Never-Bound

Never-Bound™ is an unregistered trademark of HappyRock L.L.C. HappyRock L.L.C. is an agent and venue, not the publisher of these works.

Never-Bound Privacy Policy Version 2026-09-23.1 Never-Bound™ is an unregistered trademark of HappyRock L.L.C. HappyRock L.L.C. is an agent and venue, not the publisher of these works. HappyRock L.L.C. is the controller for this venue. Never-Bound™ is an unregistered trademark, not a separate company. This policy describes what the stall’s code actually stores and which processors it calls. 1. Account. If you enroll or enter, we keep account email, a display name, and any pen names you put on a listing. You may enter with email and a password, or through Google or X. Those doors go through our sign-in broker; we receive an account identifier, email when the provider sends one, and a display name. OAuth tokens needed to keep that door open sit in the account table. Adult attestation and terms acceptance (document, version, hash) sit on your profile. At clickwrap we store a hash of the network address, not the raw address, and we do not keep a raw-IP clickwrap log. The sign-in library may also keep a session token, expiry, and the network address and browser string it saw at sign-in. 2. Cookies and pixels. Sessions use host-only cookies named with a __Host- prefix (session token, a short-lived session cache, account cache, a “don’t remember” flag, and a gate-session marker). They are for signing you in and keeping you signed in. This stall does not load marketing pixels, analytics tags, or advertising cookies. 3. Listings, shelf, and pages. Listings: manuscript and character text you submit, titles, synopses or hooks, excerpts, completeness, genre or role, and files you upload with a listing. For each sealed version we keep a SHA-256 of the canonical bytes, a 128-bit nonce, a commitment hash, an OpenTimestamps proof, and an RFC 3161 token. Those proofs are not the draft. Private shelf: saved text and private notes, which are not published. Account drafts and their version history include writing and attachments. Pages from the table: Photographs of physical pages are read on your device. We do not keep the photographs. Words you ask to keep sit as page-folio text on your private shelf and are not listed on the stall. Reading locks (which leaf you marked) and passage marks (coin spent to underline a line for the writer) are kept with the account or listing as the feature requires. Passage marks shown to a writer do not name the reader. 4. Safety scans and reports. Manuscript, character, and kept folio text you submit may be sent to xAI for safety scoring and generative-prose scoring. We store the resulting scores and safety status on the listing. If a scan blocks the text, we record a scan-reject row with kind, pen name, title, policy code, and score — not the body, and not a blocked snippet. Scan failure and block messages do not return blocked snippets to the lister. Content reports you file (reason and listing) are stored for review. Scan text is not used for marketing. [TODO: counsel to confirm xAI’s then-current terms on whether submitted scan text is used by xAI for model training. HappyRock L.L.C. does not use that scan text for HappyRock model training or for marketing.] 5. Tips, coin, and payouts. House subscriptions, the coin ledger, and patronage balances and ledgers. Stripe customer id and subscription id; card brand and last four digits (and expiry month/year when Stripe returns them) so we can show a card on file — never a full pan. For writers who finish payout KYC: Stripe Connect account id and flags (charges enabled, payouts enabled). Tax identity (W-9 / W-8BEN) is collected by Stripe Connect, not stored as tax forms on this stall. Payment records (amount, status, listing, processor reference) are kept as the card network and tax rules require. Inside the Play Store listing, a house subscription may also store a Google Play purchase token, order id, and expiry so the stall can grant the same guest mark after Play confirms a paid month. 6. What is public. What is public on the stall: pen names, titles, synopses or hooks, excerpt previews, scan scores, a listed-as-of record (listing id, date, and a hash prefix), and other merchandising. Legal names and emails are not placed on public listing payloads. Reader identity is not put on the stall. Preview pages may carry a session mark. The canonical file is not watermarked. 7. Letters. When you enroll with email and a password, we send a verification letter to that address so we know it is yours. We do not send marketing mail. Weekly listing letter: if you opt in, we may email a weekly listing letter of pen names, titles, and synopses from listings that week. That letter is not marketing. A stop link is in every letter. Daily digest: we email a daily operational summary of listings and safety events to HappyRock L.L.C. (noreply@neverbound.app). That summary uses pen names and listing metadata, not reader identities, emails, or full manuscript bodies. Scan rejects in that digest follow the same rule: no body snippets. noreply@neverbound.app is product mail, not the privacy contact. 8. Processors. Processors this stall actually calls: • HappyRock L.L.C. (operates the venue) • Stripe and Stripe Connect (house subscriptions on the open web, cards, Connect payouts) • Google Play Billing (house subscriptions inside the Play Store listing) • Resend (verification letters, the weekly listing letter, the daily digest) • xAI (safety scoring and generative-prose scoring of submitted text) • Vercel (hosts the app) • Google and X (sign-in, when you choose those doors) 9. Personal information and ads. We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not load marketing pixels. xAI scan text is not used by HappyRock for model training or marketing. [TODO: counsel to confirm xAI’s training terms.] 10. Your rights. You may ask to access, correct, delete, or export the personal information we hold about you. From Account settings you can download a JSON copy of your papers (profile, pen names, listing ids and titles, coin balance, subscription totals — not a full card number, not Stripe live keys, not another person’s email) and you can close this door by typing a confirm phrase. Closing withdraws and hides your public listings, deletes private notes and kept page text, revokes sessions, and keeps payment rows needed for tax and chargebacks under a deleted label. The same email, Google, or X subject cannot open this door again. California residents may also contact us to say “do not sell or share” personal information; we do not sell or share it for cross-context ads, and we will record the request. Write to privacy@neverbound.app. We may need to verify the account. Deletion ends access. It does not unwind a house subscription already processed, and it does not erase records we must keep for law, payment disputes, tax, card networks, or safety holds. 11. Retention. Accounts remain until you delete them from Account settings, or until we close them for a broken rule, plus any legal hold. Payment records are kept as required by tax rules and card networks, with the user id replaced by a deleted label. Scan-reject rows are kept without body snippets. Session cookies last for the session or the “remember” window the sign-in library sets. Clickwrap stores a hash, not a raw IP log. 12. Contact. Privacy: privacy@neverbound.app. Legal: legal@neverbound.app. Product and operational mail (verification, digest, weekly letter): noreply@neverbound.app. Do not use noreply@neverbound.app as the privacy contact.