Privacy

Who is responsible

[To fill: the seller’s name, legal form, registered address, registration and VAT numbers]. Write to [To fill: the contact e-mail address] about anything on this page.

What we keep, and why

• Your account: your e-mail address, to sign you in with a code and to send your receipts and gift codes; the first name you gave the app, to address you; the language your phone showed when you last asked for a sign-in code, to write our e-mails in it; when you joined and last signed in; whether your device may offer you new packs; which kinds of notification the app may send you; and whether we may send you announcements by notification and by e-mail, two choices that are off until you turn them on.
• Signing in: each code, valid for ten minutes. For each session, a fingerprint of its key rather than the key itself, when it began, when it ends (at most 90 days later) and whether you signed out. When you sign in on a computer by scanning a code with the app, the browser’s description of itself and the country its connection comes from, kept for two minutes so the app can show them before you approve.
• Your devices: each device’s serial number and model, the name you gave it, its time zone and quiet hours, its language, what it shows at rest, the country it was made for, and the reader’s birth year if you gave it. The time zone and quiet hours decide when the device is served; the language and the country decide which sentences it may show; the birth year keeps sentences unsuited to the reader’s age off it.
• What your devices showed: each sentence, when, and your local time then; the keys you pressed on the device; your answers to offers of packs; and each time you started a pack again. This record is how the device learns what to show you. There is no profile apart from it. Your answers to offers, and whether you later took the pack, are also counted together with other readers’, without your name, to decide which packs are offered to readers of which.
• Your packs: which you own, how each came to you (bought, a gift, taken with a ticket, added as a free pack, or given by us), and when.
• Your tickets: each ticket your account received, its tier, why and when it came, the order it came from if it was bought or given as a gift, and the pack it was used on and when.
• Your orders: what you bought, the amount and currency, whether Stripe, Apple or Google took the payment and its reference there, the order’s status, the billing country the payment service reports, and a gift’s code. For each gift code, the account that bought it and the account that used it. An order also records how you reached this site before buying: the tags of the link you followed and the name of the site that sent you, if any, and when.
• Notifications: the token your phone gives the app so that we can notify it, and whether it is an iPhone or an Android phone; and each notification we write to you, from when it is written until it is sent and after.
• E-mails: each e-mail we write to you (receipts, gift codes, notices about your devices and your address, and announcements if you asked for them), with the address it goes to, from when it is written until it is sent and after. Sign-in codes are not kept among them.
• The address you leave to be told when the device is out, if you leave one: that address, the language of the page, when, and how you reached this site (the tags of the link you followed and the name of the site that sent you, if any). It is used for one message, when the device is on sale, and to give five more packs to a person who left it and then buys the device. It is used for nothing else. No account is created. To have it removed, write to [To fill: the contact e-mail address].

Your address and your country

We read the IP address of your connection to find the country it is in, using a table held on our own server. The lookup neither stores the address nor sends it anywhere. The country sets the currency of the prices you see, and, when a computer asks to be signed in, it is shown on your phone.

In your browser

• One cookie, which remembers the language you chose on this site for a year.
• Google Analytics, which counts visits to this site: two cookies, set by Google and kept up to two years, that tell one visitor from another.
• Once you sign in here, your session key, in this site’s browser storage, until you sign out or it expires.
• During a checkout, a note in the tab that it started on this site.
• How you reached this site: the tags of the link you followed, the name of the site that sent you, and when. It stays in the tab until you close it, and reaches us only with an order, or with the address you leave to be told when the device is out.
• If you choose the light or the dark theme, that choice, in this site’s browser storage.

No advertising runs on this site or in the app, and the app tracks nothing. This site counts its visits with Google Analytics, described above; how you reached the site is otherwise kept only on an order or beside such an address. Its typefaces are served by this site itself.

Who else receives it

• Stripe takes payments on its own page. It receives your e-mail address from us, and your payment details and billing address from you.
• Google Analytics counts visits to this site. It receives the pages you open, your browser and device type, the country and city your connection comes from, and how you reached the site, under Google’s own privacy policy.
• Apple takes payments in the iPhone app outside the United States, under Apple’s own privacy policy. It tells us the transaction and the country of the store.
• Google takes payments in the Android app, through Google Play, under Google’s own privacy policy. It tells us the purchase and the country of the store.
• Resend sends our e-mails. It receives your address and the content of each message.
• Expo delivers our notifications to your phone, through Apple or Google. It receives your phone’s notification token and the text of each notification.
• The sentences are written and checked with AI models reached through OpenRouter. Nothing about you is sent there: those requests carry subjects and sentences, never an account, a device or what anyone read.
• [To fill: where the servers, the database, stored files and server logs are hosted, by whom, and whether data leaves the European Economic Area].

How long

• Your account, devices, packs, tickets and what your devices showed: while your account exists. Unbinding a device deletes its settings; what it showed stays with your account.
• Sign-in codes: ten minutes. Computer sign-in requests: two minutes. Both are then cleared.
• Session records: until your account is deleted.
• E-mails and notifications: until your account is deleted.
• Orders: [To fill: how long orders are kept, which is the accounting period the seller’s country requires].
• Server logs: [To fill: how long server logs are kept].
• An address left to be told when the device is out: until you ask us to remove it, or until you delete an account that has that address.

Deleting your account

You delete your account from the app, under Account, with a code sent to your address. Everything below goes at once, together:

• your account, its sessions, and the computer sign-ins it approved;
• the e-mails and notifications we wrote to you, and your phone’s notification tokens;
• your devices and their settings;
• what your devices showed and the keys you pressed, your answers to offers, and the packs you started again;
• your packs, and your tickets, used or not, bought ones included.

Two records stay, with you taken off them:

• your orders, because a seller must keep its sales records;
• gift codes, without who bought or used them, so that a used code stays used.

Stripe and Apple keep their own records of your payments, under their own policies.

Your rights

You can change your name and e-mail address in the app, and delete your account there. You can turn announcements off at any time, in the app or, for e-mail, on your account page here. To see what we hold about you, to receive a copy, to correct it, or to object to a use of it, write to [To fill: the contact e-mail address]. You may also complain to the data protection authority of the country you live in.