Privacy Policy
Last updated: 2026-07-13
NovelForge is operated by an individual developer based in the Czech Republic. This policy explains what we collect, how we use it, and the choices you have. For any data requests, see §7.
1. What we collect
- Account: email, display name, hashed password, device metadata (name, platform, last seen).
- Your writing: manuscripts, Codex entries, and project metadata you choose to sync.
- Operational: request logs, audit log of security-relevant actions, and (only if you opt in) anonymous usage telemetry.
- Local storage: session token, UI preferences (theme, language), and crash metadata stored in your browser or device. No third-party advertising cookies are used.
2. How we use it
To provide cross-device sync and backup, authenticate you, secure the service, and (with consent) improve the product. We do not sell your data or use your manuscripts to train AI models.
3. Storage & security
Your manuscripts are stored with server-side encryption at rest (R2/B2 bucket-level) and transferred over TLS. To provide sync, backup, and real-time collaboration, our infrastructure processes project content — the same operational model as collaborative writing tools like Google Docs or Notion. Access is restricted to automated systems and a single account maintainer; no third party has access. Client-side end-to-end encryption, where even we cannot read your work, is on the roadmap.
4. Sub-processors
| Provider | Purpose |
|---|---|
| Hetzner | Server hosting (EU) |
| Backblaze B2 + Cloudflare | Object storage + CDN |
| Resend | Transactional email |
| Sentry | Error monitoring |
| OpenRouter / OpenAI / Google Gemini / Anthropic | AI completions (only when you enable AI features; selected text is sent to your chosen provider) |
5. Retention
Auth logs ~90 days, audit log ~1 year, telemetry ~30 days, backups ~35 days, deletion tombstones ~90 days. You can request export or deletion of your account data at any time.
6. Your rights
You can access, export, correct, or delete your data. Account deletion is available in-app — a soft-delete with a 30-day grace period, then permanent purge (cascading to backups within 90 days). For other requests, email §7 and we will respond in a reasonable timeframe. EU users may also contact their local data protection authority.
7. Contact
Questions or requests: privacy@novelforge.cc.
8. Children
NovelForge is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has registered, contact us at §7 and we will delete the account.