Privacy policy
What happens between us stays between us.
Exactly what we keep, why we keep it and who never gets to see it.
Effective 23 October 2026
Jump to a section
1. Who we are.
In short Brown Paper Press LLC runs Happy Endings and decides what happens to your information. We don’t sell it, we don’t run ads and we never let your words train AI.
Happy Endings (happyendin.gs and any apps we offer) is operated by Brown Paper Press LLC, a Washington limited liability company doing business as Happy Endings (“we”, “us”). We are responsible for the personal information described here. Happy Endings is for adults in the United States. Questions go to .
Three promises sit above everything else in this policy: we do not sell your personal information; we do not use it, or share it, for advertising; and we never use your words, or let anyone use them, to train artificial intelligence.
2. What we collect.
In short What you give us, what the ID check confirms, what you write and a little about how you use the app. Nothing from ad networks or data brokers.
| What | Examples | Why |
|---|---|---|
| Account | Email, how you sign in (Apple, Google or email), the first and last name on your ID, your pen name | To run your account and keep one account per person |
| ID check | Our verification partner scans your ID and a live selfie and compares them. We receive a pass or fail, your birth year, your age range and the live selfie. We never receive or keep the ID, its photo or your date of birth | To confirm you’re a real adult and keep Happy Endings safe (section 8) |
| Profile | Gender, age range, relationship status and philosophy, ethnicity if you add it, where you are (postal code or city), who you’re seeking and how far away | To show your profile and suggest co-authors |
| Tale preferences | Tale types, genres, Spice and intentions | To match chapter ones with writers who want them |
| Your words | Chapters, submissions, footnotes, chats and the tales you publish | They are the service |
| Typing records | Whether text was typed or pasted, and its timing | To keep Happy Endings human (terms, section 7) |
| Photos | Your author photo and any photo you upload, and the result of our automatic check | To show your photo when you choose to, and to keep photos clothed and lawful |
| Safety | Reports you make or receive, blocks, moderation decisions and appeals | To review problems and act on them |
| Payments | Your plan, its status, dates and amounts. Our payment processor handles your card; we never see the full number | To bill you and honor refunds |
| Usage | Pages and features used, device and browser type, approximate region, crash reports | To fix and improve the app (section 7) |
| Messages to us | Email to Fluffer, support or privacy | To answer you |
| Mailing list | If you join on our website: your email, first and last name, whether you came as a reader or a writer, the intentions and endings you clicked, which button and page you signed up from, which of our links or posts brought you (such as an Instagram story or Reddit) and that you ticked the box to join | To tell you when Happy Endings opens and what’s new, and to learn which posts and pages bring people to us |
3. Sensitive information.
In short Spice, gender identity, orientation, ethnicity, your selfie and what you write about your sex life are sensitive. You choose whether to give them, you can change them any time, and they are only ever used to run Happy Endings for you.
Some of what you share is sensitive under state law: your sexual preferences (Spice), sex life, gender identity (including being trans or non-binary), sexual orientation, ethnicity, the biometric comparison in the ID check and, arguably, what you read and write here. We collect sensitive information only with your consent, asked for at the point you give it. Apart from the ID check, every sensitive field is optional. You can change or remove it in your settings, or withdraw consent, at any time. We use sensitive information only to provide the features you chose, to keep members safe and to meet legal duties. On our website, the intentions you click, such as Lust or Kink, are kept with your email on our mailing list, but only once you tick the box to join. We never sell it, never use it for advertising and never send it to our analytics tools.
4. How we use it.
In short To run Happy Endings, keep it safe and human, take payment and make it better. That’s the list.
- To create your account, show your profile and tales, and deliver chapters, submissions, footnotes and chats.
- To suggest chapter ones and co-authors from your preferences and who you’re seeking.
- To verify age and identity, prevent fraud, enforce our terms, review reports and protect members.
- To keep writing human, using typing records and reports.
- To process payments, refunds and renewal reminders.
- To understand how the app is used, in aggregate, and fix what breaks.
- To send account and service messages. We send marketing only if you opt in, and you can opt out any time.
- If you join our mailing list, to tell you when Happy Endings opens and send news, and to see which posts and pages bring people to us. Every email has a link to unsubscribe.
- To meet legal duties, including reporting child sexual abuse material, and to defend legal claims.
We read members’ words only when we need to: to review a report or a Kink tale before it reaches the Nightstand, to investigate a safety or legal issue, or when you ask us to. Sealed footnotes are sealed from your co-author, not from that review.
5. Who we share it with.
In short Only the companies that help us run Happy Endings, under contract, and the authorities when the law or someone’s safety requires it. Never advertisers, never data brokers.
| Who | What for |
|---|---|
| An identity verification partner | The ID and selfie check (section 8) |
| A photo moderation service | The automatic photo check |
| An analytics service | Counting how the app is used, with no sensitive information (section 7) |
| A payment processor | Payments and refunds, named at checkout |
| Hosting and database providers | Running Happy Endings, in the United States |
| Apple and Google | Sign-in, if you choose them, and app store billing in the apps |
| An email delivery service | Account email |
| A mailing list service | Keeping the mailing list and sending its emails |
| A bot check | Telling people from bots when you join the mailing list. It loads only when you open a sign-up form or start typing in one, and it sees your device, browser and how you use the page. This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. |
| A font service | Sending our typefaces to your browser, which shares your IP address and browser with it, as loading any website does |
These providers act on our instructions under contracts that limit their use of your information to the work they do for us. We also share information when the law requires it (section 14), with the National Center for Missing & Exploited Children when we report suspected child exploitation, to protect anyone from imminent harm, and with a company that takes over Happy Endings, which must honor this policy. We do not sell personal information or share it for targeted advertising, so there is nothing to opt out of; if that ever changed, we would ask first.
6. What other members see.
In short Your pen name or first name, your age range and what you choose to share. Never your last name, your birthday or your ID.
- Your pen name, or your first name if you have none, and your initial instead of a photo.
- Your age range and that you’re verified.
- Your author photo, only after you and a co-author both choose to swap.
- Your Dust jacket profile details you choose to show.
- Chapters and submissions you share, footnotes once you match, and your chats with that member.
- Published tales, to Nightstand readers, under your pen name, or “a former author” if you take your name off.
Anything you share with another member can be remembered or copied by them, even though our terms forbid it. Share with care.
7. Analytics and cookies.
In short Yes, we use a few cookies: some so the app works, one so we can see which features people use. No ad trackers, nothing that follows you around the internet and no screen recording. Switch analytics off any time.
We use cookies and similar storage for two things. Some are needed for Happy Endings to work, such as keeping you signed in and remembering your choices, and can’t be switched off. One is for analytics: our analytics service uses a cookie to recognize your device, so we can see which features get used and fix what doesn’t work.
Analytics is on unless you switch it off. You can do that when you first visit, or any time with “Cookie settings” at the foot of every page. When it’s off, nothing is stored for analytics and visits are only counted, without identifying your device. If your browser sends a Global Privacy Control signal, we switch analytics off for you.
We do not record sessions or screens. We strip your words, Spice, profile details, real name and email from anything sent to our analytics service, and we don’t collect IP addresses with it. We use no advertising, social media or cross-site tracking cookies.
8. Biometric data notice.
In short Our verification partner compares your selfie with your ID once. We ask your written consent first, never sell it and delete it on a published schedule.
This notice is given under the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, Washington’s biometric identifier law and Colorado’s biometric data rules.
- What. When you verify, our identity verification partner takes a scan of your face geometry from your live selfie and from the photo on your ID and compares them.
- Why. Only to confirm that you are a real adult and the person on the ID, once, at sign-up, or again if we have reason to doubt an account.
- Consent. We ask for your written consent on the screen before the check, naming our partner. Without it you can’t verify, and verification is required to write with others.
- Who holds it. Our partner processes the face comparison for us and deletes the ID images and face data within 30 days. We never receive a face template. We keep the live selfie as a photo, as your default author photo, unless you replace it.
- Never sold. We do not sell, lease, trade or profit from biometric data, and we disclose it only to our verification partner, or as the law requires.
- Destroyed. We delete the selfie when you delete your account, and in any case within 24 months of your last use of Happy Endings. Our partner’s copies go within 30 days.
9. Washington consumer health data.
In short Washington treats biometric data as health data. We collect it only with your consent, share it only with our verification partner, and you can see it, delete it or withdraw consent.
This section is our consumer health data privacy policy under Washington’s My Health My Data Act. The only consumer health data we collect is the biometric data described in section 8, and possibly information you choose to give about your gender identity. We collect it from you, with your consent, to verify your identity and age and to show the profile you choose. We share it only with our verification partner, which processes it for us, and with no one else without your separate consent. You have the right to confirm whether we hold your consumer health data, to see it and the list of anyone we shared it with, to withdraw consent and to have it deleted. Use section 11 to ask; you can appeal any refusal. We never sell consumer health data.
10. How long we keep it.
In short As long as your account is open, then as little as we can for as short as we can.
| What | Policy |
|---|---|
| Account, profile, preferences and private writing | Deleted within 30 days of you deleting your account |
| Published tales | Kept on the Nightstand, with your name taken off when you leave |
| ID images and face data | Held only by our verification partner and deleted within 30 days |
| Live selfie | Deleted when you delete your account, or 24 months after your last use |
| Typing records | Kept 12 months, or as long as a report about the words needs |
| Reports and moderation records | Kept 2 years after the decision, or longer if a legal case needs them |
| Records of removed members | Kept as long as needed to stop them returning, holding only what identifies them |
| Suspected child exploitation reports | Kept 1 year, as federal law requires, or longer if the authorities ask |
| Payment records | Kept 7 years, for tax law |
| Consent records (renewal, publishing, biometrics) | Kept 3 years, or a year after your plan ends, whichever is longer |
| Analytics | Kept up to 12 months |
| Mailing list | Kept until you ask us to take you off it. Unsubscribing stops our emails; we keep your address only to ensure that you stay unsubscribed |
| Backups | Overwritten within 35 days |
11. Your rights.
In short See it, fix it, take it, delete it, change your mind. Most of it is in your settings; the rest is one email away.
Wherever you live in the US, you can ask us to tell you what personal information we hold about you and give you a copy, correct it, delete it, or withdraw any consent you gave. Many of these you can do yourself in settings, including deleting your account. Otherwise email . We will confirm your identity through your account, answer within 45 days (sometimes extended once by 45 days, with notice) and never treat you differently for using these rights. If we refuse, we will say why and you can appeal by replying to our answer; if you’re unhappy with the appeal, you can contact your state attorney general. You can use an authorized agent, who must show your written permission.
California residents: this policy describes the categories of information we collect, their sources and purposes, and who receives them. We do not sell or share personal information as California defines those words, and we use sensitive personal information only for the purposes the law allows, so we offer no “Do not sell or share” or “Limit the use” links. We honor Global Privacy Control. We respond to Do Not Track signals the same way.
12. Security.
We encrypt information in transit and at rest, limit staff access to what each task needs, and choose providers who do the same. No system is perfectly secure. If a breach affects your information, we will tell you and the authorities as the law requires.
13. Adults only.
Happy Endings is only for people 18 and over. We do not knowingly collect information from anyone younger. If we learn that someone under 18 has an account, we close it and delete their information, except what we must keep to report exploitation.
14. Legal requests.
We disclose information to law enforcement or others only when we receive valid legal process, such as a subpoena or warrant, or when we believe in good faith that someone faces imminent danger of death or serious harm. We read each request and push back on ones that are too broad. Unless the law or safety forbids it, we tell the member before disclosing.
15. Where it lives.
Happy Endings serves the United States only, and we store information in the United States. Some providers may process limited information elsewhere under contracts that protect it.
16. Changes.
If we change this policy, we will post the new version with its date, and tell you by email or in the app at least 30 days before any change that affects how we use information you already gave us. We will ask for your consent again before using sensitive information in a new way.
17. Contact.
Brown Paper Press LLC, doing business as Happy Endings. To delete your account, use settings or email fluffer at Happy Endings.