Privacy Policy

Last updated: 24 August 2026

DragonWriter is a place to write and keep your stories. This policy explains what information the app holds, why, and who it is shared with. We have tried to write it plainly rather than in legalese. If anything here is unclear, please get in touch.

What we collect

• Your account — the username and email address you sign up with, and your password (which we store only in a securely hashed form, never as plain text).
• Your writing — the stories, chapters, notes, and any images or book covers you create or upload. This is your content; we store it so you can come back to it.
• Optional profile details — a short bio, an avatar, your chosen timezone, and a linked Discord account, if you add them.
• Notification tokens — if you turn on notifications, we store the push subscription (in a browser) or device token (in the Android app) needed to deliver them. Turning notifications off, or removing a device, deletes it.
• Basic activity timestamps — such as when you last logged in, used to run features like streaks and to keep your account secure.
• IP addresses — recorded only briefly to rate-limit sign-ups and logins and to prevent abuse. They are not used to track you or build a profile of you.

How we use it

• To run your account and save your writing.
• To send you notifications and emails you have asked for — such as email verification, password resets, writing reminders, and activity you have opted into.
• To show the parts of your profile or the stories you have chosen to make public.
• To keep the service secure and prevent abuse.

We do not sell your personal information and we do not show advertising. We use one privacy-focused, cookie-less analytics tool — Cloudflare Web Analytics (described under Analytics below) — and no other third-party trackers. Apart from that, the site loads no third-party scripts: fonts, images, and styles are all served from our own storage.

Who your information is shared with

We use a small number of service providers to make the app work. They only receive what they need to provide their part of the service:

• Cloudflare — hosts the app and stores its data (the site, database, and uploaded images); all requests to DragonWriter pass through Cloudflare's network. Cloudflare also provides the privacy-focused Web Analytics described below.
• Google — Firebase Cloud Messaging delivers push notifications to the Android app, which involves your device's notification token. This is the only Google service involved, and only if you use the Android app with notifications turned on.
• Discord — only if you choose to link your Discord account, so that linked features can work.
• Our email provider — to deliver the transactional and notification emails described above.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service.

Cookies

DragonWriter uses a single session cookie to keep you logged in. We do not use advertising or cross-site tracking cookies.

Analytics

To understand how the site performs and roughly how many people visit, we use Cloudflare Web Analytics. A small script from Cloudflare measures things like page-load timing, which page was viewed, the referring site, and general details such as your browser type and country. It is privacy-focused and cookie-less: it sets no cookies, uses no persistent identifier, and does not track you across other websites. Cloudflare processes this data on our behalf to provide the analytics and retains it for a limited period; Cloudflare states it does not sell this data or use it to build advertising profiles. Because it uses no cookie or stored identifier, there is nothing to switch off in a cookie setting — but if you prefer, a browser content blocker will stop the script from loading, and the site works exactly the same without it.

Keeping and deleting your information

We keep your information for as long as your account exists. You can delete your account at any time from Settings → Delete account: this permanently removes your account, your stories, and your uploaded images and covers, and it cannot be undone. Notification device tokens are removed when you turn notifications off or remove a device.

Your choices

• View and update your account details, bio, avatar, and timezone in Settings.
• Choose how you are notified — in-app, email, or push — per type of activity, and turn any of them off.
• Unlink your Discord account whenever you like.
• Delete your account and all its content, as described above.

Security

Passwords are stored only as secure hashes, connections use HTTPS, and access to your account is protected by your login. No online service can promise perfect security, but we take reasonable steps to protect your information.

Children

DragonWriter is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will remove it.

Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date at the top of this page.

Contact

If you have any questions about this policy or your information, email us at hello@dragonwriter.app.