Privacy Policy
What Real or Legend collects and what it does not: no accounts, no advertising trackers, payment by Stripe, and progress kept in your own browser.
The short version
You do not need an account to use Real or Legend. We do not run advertising trackers and we do not sell data. Most of what the site remembers about you is kept in your own browser.
What stays in your browser
Your place in a story, the clues and endings you found, your game results, your language choice and, after a purchase, a token that keeps your story unlocked are stored in your browser's local storage. Clearing your browser data removes them; your unlock code brings a purchase back.
When you buy
Payment is handled by Stripe, which collects your card details, email address and billing country under its own privacy policy. We receive a notice that the payment succeeded, with the email address you paid with, and use that address to send your unlock code. We do not keep the address. We keep a one-way keyed hash of it, so the code can be sent again if you ask, along with Stripe's reference for the purchase and a hash of the unlock code.
When you ask us to email you
If you sign up to hear about new cases, we store your email address and language until you unsubscribe, and use them only for that. Every such email has an unsubscribe link. Mail is sent through Resend.
What you type
Questions you put to a witness and the prompts you give the fiction desk are stored without your name or address, so we can see what the game fails to answer and catch misuse. To choose an answer or write a legend, that text is sent to an AI model provider through OpenRouter. Do not type personal information into those boxes.
Limits and counts
To enforce daily limits and stop code guessing, we turn your IP address into a salted hash that changes every day and store only the hash with a counter. We do not store the IP address itself. Votes, scores and ratings are kept as anonymous totals.
Analytics and hosting
The site is hosted on Vercel and uses Vercel Web Analytics, which counts page views without cookies and without identifying visitors. Vercel and our database provider, Neon, process requests on our behalf and keep standard server logs. Fonts are loaded from Google Fonts, and on Chinese story pages a text conversion script is loaded from jsDelivr; those services see your IP address when your browser fetches the files.
Cookies
We set no advertising or tracking cookies. Stripe sets its own cookies on its checkout page.
Your choices
You can ask what we hold in connection with your email address, or ask us to delete it, by writing to contact@realorlegend.com. Once the record of a purchase is deleted, a lost code can no longer be sent again.
Children
Real or Legend is not directed at children under 13. Its horror and crime stories are written for adults and older teens.
Changes
We update this page when our practices change.
Last updated: 10 October 2026.