Privacy Policy

Last updated: April 22, 2026

Who we are

DAN (Distributed Authoring Nexus) is operated by Malevolent Gods Software. This policy covers the cloud-hosted version at distributed-authoring-nexus.com. Self-hosted deployments are governed by their operator, not us.

What we collect (cloud)

  • Account info: username, email, password hash.
  • Your content: the novels, campaigns, characters, and chat logs you create. Stored on our servers so you can access them from any device.
  • Billing info: handled by Stripe. We store only a subscription status and customer ID — we never see card numbers.
  • Server logs: IP addresses and request paths, retained 30 days for debugging and abuse prevention.

Self-hosted DAN (unchanged guarantee)

If you run DAN on your own server via Docker (docker pull ignusvm/dan), zero third-party analytics or tracking scripts load, ever. No pixels, no beacons, no outbound calls to Meta, TikTok, Google, PostHog, or any analytics vendor. Your data stays on your machine.

Self-hosted DAN never phones home. The disclosures in the next section apply exclusively to the cloud-hosted service at distributed-authoring-nexus.com.

Analytics on distributed-authoring-nexus.com (cloud only)

We use three analytics services on public marketing pages only (the homepage, /for-writers, /for-dms, /pricing, /download, login, and register). None of these load inside the authenticated app — once you're signed in, DAN shows you zero third-party scripts:

When you complete signup, create a project, or first use Daneel, we send those conversion events server-side to Meta and TikTok so we can measure which campaigns are working. Your email address is hashed with SHA-256 before being sent; we also forward your IP, user-agent, and ad-platform cookies (_fbp, _fbc, ttclid) for attribution matching. Campaign UTM parameters ride along.

What we don't do

  • We don't sell your data. Ever.
  • We don't train models on your writing.
  • We don't share your writing with third parties except the providers you configure with your own keys (or, on paid tiers, the bundled provider pool described below).
  • We don't use third-party analytics inside the authenticated app — the tracking disclosed above is confined to public marketing pages.

Provider routing

DAN routes requests through whichever provider you configure under your own keys. Your prompts and outputs pass through that provider under their terms. We don't log prompt content on our side beyond what's stored in your project (chapters, chat messages, etc.). Specific provider names are listed inside the app once you're logged in.

Email

We use Resend to send transactional email (verification links, password resets). They process your email address for delivery. No marketing emails unless you opt in.

Data deletion

Delete your account at Settings → Account → Delete Account. This permanently removes your user record, projects, and content within 7 days. Stripe retains billing records per their own policies and for legal compliance.

Contact

Privacy questions: [email protected]. Security reports appreciated via email or GitHub.
Privacy Policy — DAN · DAN