Privacy Policy

What this policy covers

This Privacy Policy describes how WriteHook collects, uses, and protects information when you use the WriteHook website at writehook.app (the "Service"). WriteHook is operated as an independent project, not a registered company. By using the Service, you agree to the practices described in this policy.

If you use WriteHook without creating an account, no personal information is collected by WriteHook. Your songs and preferences are stored locally in your browser and never leave your device.

Information you provide directly

When you create a WriteHook account, we collect your email address and a password. Your password is cryptographically hashed before storage and is never stored in plain text.

When you use the Service while signed in, we store your song content, including lyrics, chord progressions, tempo settings, and other creative data you enter, so that you can access it across devices and sessions.

If you contact us through the contact form, we collect your name, email address, and message content so we can respond to your inquiry.

Information collected automatically

WriteHook uses Plausible Analytics, a privacy-friendly analytics tool. Plausible does not use cookies, does not collect personal data, does not fingerprint your browser, and is fully compliant with GDPR, CCPA, and PECR. Plausible collects only aggregate, anonymous usage statistics such as page views, referral sources, and general geographic region.

Our servers automatically record basic log information when you access the Service, including your IP address, request timestamps, browser type, and referring URL. These logs are used for security monitoring and debugging and are not linked to your account or identity.

How we use your information

We use the information we collect for the following purposes:

• Providing and maintaining the Service, including storing and syncing your songs across devices
• Responding to your support requests and contact form submissions
• Sending transactional emails such as password reset confirmations and account-related notices
• Analyzing aggregate, anonymous usage data to improve the Service
• Protecting against abuse, unauthorized access, and other security threats

Information sharing

We do not sell, rent, or trade your personal information to anyone. We share information only with the following service providers who help operate WriteHook, and only to the extent necessary for them to provide their services:

• Vercel (frontend hosting)
• Render (backend hosting and database)
• Resend (transactional email delivery)
• Plausible Analytics (anonymous, aggregate usage statistics)

We may also disclose your information if required by law, court order, or legal process, or if we believe in good faith that disclosure is necessary to protect the rights, safety, or property of WriteHook, its users, or the public.

No ads and no data sales

WriteHook is an ad-free service. We do not display advertisements, and we do not share your data with advertisers. We do not use third-party tracking pixels, advertising cookies, or behavioral profiling of any kind.

Data storage and security

Your data is stored on servers located in the United States. All data transmitted between your browser and WriteHook is encrypted using HTTPS. Passwords are hashed using industry-standard cryptographic algorithms and are never stored or transmitted in plain text.

We use reasonable technical and organizational safeguards to protect your information. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

International data transfers

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, your information may be transferred to and processed in the United States, where our servers are located. Data protection laws in the United States may differ from those in your country. By using WriteHook, you consent to this transfer. We process your data on the legal basis that the transfer is necessary to perform our contract with you (providing the Service).

Your rights under GDPR (EEA users)

If you are located in the EEA, you have the following rights under the General Data Protection Regulation (GDPR):

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Request restriction of processing
• Request a portable copy of your data in a structured format
• Object to our processing of your information

WriteHook processes your information under the following legal bases:

• Contract performance: providing the Service and fulfilling our obligations to you
• Legitimate interests: maintaining security, preventing abuse, and improving the Service
• Consent: where you have specifically consented to a particular use of your data

To exercise any of these rights, contact us at david@writehook.app. If you have consented to a particular use of your information, you may withdraw that consent at any time by contacting us.

California privacy rights

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the right to know what personal information we collect, request deletion of your personal information, and opt out of the sale of your personal information. WriteHook does not sell personal information. To make a request regarding your data, contact us at david@writehook.app.

WriteHook does not currently respond to browser "Do Not Track" signals, as there is no consistent industry standard for handling them. However, since we do not engage in cross-site tracking, your privacy is protected regardless.

Your choices and controls

• Account settings: You may update your email address or request changes to your account by contacting us.
• Email communications: You can unsubscribe from non-essential emails at any time. You may not opt out of transactional emails related to your account (such as password resets or security notices).
• Local storage: You can clear your browser's local storage at any time to remove locally stored songs and preferences.
• Data deletion: You may request complete deletion of your account and all associated data by contacting us at david@writehook.app.

Children's privacy

WriteHook is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe that a child under 13 has provided us with personal information, please contact us at david@writehook.app and we will take steps to delete that information promptly.

Third-party links

WriteHook may contain links to third-party websites and services, such as Ko-fi (for voluntary donations) and Discord (for community discussion). We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review their privacy policies before providing them with any information. This Privacy Policy applies only to information collected through WriteHook.

Data retention

We retain your account data and song content for as long as your account remains active. If you request deletion of your account, your personal information and song content will be removed from our servers within 30 days. Server logs are retained for a limited period for security and debugging purposes. Plausible Analytics data is aggregate and anonymous and contains no personal information.

Security breach notification

In the event of a data breach that compromises your personal information, we will take reasonable steps to investigate and address the breach. Where required by applicable law, we will notify affected users via email within 72 hours of becoming aware of the breach, and we will take appropriate steps to mitigate its effects.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Your continued use of WriteHook after any changes constitutes your acceptance of the updated policy. We will make reasonable efforts to notify users of significant changes via email or a notice within the Service.

Contact

If you have any questions about this Privacy Policy, your data, or your rights, please contact us at david@writehook.app or visit our contact page.