Who we are
WikiDraft is made and run by Writing Theory, a sole proprietorship based in Wisconsin, United States. When this page says “we”, that is who it means. You can reach us at writing.theory.business+support@gmail.com.
What we collect, and why
Your account.Your email address, and either a password (stored only as a one-way hash we cannot reverse) or the identifier Google gives us when you sign in with Google. If you use Google, we receive your email address and Google’s stable account id, nothing else, and we store only those two things. We use this to sign you in and to send the account emails described below.
Your writing. Everything you create in WikiDraft: worlds, pages, infobox values, timelines, maps, manuscripts and chapters, uploaded images, and the revision history and trash that let you undo mistakes. We store it so we can show it back to you. That is the only reason.
Your plan. Which plan you are on, when your trial or subscription ends, and a record of each payment (what was bought, when, and for how much). Payments themselves are handled by Polar, our payment provider, which acts as the merchant of record. We never see or store your card number.
Technical basics. Like any website, our hosting provider keeps short-lived server logs that include your IP address and the pages requested. We use them only to keep the service running and secure.
Homepage visits. On the public homepage (not inside the app) we use Fathom Analytics to count visits and a handful of button clicks, so we can tell which parts of the page are useful. Fathom is built for privacy: it sets no cookies, stores no personal data, cannot identify you, and does not follow you to other sites. It is never loaded on the pages where your writing lives.
What we do not do
- We do not sell, rent, trade, or share your data for marketing or advertising.
- We do not show ads, and we use no advertising trackers or anything that follows you across other sites.
- We do not read your writing. The only people who can see a project are the account that owns it and, if you ask us for help with something specific, us. We will never open your work without your permission, except where the law requires it or to investigate a credible report of abuse.
- We do not send your writing to any AI system, ever. WikiDraft contains no AI features. Nothing you write is used to train, fine-tune, prompt, or evaluate any model, by us or by anyone else.
Who else touches your data
We do not run our own servers. A small number of providers store or move your data on our behalf, under contracts that limit them to doing exactly that:
- Neon hosts our database (United States), where your account and your writing live.
- Cloudflare R2 stores uploaded images in a private bucket. Images are only served to the account that owns them.
- Netlify hosts the application and keeps the server logs mentioned above.
- Polar processes payments and sends receipts. Your billing details go to Polar, not to us.
- Google, only if you choose to sign in with Google.
- Resend delivers the account emails we send, such as password resets.
- Fathom Analytics counts visits to the public homepage, without cookies or personal data.
None of them may use your data for their own purposes, and none of them are AI services. If we ever change providers, this page changes with it.
Cookies and your browser
We set a sign-in cookie so you stay logged in, a short-lived cookie that protects Google sign-in from tampering, and a few preference cookies for things like your theme, font, and the timeline cursor. Your browser’s local storage holds unsaved drafts and layout preferences so a lost connection does not cost you a paragraph. There are no tracking cookies; the homepage visit counting works without any.
Emails we send
Only the ones an account needs: password resets, receipts from Polar, and notices about your plan or about changes to these terms. We do not send marketing email unless you explicitly ask for it, and you can always opt out.
How long we keep things
As long as your account exists. Pages you put in the trash stay there, recoverable, until you purge them or delete your account. When you delete your account, your projects, pages, chapters, images, and account record are permanently removed right away. Copies in our encrypted backups age out within 30 days. Payment records that tax law requires us to keep are kept for the period the law sets, and nothing else.
Your rights
Wherever you live, you can see, export, correct, and delete your data. Most of that is built into the product: the Export page in every project gives you a complete copy in JSON or Markdown, and the account pagelets you change your email or delete the account. For anything else, including rights under the GDPR, the UK GDPR, or California’s privacy law, email writing.theory.business+support@gmail.com and we will respond within 30 days. We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of there.
Children
WikiDraft is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has an account, tell us and we will delete it.
Security
Everything travels over encrypted connections and is stored encrypted at rest by the providers above. Passwords are hashed with scrypt. Access to production systems is limited to the people who run the service. No system is perfect; if a breach ever affects your data, we will tell you promptly and honestly, as the law requires and as we would want to be told.
Where your data lives
In the United States. If you use WikiDraft from somewhere else, your data is transferred to and processed there, with the protections described on this page.
Changes to this policy
If we make a change that matters, we will email account holders and post a notice in the app before it takes effect. The effective date at the top always tells you which version you are reading. The three promises in the short version are not the kind of thing we plan to change.