Privacy, without the fog machine
Draft notice · Updated 11 October 2026 · Operator and counsel review required before public Production use.
Stoner.chat is an AI character for adults 18 and older. It is fictional, not human, and not actually intoxicated. This page describes the current application code and documented provider defaults; project-specific hosting, database, backup, and OpenAI retention settings have not all been verified.
What you provide
When you chat, the text you send and the AI reply are processed to provide the conversation. The browser creates a random guest-session identifier and stores it in local storage so the same browser can restore recent chat history. The interface shows a concise 18+ notice, and chat requests include a boolean confirmation that you are 18 or older; we do not ask for or store your birth date or identity document. This self-declaration is not verified age assurance.
Conversation memory and reset
The application keeps up to the latest 20 messages (about 10 turns) as context. History stops being used after 30 minutes of inactivity. Use reset to request deletion of the current guest-session row; if deletion fails, the app reports an error instead of claiming success. Expired rows are also opportunistically removed during some chat writes.
Expiry from model context and physical deletion are different. A daily authenticated cleanup is configured in the release candidate, but Vercel runs cron jobs only on Production deployments and requires a configured CRON_SECRET. The Preview cleanup job does not run automatically, and Production configuration/runs have not been verified. Until the scheduled cleanup is active and monitored, there is no fixed physical-deletion deadline for expired rows. Database backups and provider/hosting logs can have separate retention.
Service providers
Chat messages are sent to OpenAI to generate a reply. OpenAI’s published API policy says API content is not used to train models by default unless the customer opts in. OpenAI says abuse-monitoring logs may contain prompts and replies and are retained for up to 30 days by default, with exceptions required by law or reasonably necessary to protect its services or others. Zero Data Retention and Modified Abuse Monitoring require eligibility and approval; this project’s setting has not been checked. See OpenAI’s API data controls.
The application uses PostgreSQL when a database is configured and otherwise falls back to temporary process memory. The public deployment’s active store, hosting-log retention, database backup retention, and regional processing settings must be verified before Production privacy claims are finalized. The service processes request IP addresses for rate limiting; the application code does not save chat text in its own error logs.
Your choices
- Do not continue if you are under 18.
- Do not submit information you do not want processed by the service providers described above.
- Use reset to delete the active guest session from the application database when available.
Before public launch
The operator must add its legal identity and a working privacy contact, verify provider, hosting, database, backup and cleanup settings, and have this notice reviewed for the jurisdictions it serves. This draft is not a legal certification.