so this transfer does not require additional safeguards.
Apart from the services named above, no other third parties receive your data. We do not use analytics, advertising networks, or external fonts. The only third-party script on the site is Paddle's checkout script, which loads on the Premium page alone and is not present anywhere else in the game; it may perform device checks for fraud prevention as part of processing a payment.
We use a single session cookie (_liber_meus_v2_session) that is strictly necessary for the application to function. It keeps you signed in and stores your language preference. We do not use tracking cookies, analytics cookies, or advertising cookies.
When you open the Premium page, Paddle's checkout script loads there and may set its own cookies, so that it can show you the price in your currency, process a payment, and prevent fraud. They are needed for the Premium page to offer a purchase, they are set only on that page, and they are not used to track you across the site.
Your data is stored on servers located in Germany (Hetzner Cloud), within the European Union. Data is transmitted over HTTPS. Access to the database is restricted to the application. Hero portraits are stored as image files on the same servers.
Database backups are created daily. They are kept for 7 days on the server itself and for 14 days on a separate server of the same provider within the European Union, and are then deleted automatically. Backups contain the same categories of data described in sections 2 and 3, except portrait images, which are not backed up.
Your account and game data are retained for as long as your account is active. Token balances are refreshed once a day (at midnight UTC) up to the default allocation.
Portraits are kept with the game they belong to, including earlier versions, and are deleted when that game is deleted. Your monthly portrait count resets on the first day of each month (UTC).
Content screening records are kept for 2 years and then deleted automatically, including after you delete your account, when they stay attached to the anonymized account record. They contain no text you wrote. Any suspension stays on the account record.
If you delete your account, all game data is permanently removed and your personal information is erased (see section 9).
Records of any payments you make are held by Paddle under its own legal obligations, such as tax and accounting law, independently of your Liber Meus account. Deleting your account removes the link we hold between you and those records, but it does not delete records Paddle is required to keep.
Under the General Data Protection Regulation, you have the right to:
Your right to object. Where we rely on our legitimate interest (Article 6(1)(f) GDPR), as described in sections 2 and 4, you have the right to object to that processing at any time, on grounds relating to your particular situation. Write to the email address in section 1. We will then stop that processing unless we can show compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is needed to establish, exercise, or defend legal claims.
When you delete your account:
If you sign up again with the same Google account, your token balance carries over but no other data is restored.
Liber Meus is intended for users aged 18 and older. The game is rated Mature (18+); what it does and does not contain is set out in our Content Policy. By using the service, you confirm that you are at least 18 years old.
We may update this policy when the service or the law changes. Material changes will be announced on this page before they take effect, by updating the date at the top and adding a dated note of what changed. We also point you to that note with a notice in the game.
What changed. 14 September 2026: added the records of where visitors come from, of AI usage per request, of preferences and survey dates, and of cancellations made without signing in (sections 2 and 3); corrected which portrait serves as the style reference (section 5) and where backups are kept (section 7).
For any privacy-related questions or requests, contact:
android.witek@gmail.com