Privacy policy

Privacy is the product: your stories are private, we sell nothing, and you can erase everything in one click.

What we collect

• Your email and password — or your Google sign-in — plus the anonymous pen name we assign you.
• The prompts you write and the stories you save, private to your account.
• Your subscription status. Stripe handles payment; we never see card numbers.
• For guest trials, a one-way hash of your IP address, linked to no account.

We use PostHog for product analytics — which pages get used, where people get stuck, how far into a story they get. Session replays record layout, clicks and scrolling with every piece of text and every input masked in your browser before anything is sent: your prompts and your stories are not part of it. PostHog receives an account ID and your plan — never your email, your pen name, or a word you wrote. It stores this in the United States.

What we never do

Sell or share your data, publish or index your stories, or send your identity to the AI models that write them.

Who else touches it

A few vendors help us run SecretPen — hosting, login, payments, AI text generation, email, and product analytics. Each gets only what it needs.

Deleting it, and your rights

“Delete account & all data” in Settings erases your account, stories, and Ink history immediately. Logs of blocked requests are kept for legal compliance. Depending on where you live (GDPR, CCPA, and similar) you can also ask us to access, correct, or export your data — email support@secretpen.net.