Privacy policy

Last updated: September 16, 2026

This policy describes what data Inkwell collects when you read or write on the platform, and how it is used.

Accounts

To publish you create an account with an email address and password. Passwords are stored hashed. Your display name and bio are public.

Reading analytics

To show authors how their stories are performing, we record article views. Your IP address is hashed with a server secret before storage and is never stored in plain text. View logs are deduplicated per IP for 30 minutes and are purged after 90 days by a scheduled housekeeping job.

Token-protected articles

Access to private articles is controlled by tokens the author defines. Each access attempt is logged (hashed IP, timestamp, success or failure). Token access logs are purged after 90 days.

Comments

Comments are public once approved by the author. They are associated with your account (or your display name).

Attachments

Files you upload are stored on the server's file system. Attachments belonging to a deleted article are removed by the housekeeping job.

What we do not do

We do not sell personal data, do not run third-party advertising, and do not set tracking cookies beyond the session cookie Laravel requires.

Contact

Questions about this policy can be sent to the site administrator.