Privacy
Privacy Policy
What we collect, why, and what we do with it. Last updated April 2026.
What we collect
When you create an account, we ask for your email address, a password, and a display name. We don't ask for your real name, mailing address, or anything else.
Once signed in, your account also stores the settings you set in the Preferences panel — site and reader theme, font size, line height, default catalog layout, and which notifications you want to receive. These follow you across devices when you're signed in. Sign out and the settings stay on your account but are no longer applied to the browser.
When you make a purchase, our payment processor (Stripe) collects your card information directly. We never see or store it. What we do receive from Stripe is a confirmation that the charge succeeded, plus the last four digits of the card and the brand for receipts.
Server logs include the IP address that made each request, the URL, the timestamp, and basic browser information. We use these to operate and protect the service. They are not sold, shared, or used for advertising.
What we don't collect
- No third-party analytics or tracking. No Google Analytics, no Facebook pixel, no nothing.
- No advertising cookies.
- No data brokers, ever.
Cookies and local storage
We use one cookie: a session cookie that keeps you logged in. It expires when you log out or after 30 days of inactivity. That's the entirety of our cookie usage.
Your browser may remember a small set of display preferences (catalog layout, theme) in localStorage so the page renders correctly on first paint before your account preferences load. When you're signed in, the authoritative copy of those preferences lives on your account and follows you across devices.
We send transactional emails (account verification, password reset, receipt) via Postmark. We also send opt-in notification emails — new books, series updates, first-reader invitations, admin alerts — that you control from the Preferences panel of your account. Every notification email includes a one-click link back to those preferences. We don't sell or share your email address; we don't run drip campaigns or marketing sequences.
Sharing
We share data only with the providers needed to run the service: Stripe (payments), Postmark (email), and our hosting provider. None of them receives anything beyond what they need to do their specific job.
Your rights
You can: see what we have on you (email info@pwwritings.com), export your account data, delete your account. Account deletion removes your personal information; we keep order records for tax and accounting reasons (this is legally required in most jurisdictions) but with your name and email replaced by anonymous identifiers.
Children
The service is not directed at people under 16. If you believe a child has created an account, contact us and we'll delete it.
Security
Passwords are hashed with Argon2id; we cannot recover them, only reset them. The site runs on HTTPS only. If we ever discover a security issue affecting your data, we'll tell you within 72 hours of confirming it.
Changes
Material changes to this policy will be announced via email to active account-holders. The "Last updated" line at the top of the page will always be current.