Privacy

1. Who operates Ink

Ink is operated by Jacques Tredoux, trading as Ink, referred to here as “Ink,” “we,” or “us.” For purposes of South Africa’s Protection of Personal Information Act, 2013 (“POPIA”), Jacques Tredoux is the responsible party. Contact details appear at the end of this notice.

2. Your writing, local storage, and optional cloud backup

Ink is local-first. Document text, projects, scratch notes, snapshots, trash, backup reminders, and document appearance settings are stored in your browser using on-device web storage. Signing in separates writing storage by account on the current browser.

If you deliberately enable Cloud Backup Beta, Ink also sends your workspace to Ink’s Supabase project using your Auth0 account identifier. Cloud backup is optional, can be paused, keeps up to 30 previous cloud copies, and is used to synchronize and restore your workspace. Ink does not use document content for advertising, profiling, or AI training.

Your selected light or dark mode and theme pack are saved as a separate site-wide preference so the landing, account, writing, recovery, and legal pages can use the same appearance. This preference is not used for advertising or cross-site tracking.

Browser storage can be cleared by you, your browser, device-management software, or storage settings. Private browsing may remove it when the session ends. You should download backups regularly.

Ink’s local recovery page scans storage available to the exact browser origin you open. It displays possible writing on your device and creates a download only when you choose one. The scan does not send recovered text to Ink or a third party.

Consistency Proof, Dialogue Lens, undo and redo, typewriter effects, search, and export preparation operate inside your browser. Ink does not send document text to an AI service, grammar service, or remote proofing provider. Undo and redo history is temporary session data and is not a substitute for snapshots or downloaded backups.

3. Account and authentication data

Ink uses Auth0 Universal Login for account registration and authentication. Auth0 handles passwords, passkeys, one-time codes, multifactor authentication, account recovery, and authentication cookies. Ink receives limited identity claims needed to show and separate the account locally, such as an account identifier, display name, and email or username. Ink does not receive your password.

The Auth0 browser SDK keeps authentication session data in first-party browser storage so signed-in mobile browsers can recover after a tab reload. Auth0 may use its own cookies and retain identity and sign-in records under its own terms and privacy policy.

4. Technical data

Ink is hosted by Render Services, Inc. in Render’s Frankfurt region. Render may process ordinary network, security, and service-log information needed to deliver and protect the website, such as IP address, browser details, requested page, date and time, and security events. Ink’s application does not intentionally write visitor IP addresses or document content to its own application logs. Under Ink’s current Render Hobby workspace, retained application logs are available for up to seven days. Render’s practices are described in its privacy policy.

Optional Cloud Backup Beta is provided through Supabase in its Central EU region. When enabled, Supabase processes your Auth0 account identifier, workspace content, device identifier, version number, and backup timestamps to store and return your cloud copies. Supabase’s practices are described in its privacy policy.

Ink currently loads fonts through the Google Fonts Web API. A visitor’s browser therefore sends Google the IP address needed to deliver the font, the requested Google URL, and HTTP headers such as browser, operating system, referring page, and user agent. Google states that its Fonts API does not set or log cookies and does not use that information for profiling or targeted advertising.

5. Cookies, local storage, and analytics

Ink uses Google Analytics 4 only after you select “Allow analytics.” Before that choice, the Google Analytics tag is not loaded and no analytics request is sent. If allowed, Google Analytics may use first-party identifiers and receive information such as the page URL and title, referring page, approximate location, browser and device characteristics, and ordinary page interactions. Ink does not intentionally send your document text, scratch notes, account email, or cloud workspace content to Google Analytics.

Advertising storage, advertising user data, advertising personalization, Google signals, and ad personalization signals remain disabled. Analytics is used to understand broad website usage, not to serve targeted advertising or build writing profiles. Google processes analytics data under its privacy policy and applicable data-processing terms.

Your choice is stored in first-party browser storage. You may reject analytics without losing access to Ink, and may change or withdraw your choice through any “Analytics choices” control. Withdrawing consent deletes accessible Ink-domain Google Analytics cookies and prevents the tag from loading on later pages. Other first-party browser storage is used for requested writing, recovery, backup, account-separation, theme, and consent functions. Auth0 uses its own cookies and storage for secure sign-in.

6. Sharing and selling

Ink does not sell your personal information or share it for cross-context behavioral advertising. Technical data may be handled by infrastructure providers, including Render, Auth0, Google Fonts, Google Analytics after your consent, and—when you enable Cloud Backup Beta—Supabase, only as needed to provide and protect those functions. We may disclose information if legally required or necessary to protect rights, safety, and service security.

7. Retention and deletion

Your writing remains in browser storage until you delete it, empty Ink’s trash, clear site data, or lose that browser profile or device. Site-wide theme preferences remain until you change them or clear Ink’s site data. Ink cannot remotely retrieve or delete local writing it never received. Cloud workspaces remain in Supabase while Cloud Backup Beta is enabled or until they are deleted following a verified request; the service keeps up to 30 replaced cloud copies. Render application logs are retained for up to seven days under the current hosting plan. Authentication and security records are retained by Auth0 according to the tenant configuration, subscription, security requirements, and applicable law. Google Analytics event data is retained according to the property’s configured retention setting; aggregate reporting may persist longer.

8. Security and backups

Local-first storage reduces transmission of your writing, and cloud requests are encrypted in transit, but no browser, device, cloud service, or website is immune from failure or unauthorized access. Protect your device, use an updated browser, and keep downloadable backups in a location you control.

9. Your choices and rights

You can view, edit, export, back up, restore, trash, and permanently delete locally stored writing inside Ink. You can pause Cloud Backup Beta and request deletion of cloud-stored writing by contacting Ink. You can reject or withdraw analytics consent at any time through “Analytics choices.” You can change appearance preferences at any time and clear all Ink data through your browser’s site-data controls. Account deletion and identity-record requests may also require action through Ink’s operator or Auth0. Depending on where you live, you may have rights relating to personal information processed in account records, server logs, or support correspondence.

Under POPIA, these rights may include requesting access to or correction of personal information, requesting deletion where legally available, objecting to certain processing, and lodging a complaint with South Africa’s Information Regulator. Identity verification may be required before an account-related request is completed.

10. Children

Ink is a general-audience writing tool and is not directed to children under 13. We do not knowingly permit children under 13 to create accounts or provide account details. If you believe a child has created an account, contact us so the matter can be reviewed with the identity provider.

11. International use and changes

If you use Ink from another country, technical data may be processed where the website’s providers operate. We may update this notice when Ink’s features or providers change. The effective date above will be revised when material changes are published.

12. Contact

Privacy questions and rights requests: jtredoux69420@gmail.com.