Privacy Policy

1. Introduction

WritePage ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at writepage.net and any associated services.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password (stored securely using bcrypt hashing). We also store your selected plan tier and profile preferences.

Content

We store the blog posts, images, templates, and other content you create on our platform. This content belongs to you and is stored solely to provide our services.

Analytics Data

WritePage uses privacy-first, cookie-free analytics. We collect anonymized page view data, traffic source information, and reading session data. We do not track individual readers across sites, do not use cookies for analytics, and do not collect personally identifiable information from your blog visitors.

Google Analytics on a Writer's Blog

A writer can choose to add their own Google Analytics to their blog. When they do, readers of that blog are asked first, and Google Analytics loads and sets cookies only for readers who allow it. Readers can change their choice at any time from the blog's footer. That data goes to the writer's Google Analytics account under Google's terms, not to WritePage. WritePage's own pages never use Google Analytics.

3. How We Use Your Information

• To provide, maintain, and improve our services
• To process your account registration and manage your subscription
• To deliver newsletters on your behalf to your subscribers
• To generate analytics insights about your blog performance
• To send you service-related communications (account confirmations, security alerts)
• To respond to your support inquiries

4. Newsletter Subscribers

When readers subscribe to your blog newsletter, we collect their email address with explicit consent via double opt-in confirmation. Subscribers can unsubscribe at any time with a single click. We do not sell, share, or use subscriber email addresses for any purpose other than delivering your newsletters.

5. Data Storage and Security

Your data is stored securely on Supabase infrastructure with encryption at rest and in transit. We implement Row Level Security policies ensuring users can only access their own data. Images are stored in isolated, access-controlled storage buckets. We conduct regular security reviews and follow industry best practices.

6. Third-Party Services

We use the following third-party services to operate WritePage:

• Supabase - Database, authentication, and file storage
• Mailgun - Email delivery for newsletters and transactional emails
• Anthropic (Claude) - AI writing assistance and theme generation (your content is not used to train models)
• Netlify - Hosting and content delivery
• Stripe - Payment processing for paid plans (card details go straight to Stripe; WritePage never sees or stores your full card number)
• Google Analytics - Only on blogs whose writer turned it on, and only for readers who allow it

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your content at any time
• Withdraw consent for data processing

8. Data Retention

We retain your account data for as long as your account is active. If you ask us to delete your account, we schedule it for permanent erasure and remove your personal data within 30 days.

During those 30 days your account is closed: you can no longer sign in, and your blog and posts are taken offline immediately. The request can be reversed during that window. After it expires, deletion is permanent and cannot be undone — your blogs, posts, drafts, comments, newsletter and subscriber lists, and analytics are destroyed, and any public URLs stop working.

Two things outlive the erasure, and we would rather say so than imply otherwise. If you have ever paid us, your customer record remains with our payment processor, Stripe, which we and they retain to meet tax and accounting obligations. Our email provider, Mailgun, keeps delivery logs containing recipient addresses for a limited retention period we do not control. We also keep a minimal record that the deletion happened — the date and the fact of the request — so we can demonstrate we honoured it.

9. Children's Privacy

WritePage is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of WritePage after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at our contact page.