Hosted Content Policy

What Tale Ledger hosts

This policy applies only when an account owner chooses “Publish with Tale Ledger.” Local artwork and external image URLs are not copied into Tale Ledger hosted storage through that feature. Hosted publishing currently accepts supported static image formats within server-enforced size, dimension, count, and storage limits.

Private-to-public pipeline

1. The original upload enters private quarantine.
2. Technical checks validate the declared format, signature, size, dimensions, animation status, and cryptographic digest.
3. A reduced, static, metadata-free WebP derivative is produced for token delivery and moderation.
4. When the owner submits for publication, OpenAI moderation checks only that sanitized derivative.
5. Tale Ledger records category signals under a versioned RPG-context policy.
6. During controlled beta, an authorized human records approval before a public link can deliver the image.

A screening outage fails closed: the image remains private. Replacing an image creates a new version that must pass through the process again.

RPG-context standards

Weapons, monsters, undead, heroes, villains, peril, and non-graphic fictional violence are expected. The policy records ordinary violence without treating that category alone as elevated. Graphic violence and any other safety category receive additional human attention.

Content may be declined or blocked when it is illegal, exploitative, sexually explicit, non-consensual, targeted harassment, privacy-invasive, infringing, deceptively harmful, or otherwise inconsistent with the Acceptable Use Policy. Context matters, and automated classification is not the final judgment.

Owner controls and lifecycle

Owners can privately preview and download hosted material, submit it for review, copy an approved public link, remove it from publication, move it to recoverable trash, restore it, or permanently delete it when no preservation hold applies.

Trash is ordinarily retained for 30 days and continues consuming byte storage until deletion. Blocking disables public delivery. A global safety switch can disable all public hosted-image delivery without affecting local campaign files.

Reports and review

Public asset pages provide a reporting route for unsafe, illegal, copyright, privacy, and other concerns. Reports are tied to an immutable asset identity and enter a moderator queue. Tale Ledger may temporarily hold, block, unpublish, preserve, or purge content while reviewing a report.

Moderation actions and screening events are recorded in case history. Account warnings, strikes, and publishing suspensions require deliberate administrative action during controlled beta; classifier output alone does not punish a user.

Future automatic publication

Tale Ledger may later automatically publish images that pass technical and semantic screening. That change will occur only after controlled evaluation across representative tabletop artwork, with versioned rules, reporting, spot checks, emergency disable controls, and public policy updates. Images requiring elevated review will continue to remain private until resolved.