Privacy Policy

Effective: August 12, 2025 · Last updated: September 30, 2026

You haven’t made a cookie choice on this device yet.

1. Introduction

Welcome to Torii Portal (“we,” “our,” or “us”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered interactive storytelling game (“Service”).

By accessing or using Torii Portal in any way, including playing the free starter story, you agree to this Privacy Policy and our Terms of Service. If you do not agree, do not use our Service.

2. Information We Collect

2.1 Information You Provide

Account Information: Username and email address when you create an account.
Character Data: All character names, traits, backgrounds, and customization choices.
Game Content: All stories, dialogue choices, campaign data, in-game decisions, and any creative inputs.
User Inputs: All text and image inputs you provide to our AI system.
Payment Information: Processed securely through third-party payment processors (we do not store credit card details).
Communications: Messages you send to us for support or feedback.
Date of Birth: Collected to confirm you meet the minimum age requirement (18+) for the Service. We may ask for it at any point. It is used only to confirm eligibility.

2.2 Information Collected Automatically

Usage Data: Game sessions, rounds played, features used, and interaction patterns.
Device Information: Browser type, operating system, device type, and IP address.
Cookies and Tracking Technologies: See Section 2.3 for a detailed list of cookies and third-party trackers.
AI Interaction Data: All prompts, responses, and gameplay patterns.

2.3 Cookies and Third-Party Tracking Technologies

We use first-party cookies for essential site functionality (authentication, session state, attribution of how you found us) and third-party tracking technologies for analytics and advertising. In the European Economic Area, the United Kingdom, Switzerland, and Canada, the advertising and analytics trackers below are loaded only after you provide consent via our cookie banner.

Essential cookies (always active)

Authentication and session cookies required to keep you signed in.
Attribution cookies (traffic_src, traffic_channel, traffic_campaign, ph_anon_id) used to record how you arrived at our Service.
Consent state cookie (cb_consent) used to remember your cookie banner choice.

Analytics (always active)

PostHog — Product analytics. Collects anonymous or pseudonymous identifiers, page views, custom events, device and browser metadata, and approximate location derived from IP. Used to understand feature usage and product performance. We do not enable session recording or autocapture on this site. PostHog Privacy Policy.

Advertising and marketing (consent required in EEA/UK/CH/Canada)

Google Ads (gtag.js) — Conversion tracking, audience building, and remarketing for Google Ads, YouTube, and Google Display. Collects click identifiers, page views, conversion events, IP address, and device identifiers. Google Privacy Policy.
Meta Pixel (Facebook/Instagram Ads) — Conversion tracking and audience building for Facebook and Instagram advertising. Collects page views, conversion events, IP address, browser metadata, and hashed identifiers when available (when you are signed in, a one-way SHA-256 hash of your email address and account ID; never your raw email address). Meta Privacy Policy.
Axon / AppLovin — Conversion tracking and audience building for AppLovin’s ad network. Collects page views, conversion events, IP address, and device identifiers. AppLovin Privacy Policy.
Reddit Pixel — Conversion tracking and audience building for Reddit advertising. Collects page views, conversion events, IP address, browser metadata, and hashed identifiers when available. Reddit Privacy Policy.
OpenAI Ads Pixel (ChatGPT Ads) — Conversion tracking and measurement for advertising within ChatGPT. Collects page views, conversion events, IP address, browser metadata, and hashed identifiers when available. OpenAI Privacy Policy.

Where required by law, you can withdraw consent at any time by clearing the cb_consent cookie from your browser, which will cause the cookie banner to reappear on your next visit. You may also disable or block cookies through your browser settings.

2.4 Content Ownership and Usage Rights

Important: All content created within Torii Portal, including but not limited to:

Character concepts and developments
Story narratives and plot developments
Dialogue and creative text inputs
Game scenarios and campaign elements
AI-generated responses and narratives

This content becomes part of the Service’s database and may be used by us to:

Operate and improve the Service
Develop new features and content
Create anonymized examples and tutorials
Enhance the overall gaming experience for all users
Develop derivative works and new game content

2.5 Other Services We Operate

Old Greg's Tavern, LLC operates other services. Each service has its own account system and its own database. Your Torii Portal account information, date of birth, age verification status, and content safety records are held separately and are not shared with any other service we operate.

3. How We Use Your Information

We use your information to:

Provide and maintain the Service
Create and manage your account
Process transactions and send purchase confirmations
Generate personalized game content and narratives
Improve and optimize our AI systems and game mechanics through aggregate analysis
Develop new features and content based on user interactions
Communicate with you about updates, features, and support
Detect and prevent fraud, abuse, or violations of our Terms of Service
Analyze gameplay patterns to enhance the Service
Create aggregated and anonymized datasets for research and development
Verify your age and confirm your eligibility for the Service, which is for players aged 18 and over
Comply with legal obligations

4. Information Sharing and Disclosure

We do not sell your personal identifying information. We may share information:

With Service Providers: Third parties who assist in operating our Service (hosting, analytics, payment processing).
With Advertising and Analytics Partners: As described in Section 2.3, we share limited data — page views, conversion events, IP address, browser metadata, and hashed identifiers where available (for example, a one-way SHA-256 hash of your email address and account ID when you are signed in; we never share your raw email address with advertising partners) — with Google (Google Ads), Meta (Facebook/Instagram), AppLovin (Axon), Reddit, OpenAI (ChatGPT Ads), and PostHog for the purposes of measurement, advertising, and product analytics. In jurisdictions that require it, this sharing only occurs after you provide consent via our cookie banner.
For Legal Requirements: When required by law or to protect rights and safety.
Aggregated Data: Non-identifiable statistical data for analysis and improvement.
Business Transfers: In the event of a merger, acquisition, or sale of assets.
With Your Consent: When you explicitly agree to sharing.

5. Data Retention

We retain your information for as long as necessary to provide the Service and to meet our legal, safety, and business obligations. Specifically:

Account information (email, username, date of birth, payment records): retained for the duration of your account so you can sign in, resume your campaigns, and maintain age verification status. For accounts suspended because the holder is aged 13–17, the date of birth is retained so the account can unlock automatically on the holder’s 18th birthday.
Game content (characters, stories, dialogue, choices, AI interactions): retained for the duration of your account so your campaigns persist across sessions.
Safety, abuse, and fraud-prevention records (including ban status and content safety flags): retained for up to 24 months after they are created, or longer where required by law, to protect the Service and other users.
Support communications: retained while your account is active and as needed to provide support and improve the Service; you may request deletion at any time at innkeeper@oldgregstavern.com.
Transactional records: retained as long as required by tax, accounting, and financial-reporting laws (typically 7 years).
Aggregated and anonymized data: retained indefinitely, as it no longer identifies you.

You may delete your account at any time from your Account page (see our Delete Account guide) or by contacting us at innkeeper@oldgregstavern.com. When you delete your account:

Your account record — including your username, email address, date of birth, password credentials, and active subscription — is deleted immediately. Active Stripe subscriptions are canceled and you are unsubscribed from our newsletter.
Your game content (characters, campaigns, stories) is disassociated from your identity at the moment of account deletion: the account record that linked the content to you no longer exists, leaving only an opaque internal identifier with no path back to a person. We may retain this disassociated content for service operation, analytics, and safety purposes.
Safety, abuse, fraud-prevention, and transactional records are retained for the periods stated above, as required by law and as necessary to protect the Service and other users. On account deletion we de-identify these safety records by removing directly-identifying fields (email address, IP address, and device/browser identifiers), retaining only the information needed for safety and legal-compliance purposes. Records subject to a legal preservation obligation (for example, material reported to child-safety or law-enforcement authorities) are retained in full for as long as the law requires.

If you wish to also have your disassociated game content deleted on a best-effort basis, contact us at innkeeper@oldgregstavern.com and we will action the request within 60 days, subject to the safety, abuse-prevention, and legal-retention exceptions above.

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

Encryption of data in transit and at rest
Regular security assessments
Access controls and authentication measures
Secure development practices

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

You have the right to:

Access: Request a copy of your personal identifying information.
Correction: Update or correct inaccurate personal data.
Deletion: Request removal of your personal identifying data (gameplay content is retained).
Opt-out: Unsubscribe from marketing communications.
Withdraw Cookie Consent: Where the cookie banner applies to you (EEA, UK, Switzerland, Canada), you may withdraw consent at any time by clearing the cb_consent cookie in your browser, which will cause the banner to reappear on your next visit.
Do Not Track: We respect browser Do Not Track signals.

To exercise these rights, contact us at innkeeper@oldgregstavern.com.

8. Children’s Privacy

Torii Portal is for players aged 18 and over; it is not available to anyone under 18. We collect date of birth information solely to verify that users meet this minimum age requirement. We may ask for it at any point, and it is used only to confirm eligibility. A user whose date of birth indicates they are under 18 is denied access and their account is suspended; accounts of users aged 13–17 unlock automatically on the holder’s 18th birthday. In accordance with the Children’s Online Privacy Protection Act (COPPA, 15 U.S.C. §6501 et seq.), we do not knowingly collect personal information from children under 13: a user who provides a date of birth indicating they are under 13 is blocked from accessing the Service and their account is disabled. If you believe a child under 13 has provided us with personal information, please contact us immediately at innkeeper@oldgregstavern.com for removal.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

10. AI and Content Generation

10.1 AI Processing

Torii Portal uses third-party AI model providers to generate game content in response to your inputs. Your prompts and the resulting AI responses are sent to these providers as needed to operate the Service. We:

Do not train AI models on your content. We do not fine-tune, train, or otherwise build AI models using your chats, characters, stories, or other inputs.
Analyze interaction patterns in aggregate to enhance the Service.
May use anonymized content examples for marketing or educational purposes.

10.2 No Affiliation Disclaimer

Torii Portal is an independent gaming platform and is not affiliated with, endorsed by, or connected to any anime, manga, light novel or animated series, nor with any studio, publisher, broadcaster, author or artist, or any of their products, properties, or trademarks. All game mechanics, content, and systems are original creations.

11. Third-Party Services

Our Service may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or prominent notice within the Service. Your continued use after changes constitutes acceptance.

13. Contact Information

For questions about this Privacy Policy or our data practices, contact us at:

Old Greg's Tavern, LLC (owner and operator of Torii Portal)
Email: innkeeper@oldgregstavern.com

Registered Address:
Registered Agents Inc.
30 N Gould St Ste R
Sheridan, WY 82801

14. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know and delete personal identifying information.

15. European Privacy Rights

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) or equivalent local law, including the rights of access, rectification, erasure, restriction of processing, data portability, and objection. The legal bases on which we rely for processing your personal data are:

Performance of a contract — to provide the Service you have requested.
Legitimate interests — to operate, secure, and improve the Service, prevent fraud and abuse, and protect our users and our business.
Consent — where required, for example for advertising and analytics cookies (you may withdraw consent at any time by clearing the cb_consent cookie).
Compliance with legal obligations — including tax, accounting, and law-enforcement requests.

You have the right to lodge a complaint with your local data-protection supervisory authority. International transfers of your personal data outside the EEA, UK, or Switzerland are made with appropriate safeguards in place (such as the European Commission’s Standard Contractual Clauses or equivalent UK addenda).

16. AI Disclosure and Safety

Torii Portal is an AI-powered service. Its story content is generated by AI and is fiction. AI-generated responses may be inaccurate or unexpected and are provided for entertainment only. AI is not a substitute for professional advice.

Our self-harm safety protocol, including what we record when it intervenes, is described in our Content & Safety Policy and on our Safety page.

By using Torii Portal in any way, including accessing the free starter story, you acknowledge that you have read, understood, and agree to this Privacy Policy.