Draftden Privacy Policy

Last updated: November 2, 2026

Draftden is a writing studio for long-form manuscripts. This page explains what information the app handles, where it goes, and how to delete it.

What we collect

• Account information. If you create an account, we store your email address and a user ID through Firebase Authentication (Google). If you sign in with Apple or Google, we receive the email address (or Apple's private relay address) and the basic profile details that provider shares.
• Your manuscripts. When you are signed in, your chapters, drafts, versions, planning notes and story bible are synced to Google Firebase Cloud Firestore so they are available on your other devices. Only your signed-in account can read or write them.
• On your device only. Theme, layout and AI provider settings stay on your device. If you don't sign in, your manuscript stays on your device only: in this browser on the web, or in the app's storage on a Mac or iPhone.
• AI API keys. Your AI API keys are never synced to your account and never stored on our servers. On the web they are kept only for the current browser session and are cleared when the session ends. The Mac and iPhone apps can remember them on that device only (in the app's private storage).

We don't sell your information, show ads, or use third-party analytics or tracking.

AI features

The AI Sandbox is optional. When you run an AI task, the text you selected or the related manuscript content is sent to the AI provider you configured (for example OpenAI, Anthropic, Google, Perplexity or xAI), using your own API key, or to the local/self-hosted server address you entered. Draftden asks for your consent before the first request to each provider. That provider's own privacy policy and terms apply to what you send it. Draftden does not keep a copy on its servers.

The AI relay on the website (ai-relay.php)

Most providers accept requests straight from your browser. Some (OpenAI, for example) refuse browser requests, so on the website those requests go through a small relay program on our web host, ai-relay.php. It forwards your request to the provider unchanged and returns the answer.

• What it can reach. Only a fixed list of AI provider addresses (OpenAI, Anthropic, Google Gemini, Perplexity and xAI), only over HTTPS, and only for requests that come from this website. It cannot be used to reach other sites.
• Your key and text. Your API key and the text you send pass through the relay's memory only while the request is in flight. The relay does not save them to disk, log them or put them in a database.
• Abuse limits. To stop misuse, the relay counts requests per visitor for a short time. The counter is keyed to a one-way hash of your IP address, is kept in a private temporary folder that is not reachable from the web, and is discarded after about a minute.
• Server logs. Like any web host, ours keeps standard access logs (IP address, time and the address requested). These do not include the contents of your requests.
• Apps. The Mac and iPhone apps do not use this relay: they make provider requests from your device through a small local server inside the app.

Deleting your data

You can delete your account at any time in the app: Account → Delete account. This permanently deletes your account and everything synced to the cloud. If you used Sign in with Apple, the app also revokes its access to your Apple ID. The manuscript stored on your device is not removed by account deletion; you can remove it by deleting the app or clearing its data.

Children

Draftden is not directed at children under 13 and we do not knowingly collect their information.

Changes

If this policy changes, we'll update this page and the date above.

Contact

Questions or requests: ferdie.cm@gmail.com