Privacy,
in plain language.
Take the quiz as a guest. Keep your answers and character in this browser.
Your draft
Answers and measurements are saved locally as you go. A selected photo stays in memory until generation. Your saved draft and character are available to anyone using this browser profile. Every assessment field is optional, and an alias is welcome. Characterize is designed for adults 18 and older.
Generating your character
When you approve generation, your answers go to the Characterize server and OpenAI to create the sheet. If you choose a portrait, its appearance preferences and fantasy details go to the image model. A reference photo requires your permission; Characterize removes its metadata and reduces its dimensions before sending it to OpenAI.
Guest answers, original photos, generated prose, and portraits are processed in memory on the app server. The usage database stores operational records only. OpenAI processes requests under its API data controls and retention policies, including abuse-monitoring retention. Text requests have optional response storage disabled.
Your completed sheet
The latest character and portrait are saved in this browser when storage is available. Download them or print to PDF for another copy. Clearing browser data removes that local copy; recovery requires a download you kept. If a portrait fails, the completed sheet is still returned. Each paid request runs once.
Usage records
A signed, HTTP-only cookie identifies your guest browser for up to 30 days. The database keeps a random guest ID, request IDs, keyed IP-address hashes, timestamps, reserved and observed costs, request outcomes, and provider request IDs.
Allowances are one attempt per guest per rolling day, three per IP group, $10 per UTC day, and $100 per UTC calendar month. Each attempt reserves at least $1. Failed or ambiguous attempts retain that reservation. Usage records persist when you clear a character.
Hosting providers may process IP addresses and operational logs under their policies. Characterize uses essential security and storage features, with no advertising or behavioral analytics.
Removing local data
Select “Clear local data” in the footer to remove the draft and latest character from this browser. Downloads can be deleted separately. Usage records and provider security records follow their own retention policies.
Providers
Personal Vercel hosting, Cloudflare DNS, Supabase usage storage, and OpenAI generation. Guest access uses neither email nor an authentication account.
Last updated September 7, 2026.