Privacy Policy

1.1This policy covers the STALBASE website, accounts, tools, BaseAI, and related features. Third-party websites and services apply their own privacy policies.

2.1Depending on the feature, this may include profile identifiers and details authorized through EXBO OAuth; public game data; site preferences and activity; technical security logs; and messages or files you voluntarily submit to BaseAI.

3.1We use data to sign you in, save preferences, operate tools, prevent abuse, diagnose failures, provide support, and improve the service. We do not sell personal data.

4.1Authentication takes place with EXBO. STALBASE receives only the OAuth result and data permitted for the account. Secure cookies maintain the session; your EXBO password is never sent to STALBASE.

5.1BaseAI requests and history are encrypted at rest, but they are not end-to-end encrypted. Connected model providers may process content to produce a response. Authorized operators may have technical access for operations, troubleshooting, and incident investigation.

6.1BaseAI processes text, images, files, the selected model, request settings, and technical details needed to respond. Do not submit passwords, tokens, payment details, private documents, or personal information that the request does not require.

7.1Request content and necessary context may be sent to a connected model provider to produce a response. Providers and models may change. We aim to send only the data needed for the selected feature and limit access through technical and contractual measures.

8.1Conversation history is retained so conversations can continue and be managed from the account. Deleting a conversation or making a deletion request starts removal of the available copy; limited backup, security, or technical records may remain temporarily when needed for recovery, security, or applicable obligations.

9.1When the author explicitly chooses to share, a shared link creates a public immutable copy of the selected conversation and its attached images. Anyone with the link can access it. We retain the publication record, technical information needed to prevent abuse, and the report reason; an operator may open the shared copy and its related report for moderation, security, and legal compliance. Do not include personal data or secrets in a shared link.

10.1Hosting, security, OAuth, and model providers may process information only as needed for their feature. Information may also be disclosed when required by applicable law or necessary to protect users and the service.

11.1We keep data only for as long as reasonably needed for the feature, security, dispute resolution, and applicable obligations. Interaction recordings are automatically retained for up to 30 days; aggregated analytics may be retained longer for period comparisons. Public game information may be updated and cached to operate the tools.

12.1You may use features that do not require an account and avoid sending data to optional features. You may ask us to review, correct, or delete data linked to your internal identifier. Anonymous aggregates cannot be reliably separated back into one person's data, and limited backup, security, or technical copies may remain until their defined retention period expires.

13.1We use reasonable technical and organizational safeguards, including protected sessions and access controls. No online service can guarantee absolute security, so do not submit secrets or information that a feature does not need.

14.1We will update this document and its effective date when our processing practices change. Material changes may also be announced in the interface or changelog.