WeStory Privacy Policy
Effective 9 October 2026 · version 2026-10-09.2. Operated by LazyingArt. Contact: lachlan.miao.chen@gmail.com.
What we store and why
We store your chosen display name, a hash of your personal access key, contribution and group messages, AI replies, story suggestions, published fiction, consent, blocks and reports. These provide membership, collaboration, moderation and the story. Enrollment records include a keyed hash of your network address for rate limiting. The hosting gateway may process network addresses and request metadata for security. We do not sell personal data, run advertising or use cross-site advertising trackers.
Optional LazyingArt web sign-in
On the website, you can choose Continue with LazyingArt and sign in with your LazyingArt password. That password is entered at the LazyingArt sign-in service, not received by WeStory. WeStory receives your display name and a stable account identifier (subject) from that service (issuer), and links them to your WeStory account. We store those identifiers, app session records, and encrypted delegated sign-in credentials and identity proof to verify, refresh and revoke your WeStory sessions. Native Android, iOS and macOS apps currently use personal recovery keys; signing in through a browser does not sign you in to a native app or grant room access.
Deleting your WeStory account removes its shared-identity mapping and app sessions and queues revocation and erasure of its delegated sessions. If the sign-in service is unavailable, local WeStory access remains revoked while cleanup retries. The issuer/subject reference and encrypted session records needed for that cleanup remain until it succeeds; a hashed shared-account erasure record remains to prevent restored or late sessions from reviving access. This deletes WeStory access and data within the limits below, not your central LazyingArt account or data held by other apps. Manage or request deletion of the central account separately through LazyingArt.
Who can see it
Circle messages are visible to members of that room. Published fiction is visible to room members, and to anyone with a reading link when its editor explicitly enables link sharing. Reading links never grant membership or access to conversations. Private notes and derived private ideas are visible to you and the editors of that room. Rooms have separate people, agreements and stories. Editors and the WeStory safety operator receive reports. The safety inbox retains room/report references and review status, not a second copy of your messages; the operator can inspect the reported content for safety review. AI processing sends new contribution and group text, display names, participant identifiers, room rules, published story context and derived suggestions to DeepSeek to organize ideas, reply, draft and review fiction. The provider may process data outside your country under its own privacy and retention terms. Do not send confidential, sensitive or third-party personal information. AI is identified and can make mistakes; its suggestions are not authoritative.
Your choice about AI processing
Joining or reading does not give AI permission. Before sending contributions in a room, separately choose “Allow DeepSeek AI processing” in Privacy & account after reading the disclosure. You can continue reading, reporting content or deleting your account without agreeing. Permission covers new submissions, not earlier queued messages. You can withdraw permission in the same control. Withdrawal stops future processing of your unpublished input, invalidates pending jobs and clears unpublished shared AI suggestions that may contain it. Requests already sent cannot be recalled, and withdrawal does not rewrite published collaborative fiction. If the provider or disclosure changes, we require a new permission version before sending new input.
The private AI companion is on by default as a preference, but does not grant AI permission. Turn it off in Your space to save new notes without AI processing. Accepting the Community Terms is still required. Turning it on later does not send notes saved with AI off. This choice is separate from the Circle’s AI setting and the story-writing pause. Private conversation uses only your permitted private history and shared story context; room editors retain moderation access.
Storage, retention and deletion
Messages stay until you delete your account or moderation removes them. Use Privacy & account → Delete account in the app, or the web deletion page. Account deletion applies across all your rooms. It revokes access and removes your display name, enrollment details, private notes and derived ideas. Rooms you own are archived: AI writing, invitations and public reading links are disabled, and remaining members become readers. Your group text is removed; AI group replies and derived group memory are cleared to avoid retaining quotations. Private AI work artifacts are cleared and in-flight jobs are invalidated. Managed database backups are scrubbed too. Minimal operational records remain: internal account/member IDs, hashed credential references, room ownership and membership links, removed-message IDs/timestamps, event records, report target/status/timestamps, safety-inbox room/report references, and deletion-ledger hashes/IDs and request times. Removed report text is scrubbed. These records are restricted to service operation and safety review; they do not preserve your display name or deleted message text. They currently have no automatic expiry. We retain deletion records while backups could restore an account; room and membership references while needed to preserve the remaining room; and report/status references while needed for safety follow-up and review integrity. Contact us to request review of retained references. Managed backups are scrubbed and restored databases must replay the erasure ledger; downloaded copies and independently held backups cannot be recalled by the app. Published collaborative fiction remains without your identity or source links; report any passage containing personal information for removal. Deletion cannot recall copies already downloaded by readers or data already processed by the provider. Contact us for questions or an access/deletion request if you have lost your personal key. We will verify ownership without asking for your key by email.
Your device and control
The app stores session cookies, your personal key in native secure storage, and unsent drafts locally so you can recover from disconnection. Delete account clears this account’s local room drafts on the deleting device. Drafts belonging to other accounts are preserved. Other devices lose access; remove their local drafts by clearing the app’s storage. Signing out preserves your drafts for your account and is separate from deletion. You can block members, report content and choose not to contribute. WeStory is intended for adults 18 and older. We do not knowingly collect children’s data.