Privacy Policy

This describes what Word Vomit actually collects, why, and what you can do about it. It’s written to be accurate rather than exhaustive — if something here seems to leave a question unanswered, email mattfreitas415@gmail.com and ask directly.

What we collect

• Your email address, used only to sign you in.
• What you write, along with word counts, timestamps, tags, and whether you reached your goal that day.
• Preferences you set: timezone, when your writing day starts, your word goal, and an optional display name.
• Basic technical logs generated by our hosting providers (roughly: IP address and request timing) — standard for any website, not something we specifically collect or analyze ourselves.

We don’t run analytics or tracking scripts on this site. We don’t sell data, and we don’t read your entries for any purpose beyond making the app work — there is currently no feature that has an automated system read your writing, and if that ever changes, this page will say so before it happens.

Who it’s shared with

Two infrastructure providers, and no one else:

• Supabase— hosts the database and handles sign-in. Your entries live in a Supabase Postgres database, protected by row-level security so that even a bug in our application code can’t serve your data to another account.
• Vercel— hosts the application itself.

If we ever add a payment processor, it will be added here, by name, before it handles anything of yours.

How long we keep it

For as long as your account exists. Deleting a single entry removes it immediately. Deleting your account (Settings → Danger zone) removes everything — your profile, every entry, every backup snapshot — permanently and immediately, with no recovery window. There is no soft-delete.

Your rights

• Exporteverything you’ve written at any time, as Markdown or JSON, from Settings.
• Delete your account and all associated data at any time, from Settings.
• Correct or ask about anything we hold on you by emailing mattfreitas415@gmail.com.

Security

There are no passwords to steal — sign-in is by email link only. Access to your entries is enforced by row-level security policies in the database itself, not just application code, so a bug in a page can’t leak someone else’s writing.

Children

Word Vomit isn’t directed at children, and we don’t knowingly collect information from anyone under 13.

Changes to this policy

If this changes in a way that matters — a new sub-processor, a new use of your data — the date at the top will update and we’ll try to flag it prominently rather than let it be a quiet edit.

Contact

mattfreitas415@gmail.com— a real inbox, checked by a real person, because that’s currently the entire team.