Privacy Policy

Last updated: October 23, 2026

This policy explains what information Draft Tally collects when you use drafttally.com and app.drafttally.com (the "Service"), why we collect it, who we share it with, and the choices you have. We keep the Service deliberately simple, and we try to collect as little as we can get away with.

Information you give us

Account details. Your email address, a password (stored only as a salted hash, never in plain text), and any display name or avatar you choose.
Writing data. The content you create in the app: project names and targets, writing sessions, word counts, session notes, goals, and the dates and times attached to them.
Messages. Anything you send us by email, such as a support request or bug report.

Information collected automatically

Session cookies. We use a cookie to keep you signed in. It is strictly necessary for the Service to work. We do not use advertising or cross-site tracking cookies.
Local storage. Your light or dark theme preference is stored in your browser and never sent to us.
Technical logs. Our hosting providers record standard request data such as IP address, browser user agent, requested URL, timestamp, and error traces. These logs exist for security, reliability, and debugging.

How we use your information

to create and maintain your account and sign you in;
to store your sessions and projects and render your dashboard, charts, goals, and streaks;
to send service messages such as password resets and important notices about the Service;
to answer support requests you send us;
to keep the Service secure, diagnose faults, and prevent abuse; and
to meet our legal obligations.

We do not sell your personal information, and we do not use your writing data to train machine learning models or show you advertising.

Legal bases (for users in the EEA and UK)

Where the GDPR applies, we rely on the performance of our contract with you to provide the Service, on our legitimate interests to keep the Service secure and working well, on your consent where we ask for it, and on legal obligation where the law requires us to retain or disclose information.

Who we share information with

We share data only with the service providers that make Draft Tally run, and only as much as they need:

Gadget — our application hosting and database platform, which stores your account and writing data.
Cloudflare — hosting, DNS, and content delivery for this marketing site, which processes technical request data.
Ko-fi — only if you choose to make a voluntary contribution. Payment details go to Ko-fi and its payment processors, not to us; we never see your card number.

We may also disclose information if we are legally required to, or where it is necessary to protect the rights, safety, or property of Draft Tally or its users. If the Service is ever transferred to new ownership, your data may transfer with it, and we would notify you first.

International transfers

Our providers operate servers in the United States and other countries, so your information may be processed outside the country where you live. Where required, these transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep it

We keep your account and writing data for as long as your account is active. If you delete your account, we delete your personal data from our live systems, generally within 30 days. Residual copies may persist in encrypted backups for a short period until those backups rotate out. Technical logs are kept for a limited period for security and debugging.

Security

Traffic to the Service is encrypted in transit with TLS, passwords are hashed, and access to production data is limited to what is needed to operate the Service. No system is perfectly secure, so we encourage you to use a strong, unique password and to keep your own copies of writing that matters to you.

Your rights and choices

You can view and edit your projects and sessions in the app at any time, and you can delete your account to remove your data. Depending on where you live, you may also have the right to request access to the personal data we hold about you, correct it, delete it, receive a portable copy, object to or restrict certain processing, and withdraw consent. California residents have rights under the CCPA, including the right to know and the right to delete; we do not sell or share personal information for cross-context behavioural advertising, and we will not discriminate against you for exercising your rights.

To make a request, email support@drafttally.com. We may need to verify your identity first, and we will respond within the time the applicable law allows. If you are in the EEA or UK and are unhappy with our response, you can complain to your local data protection authority.

Children

Draft Tally is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy as the Service evolves. We will revise the "Last updated" date above, and for material changes we will give additional notice through the app or by email.

Contact

Draft Tally is the data controller for the information described here. You can reach us at support@drafttally.com.

This policy is a starting point written to match how Draft Tally works today, not legal advice. Confirm the provider list, retention periods, and controller details before publishing, and have a lawyer review it if you serve users in regulated jurisdictions.