Privacy policy

• Your email address, when you sign in. We use it to send sign-in links and codes, and to reply if you write to us. We don't send marketing email.
• Your account record: an account ID, when you signed up and last signed in, your language setting, and whether you have the full edition and when it ends.
• Stories you save, so your library works on every device.
• Purchase records: which plan you bought, when it renews, trials, cancellations and refunds. These come from Apple or RevenueCat. We don't receive card numbers.
• Technical data: IP address, browser or device type and app version, recorded in server logs and by the services listed below.
• Location, on iPhone only, if you allow it. The app uses it to show where you are on the map of Normandy sites. We don't send your location to our servers or store it.

We don't use advertising, ad tracking or analytics cookies, and we don't sell or share personal information for advertising. The website uses cookies to keep you signed in. When you check out on the web, RevenueCat and Stripe may set their own cookies for payment and fraud prevention.

• To sign you in and keep you signed in.
• To unlock the full edition you paid for, on every device where you sign in.
• To keep the service running and secure, and to fix problems.
• To answer you when you contact us.

If you're in the UK or EU: we rely on our contract with you for the first two, on our legitimate interest in a working, secure service for the third, and on your request for the fourth.

These companies handle data on our behalf. Most of them are in the United States, so your data may be processed there.

Supabase

Database, sign-in and file storage. Email address, account ID, sign-in times and IP addresses, subscription status, saved stories, language setting.

Resend

Delivers sign-in emails. Email address and the email we send you.

RevenueCat

Runs subscriptions on iPhone and the web, including web checkout. Account ID, purchase and renewal history, email and billing details you enter at web checkout, device and app version.

Apple

App Store payments. Apple handles App Store purchases under its own privacy policy. We never see your Apple ID or card.

Stripe

Card payments for web subscriptions, through RevenueCat. Card and billing details. We never see your full card number.

Vercel

Hosts the website. IP address, browser, and the pages you request, in server logs.

PostHog

Crash and error reports. When the app crashes or the website hits a server error: the error, the app version, device model and iOS version, or the page path. Tagged with a random install ID, never your account or email.

Mapbox

Draws the maps. IP address, device and browser details, and map usage. On iPhone, Mapbox may also receive your location if you let the app use it.

We also use OpenRouter (AI models), You.com (research search) and Speechify (narration) to write and narrate the stories. They receive historical source material and story text, never information about you.

• Your account, saved stories and subscription status: until you delete your account.
• Server and sign-in logs: a limited period set by our hosting providers, typically days to a few weeks.
• Database backups: deleted data leaves our backups within 30 days.
• Purchase records: Apple, RevenueCat and Stripe keep these as long as tax and accounting law requires.

Delete your account from the Library page on the website or in the iPhone app. We delete your email address, account record, saved stories and subscription status straight away.

Deleting your account does not cancel a subscription. Cancel it first: App Store subscriptions in iOS Settings → your name → Subscriptions, web subscriptions with the Manage subscription link in the Library. To ask RevenueCat to delete its purchase records too, email us.

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email support@worldwardiary.com from the address on your account and we'll reply within 30 days. Depending on where you live (for example California, the UK or the EU), you may have further rights, including the right to complain to your data protection authority. We won't treat you differently for using any of these rights.

War Diary is not meant for children under 13, and we don't knowingly collect their data. If you think a child has made an account, email us and we'll delete it.

If we change this policy, we'll update the date at the top. If a change affects how we use data you've already given us, we'll tell you before the change takes effect.

Email support@worldwardiary.com, or write to: