InkyWord

Appendix B

Privacy Policy


What we keep about you, why, and who else sees it.

This policy says what InkyWord keeps about you, why, who else sees it, and what you can do about it. The short version: we keep what we need to run your account and keep your writing, we don't sell any of it, and your writing is never used to train AI models.

InkyWord is run by Vixen Tech s. r. o., Jelenia 1, 811 05 Bratislava, Slovakia, company ID 55 516 904 ("we", "us"), the controller of your personal data under the GDPR. Write to oc.hcetnexiv@xela with any question about it.

What We Keep

Your account. Your name, email address and password (stored only as a one-way hash, never in plain text), any passkeys you add (their public keys), your time zone, your writing goals, and when you accepted the Terms & Conditions and which version.

Your writing. Your worlds and everything in them: story bible entries, books, chapters and their history, covers, timelines and notes. Writing is stored in our database; book covers are stored with our storage provider, kept private and only ever shown to people who can open the book.

What happens around your writing. How many words you write each day, for your writing goals; and, in worlds you're part of, comments, reactions, answers to writers' questions, and how far beta readers have read.

Support reports. What you write in a bug report, idea or question, any screenshot you add, and, if you let it, where you were in the app: the page, your browser, your window's size and your language. They're kept with the conversation that follows.

Signing in. While you're signed in, we keep a session for you, with your IP address and your browser's name, so the app knows it's you and can spot sign-ins that aren't. Our servers also keep logs of requests and errors, to keep the app running. We keep them only as long as we need them, and delete old ones.

Cookies and Your Browser

InkyWord uses only the cookies it needs to work:

  • a session cookie, which keeps you signed in;
  • a security cookie (XSRF-TOKEN), which stops other sites from acting as you;
  • a language cookie (APP_LOCALE), which remembers the language you chose.

Your browser also keeps a few preferences for you, such as which binder groups you've folded, your spelling and grammar settings and where you stopped reading a chapter. They stay on your device. So does a copy of what you write in a chapter until it's saved, in case the page closes first; it's deleted once saved, and when you sign out.

There are no advertising cookies. To see how many people visit InkyWord and which pages they use, we use Umami, which doesn't use cookies, doesn't follow you across sites and doesn't store your IP address: it counts page views, where visitors came from, and their country, browser, operating system and kind of device, without telling us who you are. Spelling and grammar are checked inside your browser, so your text isn't sent anywhere for it.

How We Use It

To run your account and keep your writing, show it to the people you share it with, send you the emails the app needs (verifying your address, resetting your password, invitations and replies to your support reports), answer your support reports, keep the app secure, and work out what to fix and build next.

Running your account, keeping and sharing your writing, and sending the app's emails are how we carry out our agreement with you (Article 6(1)(b) GDPR). Keeping the app secure, answering support reports and working out what to improve rely on our legitimate interests (Article 6(1)(f) GDPR), which you can object to.

We don't sell your information, show you ads, or use your writing to train AI models.

Who Else Sees It

  • The people you invite. Co-writers see the worlds they're part of, as their role allows. Beta readers see only the chapters you share with them, and their comments and answers are seen by the world's writers.
  • The people running InkyWord. We look at your account or writing only when we need to: to answer a support report, fix a problem you've reported, or deal with a breach of the Terms. Support reports are read by the app's admins.
  • Service providers who run parts of the app for us, only to provide it and under a data processing agreement (Article 28 GDPR): DigitalOcean (hosting and our database, on servers in Frankfurt, Germany), Cloudflare (R2 storage, for book covers and support screenshots, kept in Eastern Europe), Zoho (email, sent from Europe) and Umami (visitor statistics, without cookies, stored in the EU). Your information stays in Europe.
  • The law. If we're legally required to, for example by a court order.

How Long We Keep It

We keep your account and writing for as long as you have your account. When you delete it, your account and the worlds you own are deleted right away, with everything in them; your comments, reactions and answers in worlds others own go too. Chapters and entries you wrote as a co-writer in someone else's world stay in it, without your name on them. Deleting a world is also permanent, straight away: there's no trash for worlds. Your support reports, and their screenshots, go with your account. While you have it, we keep them as long as they're useful for helping you, and may delete old ones. Backups are kept as long as we need them, and old ones are deleted, taking any copies of what you deleted with them.

Older versions of a chapter thin out on their own: every version from the last few days, then one a day, then one a week, so your history doesn't grow forever. Versions you named are kept.

Your Rights

You can see and change your name and email address on your account page, export your books at any time, and delete your account and your worlds whenever you like. Under the GDPR, you also have the right to ask for a copy of your information, to have it corrected, erased or handed to you in a form you can take elsewhere, and to restrict or object to how it's used. To use any of these rights, ask us through Support in the app or by email to oc.hcetnexiv@xela.

If you think we've mishandled your information, you can complain to the Office for Personal Data Protection of the Slovak Republic, Námestie 1. mája 18, 811 06 Bratislava, or to the data protection authority where you live.

Keeping It Safe

Your connection to InkyWord is encrypted, passwords are hashed, book covers and screenshots are private, and only the people you invite can open your worlds. No system is perfectly secure, so if we ever learn of a breach that affects you, we'll tell you.

Children

InkyWord is not meant for children under 15, and we don't knowingly keep information about them. Writers under 18 need a parent's or guardian's permission to use it.

Changes to This Policy

The date at the top says when this policy last changed. If a change matters, we'll tell you before it applies.