Privacy Policy

Hey — everything below is the formal, lawyer-friendly version, written to keep WriteHook compliant in a slightly crazy world and to let us check on the health of this free little app. But here's the plain-English short version: we're not collecting your data to sell it, we're not trying to steal anything, and we never read your songs. Everything you make here belongs to you — always.

What this policy covers

This Privacy Policy describes how WriteHook collects, uses, and protects information when you use the WriteHook website at writehook.app (the "Service"). WriteHook is operated as an independent project, not a registered company. By using the Service, you agree to the practices described in this policy.

If you use WriteHook without creating an account, no personal information is collected by WriteHook. Your songs and preferences are stored locally in your browser and never leave your device.

Information you provide directly

When you create a WriteHook account, we collect your email address and a password. Your password is cryptographically hashed before storage and is never stored in plain text.

When you use the Service while signed in, we store your song content, including lyrics, chord progressions, tempo settings, and other creative data you enter, so that you can access it across devices and sessions.

If you contact us through the contact form, we collect your name, email address, and message content so we can respond to your inquiry.

Information collected automatically

WriteHook uses Google Analytics 4, a web analytics service provided by Google, to understand how visitors find and use the Service. Google Analytics collects aggregate usage statistics such as page views, referral sources, approximate geographic region, device and browser type, and how you move between pages. This helps us improve the Service.

Google Analytics is loaded with cookies disabled by default. On your first visit we ask for your consent through a banner. Analytics cookies are only set if you choose "Accept," and no analytics data is collected until you do. If you decline, or ignore the banner, Google Analytics runs in a limited, cookieless mode and no analytics cookies are stored on your device. We have configured Google Analytics with advertising features, ad personalization, and data sharing for advertising turned off, so your data is not used to build advertising profiles.

Our servers automatically record basic log information when you access the Service, including your IP address, request timestamps, browser type, and referring URL. These logs are used for security monitoring and debugging and are not linked to your account or identity.

Cookies

WriteHook does not use advertising or tracking cookies. The only cookies we may set are Google Analytics measurement cookies (named _ga and _ga_*), and only if you consent to analytics through our cookie banner. These cookies help Google Analytics distinguish returning visitors from new ones; they do not identify you personally to us. We also store small technical values in your browser's local storage (such as your sign-in token, saved songs, and interface preferences) — these are not cookies and are never sent to advertisers.

You can change your analytics choice at any time using the "Cookie settings" link in the site footer, or by clearing cookies and site data in your browser. Declining or withdrawing consent stops any analytics cookies from being set.

How we use your information

We use the information we collect for the following purposes:

• Providing and maintaining the Service, including storing and syncing your songs across devices
• Responding to your support requests and contact form submissions
• Sending transactional emails such as password reset confirmations and account-related notices
• Analyzing aggregate, anonymous usage data to improve the Service
• Protecting against abuse, unauthorized access, and other security threats

Information sharing

We do not sell, rent, or trade your personal information to anyone. We share information only with the following service providers who help operate WriteHook, and only to the extent necessary for them to provide their services:

• Vercel (frontend hosting)
• Render (backend hosting and database)
• Resend (transactional email delivery)
• Google Analytics (aggregate website usage statistics)

We may also disclose your information if required by law, court order, or legal process, or if we believe in good faith that disclosure is necessary to protect the rights, safety, or property of WriteHook, its users, or the public.

No ads and no data sales

WriteHook is an ad-free service. We do not display advertisements, and we do not sell your data or share it with advertisers. We use Google Analytics only to measure aggregate site usage, with its advertising features and ad personalization turned off, so your activity is not used for advertising, cross-site tracking, or behavioral profiling.

Data storage and security

Your data is stored on servers located in the United States. All data transmitted between your browser and WriteHook is encrypted using HTTPS. Passwords are hashed using industry-standard cryptographic algorithms and are never stored or transmitted in plain text.

We use reasonable technical and organizational safeguards to protect your information. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

International data transfers

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, your information may be transferred to and processed in the United States, where our servers are located. Data protection laws in the United States may differ from those in your country. By using WriteHook, you consent to this transfer. We process your data on the legal basis that the transfer is necessary to perform our contract with you (providing the Service).

Your rights under GDPR (EEA users)

If you are located in the EEA, you have the following rights under the General Data Protection Regulation (GDPR):

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Request restriction of processing
• Request a portable copy of your data in a structured format
• Object to our processing of your information

WriteHook processes your information under the following legal bases:

• Contract performance: providing the Service and fulfilling our obligations to you
• Legitimate interests: maintaining security, preventing abuse, and improving the Service
• Consent: where you have specifically consented to a particular use of your data

To exercise any of these rights, contact us at david@writehook.app. If you have consented to a particular use of your information, you may withdraw that consent at any time by contacting us.

California privacy rights

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the right to know what personal information we collect, request deletion of your personal information, and opt out of the sale of your personal information. WriteHook does not sell personal information. To make a request regarding your data, contact us at david@writehook.app.

WriteHook does not currently respond to browser "Do Not Track" signals, as there is no consistent industry standard for handling them. However, since we do not engage in cross-site tracking, your privacy is protected regardless.

Your choices and controls

• Account settings: You may update your email address or request changes to your account by contacting us.
• Email communications: You can unsubscribe from non-essential emails at any time. You may not opt out of transactional emails related to your account (such as password resets or security notices).
• Local storage: You can clear your browser's local storage at any time to remove locally stored songs and preferences.
• Data deletion: You may request complete deletion of your account and all associated data by contacting us at david@writehook.app.

Children's privacy

WriteHook is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe that a child under 13 has provided us with personal information, please contact us at david@writehook.app and we will take steps to delete that information promptly.

Third-party links

WriteHook may contain links to third-party websites and services, such as Ko-fi (for voluntary donations) and Discord (for community discussion). We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review their privacy policies before providing them with any information. This Privacy Policy applies only to information collected through WriteHook.

Data retention

We retain your account data and song content for as long as your account remains active. If you request deletion of your account, your personal information and song content will be removed from our servers within 30 days. Server logs are retained for a limited period for security and debugging purposes. Google Analytics data is aggregate usage information; we set its retention period to 14 months, after which user-level and event-level data is automatically deleted by Google.

Security breach notification

In the event of a data breach that compromises your personal information, we will take reasonable steps to investigate and address the breach. Where required by applicable law, we will notify affected users via email within 72 hours of becoming aware of the breach, and we will take appropriate steps to mitigate its effects.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Your continued use of WriteHook after any changes constitutes your acceptance of the updated policy. We will make reasonable efforts to notify users of significant changes via email or a notice within the Service.

Contact

If you have any questions about this Privacy Policy, your data, or your rights, please contact us at david@writehook.app or visit our contact page.