Privacy

Plain language. No legalese.

This page says what The Late Commute collects about you, what it does with it, and how long it keeps it. It's kept honest on purpose — if you find a line that isn't true, tell us and we'll fix it.


What we collect

To play you pick a display name and we give you a friend code (or you play as an anonymous guest). No email, no real name, no payment. The things we keep:

We do not collect a real identity, an address, a birthday, or anything you don't type into the game yourself. Your IP address is not part of your profile and is never shown to other players. It appears in three places, all security-related: the server's access log, which rotates away after a few megabytes; a counter held in memory for 24 hours that stops one person flooding the review box; and — if a request trips one of the traps set for automated attackers — a small permanent record of that hit, which is kept indefinitely on purpose so an attack pattern is still visible months later. Ordinary play never touches the third one.

If you arrived from an ad, the link may carry a click identifier issued by the ad platform (Reddit's rdt_cid, X's twclid). It lands in the same access log and rotates away with it.

One point worth being precise about: your display name and friend code are a pseudonym, and under laws like the GDPR a pseudonym still counts as personal data. So even though we never ask for your real name, the rights further down apply to the data we hold under your code.

Cookies

Three, all functional, none used for advertising or for tracking you across other sites:

Legal basis (for users in the EU/UK)

We process your display name, save, and reviews because they are necessary to provide the story you asked to play — the "performance of a contract" basis (GDPR Art. 6(1)(b)). We process security logs, including IP addresses, under "legitimate interests" (Art. 6(1)(f)) to keep the site safe from abuse.

How your writing is used

Your reviews and scene suggestions are read by AI models as well as people. They edit the story and write your reply. A scene you suggest can become a permanent part of the world other players read. Treat reviews as public writing — if you don't want something published, don't put it in a review.

Third-party providers

The AI that reads your reviews and writes your reply runs through these companies: DeepSeek, Anthropic (Claude), and Fireworks AI, which serves us both Kimi and GLM. Other models that help write and review the story — Google (Gemini), xAI (Grok), Cerebras, OpenRouter (Muse Glimmer), and two models running on our own machines rather than a provider's — may see scene text that players have contributed. Cloudflare hosts the tunnel that serves the site. The Architecture page names them in context if you want the full detail.

Where your data goes

Your writing is processed by the AI providers named above, which run on servers in the United States and China — so it may be transferred outside your home country. The US-based providers process under Standard Contractual Clauses or a Data Processing Addendum where they offer one. Providers based in countries without an EU adequacy decision may not offer those same safeguards. If you're in the EU/UK and that matters to you, play as an anonymous guest and avoid putting your real name or identifying details in reviews.

What's public

The story itself — including scenes players have written — the scene comments, and the gallery are public on the internet. Your save and your reviews are not public.

How long we keep things

What we don't have

No payments, no subscriptions, no email list, and no third-party ads on the site. We don't sell your data, ever, to anyone.

Two things leave the site. Your writing goes to the AI providers named above so they can read and answer it. And when we suspect an advertising platform has charged us for traffic that wasn't people, we send that platform the relevant slice of our own server logs — which includes the IP addresses and click identifiers of visits that came from their ads — so they can match it against what they billed. That has happened once, with Reddit, in August 2026. It does not include your writing, your save, or anything from your profile.

Security

Traffic between your browser and the site is encrypted in transit (HTTPS, via Cloudflare's tunnel). Your save and reviews are stored on the owner's own machine and are access-controlled — not in a shared or public bucket. The site holds no passwords or payment details.

It's a story

The Late Commute is interactive fiction. It is not mental-health care and not a crisis service. If you're in crisis, please contact a real crisis or emergency service where you live.

Your rights

Depending on where you live (for example the EU/UK under GDPR, or California under CCPA), you have the right to:

These are handled by hand, not through a portal. Email [email protected] and include your friend code so we know which data is yours. We'll reply and do it.

Children

This game is not directed at children under 13, and we do not knowingly collect personal information from minors. We don't ask for your age, so we have no way to tell a child apart from anyone else — but if you're a parent and believe your child has submitted something, email [email protected] and we'll take it down.

Who runs this

The Late Commute is run by an individual, not a company. The person responsible for your data (the "data controller") is the site's owner, reachable through the contact below.

Privacy requests / contact

For anything privacy-related — including asking us to delete your reviews — email [email protected]. That inbox goes straight to the owner. You can also reach us on r/TheLateCommute or @Mike15542142460 on X, but the email is the formal channel.

Changes to this policy

If we make a significant change to how we handle your data, we'll update this page and change the date below, and we'll note it on the game's main screen so players see it.

Last updated: 2026-08-14. Not legal advice — a good-faith plain-language summary.

← Back to the story