Privacy policy

What we store in your account

Email address and sign-in data, so you can create an account and sign in.

Book projects, series and editions you create, and immutable revision snapshots: titles, authors, print settings, generation recipes and, for each file, its name, size, page count and SHA-256 fingerprint.

Results of checks, comparisons, puzzle verifications and release manifests you choose to save, and the source, licence and AI-disclosure statements you enter.

Usage counters, so plan limits can be applied, and a short-term counter of recent changes to limit abuse.

A Stripe customer id, so your payments can be linked to your account. No card data is stored by Titleward; card details go to Stripe.

Data you created with earlier features, such as listings, scans, evidence files you uploaded and AI-disclosure records, stays in your account and in your export until you delete it.

For the free public tools, a salted hash of your IP address, used to limit abuse. The raw IP address is not stored.

What stays in your browser

PDF and image files you select, and the page fingerprints and text extracted from them for checks and comparisons, are processed in your browser and kept in its local storage (IndexedDB). The workspace does not send them to our servers.

When you sign out you can choose to keep or remove these local files. Deleting your account also removes them from the browser you use for the deletion. We cannot reach other devices: there, sign out with the remove option or delete the site data in that browser.

Why we use it, and how long we keep it

We use this data to run the service: to sign you in, to save your projects and results, to apply plan limits, to take payment, to send account email and to find and fix errors. We do not sell personal data and we do not use it for advertising.

Account data is kept while your account exists and is deleted when you delete your account. Payment records are kept as long as tax and accounting rules require. Server logs and error data are kept for a short period, then removed.

Export and deletion

You can export your account data and delete your account in Settings. You can also ask through the contact address on the About page.

Who processes your data

Supabase provides the database, sign-in and file storage for files you explicitly upload as evidence.

Vercel hosts the website and the app.

Stripe processes payments.

Resend sends account and service email.

Sentry receives error reports. Reports are filtered before they are sent: request bodies, cookies, query strings, email addresses and file names are removed.

International transfers

These providers may process data in the United States and other countries. Where the law requires it, transfers rely on safeguards such as standard contractual clauses.

Your rights

Under the GDPR, the UK GDPR and the CCPA you can, in plain terms: ask what we hold about you, get a copy, correct it, delete it, object to or limit how it is used, and complain to your data protection authority. California residents can also ask what is collected and ask that it is not sold; it is not sold.

To use these rights, use Settings or write to the contact address on the About page. We will answer within the time the law requires.

Children

Titleward is not directed at anyone under 16, and we do not knowingly collect data from them.

Contact and changes

The operator name, address and contact email are shown in the operator block on this page.

If this policy changes in a material way, the date at the top changes and we will tell account holders.