Privacy

Who is responsible

Milan Konor Nyist, Bosnyák utca C104, 1149 Budapest, Hungary, runs Quill and is the controller of your personal data, as the GDPR calls it. Write to hello@quill-app.dev about anything on this page.

What we keep, and why

Your account

Your email address and, if you use one, your password (stored only as a secure hash). If you sign in with Google, we receive your email address from Google and nothing else we use. This is what lets you sign in and what we answer you at. Why we may: it is needed for the service you signed up for.

Your books

Everything you write into Quill (your directions, your lines, the Codex) and everything Quill writes for you, with every take and rewind, because nothing in a book is ever deleted by a rewind. Why we may: it is the service itself.

Ink and payments

Your plan, your ink and a ledger of how it was spent. Payments are handled by Stripe: we keep your Stripe customer number and what you bought, never your card. For each purchase we also keep when you asked us to start straight away, the confirmation we emailed you, and, if you withdraw, the name and email you gave and what we refunded. Why we may: the service, and the law, which requires us to keep accounting records and to be able to show what you agreed to.

What each writing costs

For every call to the AI models, which model wrote it, how much text went in and out, and what it cost. This is how ink is priced and how we catch a fault before it costs anyone. Why we may: our legitimate interest in running Quill fairly and safely.

Your messages to us

What you send from Send feedback or by email, with your email address, so that we can answer. Why we may: our legitimate interest in hearing from, and answering, the people who use Quill.

Reports of a shared Codex

If you report a shared Codex, what you tell us, with your email and your name if you give it, and what we decided. We don't tell the person who shared it who you are. Why we may: the law, which requires us to handle reports of illegal content (the EU Digital Services Act).

Looking after your books

Your books are private, and we don't read them. We may look at an account's books when you ask us to help with one, or to look into a report or a serious breach of the terms, and only for that. Why we may: the service, and our legitimate interest in keeping Quill safe and lawful.

Technical records

Our hosting keeps short server logs (including IP addresses) to run and protect the site, and when the page hits an error it reports it to us with the page and the Quill version. Visits are counted by Vercel Web Analytics, which uses no cookies and does not identify you. When you sign in or make an account, Cloudflare Turnstile checks that you are a person, from your browser and your IP address. To stop anyone guessing passwords, we count recent attempts by address, kept only as a one-way hash. Why we may: our legitimate interest in a site that works and stays secure.

Who else handles it

A few companies run parts of Quill for us, under contract, and see only what their part needs:

• Supabase stores the database and handles sign-in, on servers in Ireland.
• Vercel hosts the site, which runs in Dublin.
• Anthropic runs the AI models that write your books. It receives what a page needs to be written (the Codex, the story so far, your direction), does not train its models on it, and deletes it within 30 days, unless it is flagged for breaking Anthropic's usage policy, which it may keep longer to review.
• Stripe takes payments. For your card and preventing fraud, Stripe is responsible under its own privacy policy.
• Resend sends Quill's emails.
• Google, only if you choose to sign in with Google.
• Cloudflare runs the domain, forwards mail sent to Quill's addresses, and checks that you are a person when you sign in (Turnstile).
• GitHub keeps an encrypted copy of the database every night, for 30 days, so nothing is lost if something breaks. Only we hold the key.

Some of these are based in the United States. Where your data leaves the European Economic Area, it is protected by the EU and US Data Privacy Framework or by the European Commission's standard contractual clauses. We don't sell your data, and we don't share it with anyone else unless the law requires us to.

How long we keep it

• Your account and your books: for as long as you have an account. When it is closed, they are deleted within 30 days, and leave our encrypted backups within 30 more.
• Reports of a shared Codex: two years after we decide, in case the decision is questioned.
• Payment and accounting records: for as long as tax law requires, which in Hungary is 8 years.
• Your messages to us: for as long as they are useful to answer you and improve Quill, and no longer than two years.
• Server logs: a few days to a few weeks, as our hosting keeps them.

Your rights

You can ask us for a copy of what we hold about you, and to correct it, delete it, limit how we use it, or send it to you in a form you can take elsewhere. You can object to what we do on the basis of our legitimate interest. Write to hello@quill-app.dev from the email of your account, and we answer within a month.

If you think we have got it wrong, you can complain to a data protection authority, or go to court. Ours is the Hungarian one, the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9-11, naih.hu. You can also go to the one where you live.

Cookies, and what your browser keeps

Quill sets only the cookies it needs to work, so there is no cookie banner:

• quill_at and quill_rt keep you signed in.
• quill_pkce and quill_next last a few minutes, while you sign in with Google.
• quill_last remembers the book you last opened, so the shelf can offer it first.

Your browser also keeps a few things for you alone: your light or dark choice, where you were in each book, your answers to the first questions, and a Forge in progress, so a refresh loses nothing.

Age, and changes

Quill is for people 18 and over, and we don't knowingly keep data about anyone younger. If this notice changes in a way that matters, we'll say so in Quill or by email, and the date at the top will change. The terms of use are the other half of this page.