Legal

Privacy Policy

Effective 18 August 2026

The short version

Your writing never leaves your device unless you send it, and when you send it, it goes to Anthropic under your own key rather than to us. We hold one thing: an email address and a licence status, so the app knows what you have paid for. There is no analytics, no tracking, no advertising and no third-party scripts on this website.

What stays on your device

Storydrills is an offline-first application. The following are held in your browser’s local storage on your own device and are never sent to us:

• The beat bank, including any beats you write or import
• Your progress, accuracy history and spaced-repetition scheduling
• Game scores and sessions
• Your settings and chosen theme
• Your Anthropic API key

You can export all of it at any time from Settings, and you can delete all of it at any time from Settings → Advanced → Delete everything on this device. The export deliberately leaves your API key out, so you re-enter it after a restore.

What we hold, and why

Only what a licence check requires:

• Your email address — the identifier a licence is issued against
• Licence status and expiry date
• A payment reference from Paddle, so a renewal or refund can be matched to the right licence

That is the whole record. We do not store your name unless you gave it to us in an email, we do not store payment details at all, and we never receive your content or your progress.

The legal basis, where that framing applies to you, is performance of a contract: without an email address there is no way to tell you apart from anyone else and no way to give you what you bought.

Licence records are held on Supabase infrastructure. They are kept while your licence is active and for a reasonable period afterwards so a lapsed licence can be renewed without losing your history, and deleted on request.

Analyze and Walk Through

These features send text you choose — a scene, an outline, a draft — to Anthropic’s API, directly from your browser, using an API key you supply.

That text does not pass through our servers and we never see it. It is also deliberately excluded from every export the app produces. Your agreement with Anthropic governs what happens to it after that.

This is a design decision rather than an oversight: screenwriters should not have to send unproduced work through a stranger’s server, and the cost of that decision is that you have to bring your own key.

Payments

Paddle.com Market Ltd is the merchant of record for every purchase. Paddle collects and processes your payment details and billing information under its own privacy notice. We never see or store card numbers. Paddle passes us your email address and the status of your purchase, and nothing else we need.

This website

• No analytics. No Google Analytics, no pixels, no tag manager, no cookie banner, because there is nothing to consent to.
• Hosting. storydrills.com and the app are served by Cloudflare, which processes standard request logs (IP address, user agent, requested URL) for security and delivery.
• The contact form posts directly to Web3Forms, which emails the message to us. What you type in it is what we receive.
• During the beta, the app sits behind Cloudflare Access, which sends a one-time code to your email address to let you in. Access is removed when the app goes on sale.
• Fonts are self-hosted. The app and this site load no external font, script or stylesheet, so opening either does not announce you to a third party.

Your rights

You can ask us to show you what we hold, correct it, or delete it. Because what we hold is an email address and a licence status, that is a short conversation. Deleting your licence record ends the licence; it does not touch anything on your device.

If you are in the UK, EU or a US state with a comprehensive privacy law, you have the rights that law gives you — access, correction, deletion, portability and objection among them — and we will honour them without asking which one applies. We do not sell personal information and never have.

To exercise any of this, email joe@hoodworks.media from the address on the licence.

Children

Storydrills is not directed at children under 13 and we do not knowingly collect their personal information. Where a school or programme licenses Storydrills for students, the institution is responsible for obtaining any consent its own rules require.

Changes

If this policy changes, the effective date above changes with it. If a change means we start collecting something we did not collect before, we will say so plainly rather than edit a sentence and hope.

Contact

Joseph Hood, trading as Hoodworks Media Group — joe@hoodworks.media.