Legal
Last updated — April 1, 2026
We collect information you provide directly: email address, username, and age attestation during registration. When you use Oputh, we collect chat messages, character definitions you create, and favorite/interaction data. We also collect technical information automatically, including IP addresses (hashed for rate limiting), browser type, and device information.
We use your information to provide and maintain the Oputh service, process your chat messages through AI models, enforce age verification and platform safety, manage subscriptions and payments, prevent abuse through rate limiting, and improve the platform experience. We do not sell your personal information to third parties.
Your chat messages are sent to third-party AI model providers (via OpenRouter) to generate character responses. These messages are processed according to the AI provider's data handling policies. We do not use your private chat content to train our own models. Character memory features use embeddings stored in our database to provide contextual responses.
Oputh uses essential cookies for authentication session management and age verification caching. We use Cloudflare Turnstile for bot protection, which may set its own cookies. We do not use advertising cookies or third-party tracking cookies. The age verification cookie is a cache layer only — the database remains the authoritative source.
Your data is stored in Supabase (PostgreSQL) with row-level security policies enforcing strict access controls. Passwords are hashed by Supabase Auth and never stored in plain text. IP addresses used for rate limiting are stored as SHA-256 hashes. We use HTTPS encryption for all data in transit. While we implement reasonable security measures, no system is perfectly secure.
Oputh integrates with the following third-party services: Supabase (authentication, database, file storage), OpenRouter (AI model access), Cloudflare Turnstile (bot protection), SubscribeStar (subscription payments), and cryptocurrency payment processors. Each service operates under its own privacy policy. We recommend reviewing their policies for details on how they handle your data.
You can access and update your profile information through your account settings. You may request deletion of your account and associated data by contacting us. You can delete individual chats and characters at any time. If you are located in the EU/EEA, you have additional rights under GDPR including data portability and the right to object to processing.
Oputh is strictly for users aged 18 and older. We do not knowingly collect information from anyone under 18. If we discover that we have collected data from a minor, we will delete the account and associated data immediately. If you believe a minor is using Oputh, please contact us.
We retain your account data and chat history for as long as your account is active. Rate limiting records are automatically cleaned up after 7 days. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. Anonymized or aggregated data may be retained indefinitely for analytics purposes.
We may update this Privacy Policy from time to time. We will notify users of material changes through the platform or via email. Your continued use of Oputh after changes are posted constitutes acceptance of the updated policy. We encourage you to review this page periodically.
Privacy questions? Reach out at hello@oputh.com