Privacy Notice

Who we are

The data controller for sceneweaver.uk and the SceneWeaver application is Mike Lee, based in the United Kingdom.

For any privacy-related question — to exercise a right listed below, to report a concern, or to ask how something works — contact us at privacy@sceneweaver.uk.

What we collect, why, and on what basis

The categories of personal data we handle, where, and the lawful basis under UK GDPR Article 6:

Category	Where	Why	Lawful basis
IP address & HTTP request metadata (user-agent, referrer, requested URL, response status, timing)	Cloudflare edge logs while you browse sceneweaver.uk	Serving the page; rate-limiting, abuse protection, and operational diagnostics; troubleshooting failures.	Legitimate interests (UK GDPR Art. 6(1)(f)) — keeping the site available and secure.
IP address (transient)	Google Fonts CDN when your browser loads the typefaces this site uses (Playfair Display, Inter)	Necessary to deliver the font files to your browser. Google's servers see the request because we link to the fonts from their CDN rather than self-hosting them.	Legitimate interests (UK GDPR Art. 6(1)(f)) — site presentation. See International transfers below.
Bug-report content (in-app, opt-in only)	Sent only if you choose to enable bug reporting inside the app and explicitly submit a report. Includes the technical context of the failure (stack trace, app version, OS, the action that triggered it); does not include your manuscript content.	Diagnose and fix the reported defect.	Consent (UK GDPR Art. 6(1)(a)) — you opt in and may withdraw consent at any time by disabling bug reporting in the app's preferences.
Anonymous usage telemetry (in-app, opt-in only)	Sent only if you choose to enable anonymous telemetry inside the app. Includes which features are used and high-level performance figures; does not include any user-identifying information and does not include your manuscript content.	Understand which features are useful and which are quietly unused, so SceneWeaver can be improved.	Consent (UK GDPR Art. 6(1)(a)) — you opt in and may withdraw consent at any time by disabling telemetry in the app's preferences.

We do not set cookies from this site, run third-party analytics, embed tracking pixels, or use behavioural advertising. We do not maintain user accounts.

Your manuscript content

This deserves its own section because it's the load-bearing promise SceneWeaver is built on. The application never transmits the contents of your manuscripts to us, to Cloudflare, to Google, or to any other third party. That includes — and is not limited to — prose, chapter and scene titles, entity names (characters, items, locations, organisations), citations, annotations, comments, exports, and any text you have written. This commitment is unconditional and does not depend on which optional feedback channels you have enabled.

Sub-processors and third parties

The third parties we rely on, and what they do:

• Cloudflare, Inc. — hosts sceneweaver.uk via Cloudflare Pages and provides DNS, edge caching, and HTTPS termination. See Cloudflare's own privacy policy at cloudflare.com/privacypolicy.
• Google LLC — serves the web fonts used on this site (Playfair Display and Inter) via its public Fonts CDN. See Google's privacy policy at policies.google.com/privacy. (You can prevent this connection by blocking fonts.googleapis.com and fonts.gstatic.com in your browser; the site will fall back to system fonts.)

If we add any other processor in future — for example, an email-list provider for release notifications, or a backend for the opt-in telemetry — this notice will be updated to list it.

International transfers

Cloudflare and Google are both US-headquartered companies with global server networks. When a request is served from a server outside the UK or EEA, your IP address is transferred internationally. Both providers operate under the EU–US and UK–US Data Privacy Framework adequacy mechanism and offer their own Standard Contractual Clauses; see their respective privacy policies for the specifics.

How long we keep it

• Cloudflare edge logs: retained for the period defined by Cloudflare for the free Pages plan we use (typically a small number of days for raw logs, longer for aggregated counts). We do not export or store copies of these logs ourselves.
• Google Fonts request data: retained by Google according to its own policy; we never receive or store it.
• Bug reports (when enabled): kept only for as long as needed to investigate and resolve the issue, plus a short period afterwards to detect regressions. Routinely deleted thereafter.
• Telemetry (when enabled): kept in aggregated form to inform product decisions; raw records are short-lived.

Your rights under UK GDPR

You have the right to:

• Access the personal data we hold about you.
• Rectify data that is inaccurate or incomplete.
• Erase data we hold about you ("right to be forgotten"), subject to limited exceptions.
• Restrict or object to certain processing.
• Portability — receive a copy of your data in a machine-readable format.
• Withdraw consent at any time, where consent is the basis for processing (the in-app opt-in channels). Disabling them in the app stops further sending immediately.
• Complain to the UK Information Commissioner's Office (ico.org.uk) if you believe we have not handled your data lawfully.

To exercise any of these rights, contact us at the address in Who we are above. We aim to respond within one month, as required by UK GDPR Article 12.

Children

SceneWeaver is a writing tool intended for adults and is not directed at children under 13. We do not knowingly collect personal data from children.

Changes to this notice

We may update this notice as the app and the site evolve — for example, when the opt-in telemetry channel becomes available, or if we add a release-notification mailing list. The Effective from date below is updated on any material change, and significant changes will be flagged on this page for a reasonable period.

Effective from: 2026-05-31.