Your stories are personal.

Drafts in this browser

You can work without an account. Guest drafts are saved in this browser’s local storage on this device. They are not automatically uploaded when you sign in. Clearing site data or using a different browser can make these local drafts unavailable.

The main website and the www address have separate browser storage. Sign-in returns you to the address where you started.

When you choose an account

You can use a connected Google account or create an email and password account. Google supplies a provider account identifier, display name, verified email address and, when available, a profile picture URL. Email accounts store your name, email address and a securely derived password hash, rather than your password. You must confirm the email address before signing in with a password.

Google authorization tokens stay on the server and are discarded after sign-in verification. We keep the provider identifier so you can sign in again. We do not request access to Google files or social posting permissions. Facebook sign-in is not offered.

Verification and password-reset messages are sent through Cloudflare Email Service from the configured MyBand Life sender. Their links expire after 30 minutes and can be used once. A password reset ends existing sessions. Send acceptance does not guarantee inbox delivery.

Cloud drafts are your choice

When you explicitly save a draft to your account, its story, chapter answers, title, lyrics, selected musical preferences and progress are stored in Cloudflare D1. The account that saved the draft controls access to it. Another device must sign in to that account to read it.

Saved records remain until you delete the draft or your cloud account. Version checks help prevent one device from silently overwriting another device’s saved changes.

Sign-in cookies and technical records

We use secure, HttpOnly cookies for the sign-in flow and your account session. Sessions expire after seven days and end when you sign out. Session records can include your IP address and browser user agent. Short-lived sign-in verification and request-limiting records protect the service.

Cloudflare hosts the application and database and may process technical delivery and security logs. We do not use the sign-in cookies for advertising. This account feature does not install marketing tracking cookies.

AI, recordings and voice features

Local sample lyrics are assembled in your browser. When you ask a connected live AI feature to help with lyrics or follow-up questions, the story details needed for that request are sent to the configured text provider, currently xAI. Live AI requests require a verified account. The interface identifies local samples and unavailable features.

When you explicitly approve a recording request and choose Create Song, the approved title, lyrics and selected music preferences are sent to APIMart’s Suno service. Your separate interview answers are not included in that recording request. Your account stores the approved recording input, job status, provider task reference and returned audio links so you can find the result later. Creating another version requires another explicit request.

If you use browser voice dictation or text-to-speech, your browser or operating-system provider may process speech under its own settings. Only text you choose to save becomes part of a draft. Avoid including information about other people that you do not want processed; you can edit your words before saving or requesting AI help.

Delete your information

You can delete individual cloud drafts from your account or delete your cloud account and its saved drafts. Local browser copies and downloaded audio must be removed separately from the playlist, browser or device.

Account deletion removes the live profile, password hash or linked Google identifier, account sessions, pending verification/reset records, saved cloud drafts and stored recording jobs/audio links. Security and quota counters can remain to prevent abuse and do not contain your story or lyrics. Infrastructure backups and technical logs, where present, follow their configured retention.

Deletion does not delete your Google account, revoke Google permissions, or guarantee deletion of copies already processed or hosted by xAI or APIMart. It also cannot recall a recording request already accepted by a provider.

Operator and contact details

A public operator identity and privacy contact have not yet been supplied. Those details must be added before public account sign-up is launched. The account-deletion controls described above are available once sign-in is connected. This page records the current product behavior and will be updated when services or data handling change.