1. Data yang Kami Kumpul

• Akaun: nama, e-mel, kata laluan (disulitkan/hashed) atau log masuk melalui Google (nama, e-mel, gambar profil sahaja — kami TIDAK mengakses fail Google Drive atau data Google lain anda).
• Kandungan yang anda cipta: cerita, muka cerita, imej kaver/watak/adegan (termasuk imej janaan AI), komen, dan penilaian.
• Borang awam tanpa akaun: borang "Jadi Penulis" (nama, e-mel, kategori umur pilihan, motivasi) dan "Hubungi Kami" (nama, e-mel, mesej).
• Data teknikal: sesi log masuk dan token keselamatan borang (CSRF) — diperlukan untuk fungsi asas laman, bukan untuk penjejakan pengiklanan pihak ketiga.

2. Bagaimana Data Digunakan

• Membolehkan anda log masuk, menulis, membaca, dan berinteraksi dengan cerita.
• Menjana kandungan bantuan AI (draf cerita, imej kaver/watak/adegan) apabila diminta oleh penulis.
• Menyemak kandungan yang dihantar untuk semakan bagi memastian pematuhan garis panduan kandungan & undang-undang Malaysia sebelum diterbitkan.
• Membalas borang "Hubungi Kami" dan "Jadi Penulis".
• Sandaran sistem dan pemulihan bencana (rujuk bahagian 4).

3. Perkongsian dengan Pihak Ketiga

Kami tidak menjual data peribadi anda. Data diproses oleh perkhidmatan berikut semata-mata untuk menjalankan fungsi platform:

• Penyedia AI (Anthropic, OpenAI, DeepSeek, dan/atau Together AI, bergantung tetapan Pentadbir semasa) — menerima teks arahan/draf cerita untuk menjana kandungan bantuan AI apabila diminta.
• Google (Log Masuk) — mengesahkan identiti anda semasa log masuk melalui Google; kami hanya menerima nama, e-mel, dan gambar profil asas.
• Google Drive — digunakan sebagai storan sandaran sistem PENTADBIR sahaja (bukan akaun Google peribadi pengguna biasa); salinan sandaran yang mengandungi data sistem dihantar ke Drive dalam bentuk disulitkan (encrypted).
• Perkhidmatan e-mel (Postmark/Resend) — menghantar notifikasi dan e-mel amaran sistem.

4. Tempoh Simpan & Sandaran

Sandaran sistem (pangkalan data + fail imej) disimpan mengikut tempoh yang ditetapkan Pentadbir (lazimnya beberapa hari), kemudian dibuang secara automatik. Data akaun dan cerita disimpan selagi akaun aktif; anda boleh memohon pembetulan atau pemadaman data melalui borang Hubungi Kami.

5. Akaun Kanak-Kanak

Akaun Penulis dicipta oleh Pentadbir sahaja (bukan pendaftaran kendiri) — sesetengah pemohon (contohnya melalui borang "Jadi Penulis") mungkin di bawah umur 18 tahun, dan akaun sedemikian lazimnya dicipta/diselia oleh ibu bapa atau penjaga. Akaun Pembaca pula terbuka kepada orang awam melalui pendaftaran kendiri dengan akaun Google — kami tidak menjalankan pengesahan umur khusus semasa pendaftaran ini. Kandungan yang dihantar untuk penerbitan disemak (termasuk semakan bantuan AI) sebelum diterbitkan.

6. Hak Anda

Anda berhak memohon akses, pembetulan, atau pemadaman data peribadi anda. Hubungi kami melalui borang Hubungi Kami untuk sebarang permohonan sedemikian.

7. Hubungi Kami

Sebarang pertanyaan mengenai dasar privasi ini boleh dihantar melalui borang Hubungi Kami.

1. Data We Collect

• Account data: name, email address, password (hashed) or Google sign-in (name, email, profile picture only — we do NOT access your Google Drive files or any other Google data).
• Content you create: stories, story pages, cover/character/scene images (including AI-generated images), comments, and ratings.
• Public forms without an account: the "Become a Writer" form (name, email, optional age category, motivation) and the "Contact Us" form (name, email, message).
• Technical data: login session and CSRF security tokens — required for the site's core functionality, not for third-party advertising tracking.

2. How Data Is Used

• To let you sign in, write, read, and interact with stories.
• To generate AI-assisted content (story drafts, cover/character/scene images) when requested by a writer.
• To review content submitted for publication for compliance with our content guidelines and Malaysian law before it is published.
• To respond to "Contact Us" and "Become a Writer" submissions.
• For system backups and disaster recovery (see section 4).

3. Sharing With Third Parties

We do not sell your personal data. Data is processed by the following services solely to operate the platform:

• AI providers (Anthropic, OpenAI, DeepSeek, and/or Together AI, depending on current Administrator configuration) — receive prompt text/story drafts to generate AI-assisted content when requested.
• Google (Sign-In) — verifies your identity when signing in with Google; we only receive your basic name, email, and profile picture.
• Google Drive — used solely as the ADMINISTRATOR's system backup storage (not any regular user's personal Google account); backup copies containing system data are uploaded to Drive in encrypted form.
• Email services (Postmark/Resend) — send system notifications and alert emails.

4. Retention & Backups

System backups (database + image files) are kept for a period set by the Administrator (typically a few days), then automatically deleted. Account and story data is kept for as long as the account remains active; you may request correction or deletion of your data via the Contact Us form.

5. Children's Accounts

Writer accounts are created by an Administrator only (not self-registration) — some applicants (for example, via the "Become a Writer" form) may be under 18, and such accounts are typically created and supervised by a parent or guardian. Reader accounts, however, are open to members of the public via self-registration with a Google account — we do not carry out specific age verification during this registration. Content submitted for publication is reviewed (including AI-assisted review) before it goes live.

6. Your Rights

You have the right to request access to, correction of, or deletion of your personal data. Please contact us via the Contact Us form for any such request.

7. Contact Us

Any queries about this privacy policy may be sent via the Contact Us form.