Privacy Policy
What we collect, why, how long we keep it, and how to get it deleted. The honest, plain-language version.
Last updated: 17 September 20261. Who is responsible
Proseify (the operator, based in Albania) is the "data controller" for your account data. Our payment provider, Polar, is the merchant of record and handles payment data as its own controller — see their own policy for that part. Contact: support@proseify.xyz.
2. What we collect, and why
| Data | Why we need it | Kept |
|---|---|---|
| Email address | Identify your account, deliver your API key and sign-in links, service notices (price change, security incidents). | Until you ask us to delete it (see §6) |
| OAuth identity (Google / GitHub id, name, avatar) | Sign-in. We never see your password; providers send us a verified email and profile fields. | Same as email |
Session cookie (__Secure-better-auth.*, scoped to .proseify.xyz) | Keeps you signed in. Strictly necessary — no consent banner required because it does nothing else. | 30 days, or until you sign out |
| Subscription record (plan, status, renewal date via Polar) | Know what you're entitled to; enable self-serve cancellation. | Life of subscription + accounting rules (up to 7 years where tax law requires) |
| API key (random string we generate) | Authenticate your AI client against our MCP server. Shown once in your account page, emailed once at purchase. | Until revoked or deleted by you |
| Rate-limit counters (per key, in-memory) | Fair-use enforcement. | Rolling 60 seconds — no persistence |
| Server logs (error text, timestamps) | Debugging and abuse detection. We don't log your writing. | Truncated; short retention |
Analytics — anonymous unless you choose otherwise
We count visits to our own pages, with our own analytics running on our own servers. By default that count is anonymous: each day we record the page, the referrer's host, the country and a one-way salted hash that cannot be reversed and changes every day. We keep no IP address, no email and no cookie for that, so nothing links two visits — or two days — to the same person.
If you click OK, remember more in the bar at the foot of the page, we keep a little more, so we can see where to tell people about the books:
- roughly where you are — the city and region Cloudflare reports for your connection (never your precise location);
- your account email — but only while you are signed in;
- your IP address, shortened — we zero the last part of it (the final number of an IPv4 address, or the last 64 bits of an IPv6 one) and delete even that after 30 days.
With your OK we also set one first-party cookie, pf_consent, which simply remembers your choice, and we load Google Analytics — described in the next section. If you do not give that OK, nothing from Google is loaded on this site at all.
Google Analytics — only if you allow it
If you allow it, we load Google Analytics 4 (measurement ID G-2GWJDM5D9Y) so we can see which pages actually lead to somebody buying a book. Google Analytics sets its own cookies — _ga and _ga_<id>, which last up to two years — and sends your IP address, device details and the pages you viewed to Google LLC in the United States.
We have switched its advertising features off: advertising storage, advertising user data and ad personalisation are all set to denied, so the data is not used by us (or requested by us) for advertising, and we never send Google your email address or anything you wrote. Refusing it costs you nothing: our own anonymous count keeps working exactly as before.
To opt out of Google Analytics across every website, Google publishes a browser add-on at tools.google.com/dlpage/gaoptout. If you click “No thanks” in our bar after having agreed, we delete the _ga cookies it set.
You can change your mind at any time — open the privacy choices and click “No thanks”, which returns you to the anonymous count. Anonymous rows are kept for 180 days; a consented row loses its IP address after 30 days and is deleted with everything else after 180 days.
What we deliberately do not collect
- Your manuscripts. Book text is generated client-side in your own AI session. We never store or even see the prose you produce.
- Advertising trackers. No Meta Pixel, no Google Ads or DoubleClick tags, no advertising cookies, no cross-site fingerprinting. Google Analytics is loaded only with your permission, with its advertising features switched off.
- Card numbers. Never see them. Polar handles the payment entirely.
- AI provider data. What you send to Claude/Cursor/etc. is between you and them; we don't see it.
3. Who we share data with (and who we don't)
We use a short list of processors, chosen specifically so you don't end up in more databases than necessary:
- Cloudflare — hosting (Pages, Workers, KV, D1). Processes request data in transit; EU+global anycast network.
- Google LLC — Google Analytics, only if you allow analytics in the consent bar. Receives page, device and IP data; servers in the United States.
- Polar — merchant of record. Sees your email, plan, payment method details and invoices. They handle GDPR as controller for payment data.
- Resend — sends your sign-in links and key emails through their transactional-email platform.
- Google / GitHub — only if you choose them as a sign-in method; you'll see their own consent screens.
- Amazon Web Services (eu-west-1 Ireland) — hosts our corpus/database server behind Cloudflare Tunnel.
We do not sell, rent, or trade your data. We don't share it with advertisers. We'd only disclose to authorities if legally compelled, and we'd tell you unless legally prevented.
4. Where data lives
Cloudflare's global edge (encrypted at rest), D1 databases pinned to EU locations, Polar's payment records, and Resend's EU sending infrastructure. Our application server runs on AWS in eu-west-1 (Ireland). Sign-in links and key emails transit via Amazon SES in eu-west-1.
5. Your rights (GDPR & friends)
Wherever you live — but especially if you're in the EU/EEA or UK — you have the right to:
- Access your data — a copy of what we hold, on request.
- Rectification — correct anything wrong.
- Erasure — "be forgotten". Ask and we'll delete your account, email, OAuth link and key within 30 days.
- Portability — a machine-readable export of what we hold on you.
- Object / restrict — you can tell us to stop a specific use.
- Complain — to your national data-protection authority. (In Ireland: Data Protection Commission. In Albania: the Commissioner for Personal Data Protection.)
To exercise any of these: support@proseify.xyz. No fee, no interrogation — we may ask proof that you control the email on the account, for obvious reasons.
6. What happens when you cancel or delete
- Cancel a subscription: your key stops working within ~30 seconds of the cancellation event. Your account, email and OAuth link remain — you asked to cancel the subscription, not the identity.
- Full deletion ("delete my account and everything"): email us, we confirm, and we permanently remove (1) your auth row in D1, (2) your OAuth provider link, (3) your API key and its metadata, (4) anything else identifying. Payment records Polar holds are their responsibility and kept per tax law.
- Inactive accounts are kept (not deleted) unless you ask — we think silently deleting someone's API key is a worse experience than email we can send again.
7. Security
- Sessions are HttpOnly, Secure, SameSite=Lax cookies scoped to
.proseify.xyz. - API keys are 192-bit random strings, shown once, revocable from your account.
- All traffic is HTTPS. Service-to-service calls happen inside Cloudflare's network or over an encrypted tunnel.
- Sensitive infrastructure secrets live only as encrypted Worker secrets — never in source control.
- We don't claim perfect security, and we do react: if we ever have reason to believe your data was exposed, we'll tell you within 72 hours of knowing.
8. Children
Proseify isn't directed at children. You need to be old enough to consent to your own data processing where you live — in most of the EU that's 16, elsewhere more or less. If we learn an account belongs to someone younger, we delete it.
9. Changes and contact
We'll email significant changes to this policy at least 14 days before they take effect. Questions or requests: support@proseify.xyz.
Related: Terms of Service · Refund Policy