Privacy policy
MythScribe is built to need as little of your data as possible. The short version: the desktop app keeps your writing on your own computer, AI features are off until you turn them on, requests made with your own API key go directly to the provider without passing through us, and this website has no analytics. The rest of this page spells that out.
Who we are
MythScribe is made and operated by Matthew Webecke, operating as MythScribe (“we”, “us”). You can reach us at hello@mythscribe.app.
The desktop app
A MythScribe project is a folder on your disk containing a database file and an assets directory. Your manuscript, notes, tags, settings, and AI usage records are stored there and nowhere else. The app does not require an account, does not sync your project anywhere, and works offline.
Diagnostics are off when you install, and nothing is recorded until you turn them on in Settings under Diagnostics. With them on, the app sends us two things: crash reports — the kind of error, its message with every quoted phrase, file path, web address, and email address removed, and the stack lines inside MythScribe itself — and counts of a fixed list of actions, such as how many times the app started, a project was opened, an export ran, or an AI feature made a request on a given day. A report also says which MythScribe version, Electron version, operating system, and processor type it came from. It never carries your manuscript, notes, or any other text you wrote, the name of a project, folder, or document, any path on your machine, your account, your email address, or your API key. There is no install identifier and nothing else that ties two reports together, we do not store your IP address, and we keep only the totals, so a report cannot be traced back to you. Turning diagnostics off again deletes whatever was waiting to be sent.
AI features are off when you install. They are controlled by one setting (Use AI), plus a toggle per feature, and each feature lists exactly what it sends before you can enable it. The AI settings page reproduces that list. With AI off, nothing leaves your machine.
The installed app checks for a new version shortly after it starts and every few hours while it runs. The check is a request to GitHub, where the releases are published; it carries the app's version and, like any web request, your IP address, which GitHub handles under its own privacy statement. It contains nothing about you, your account, or your writing, and we do not receive it. You can turn the automatic check off in Settings under Updates and check by hand instead. An update is downloaded in the background and installed only when you restart or quit the app.
Using your own API key
If you enter an API key for an AI provider (OpenRouter is the default; OpenAI also works, and a local model on your own computer needs no key at all), the app stores it only in your operating system's keychain: the Windows Data Protection API, the macOS Keychain, or the Linux secret service. On a Linux machine without a keyring, the app refuses to save the key and tells you how to set one up, rather than store it in plain text.
When an AI feature runs, the app sends the request straight from your computer to the provider. We are not in that path: we never receive your key, your text, or the provider's answer. What the provider does with the request is governed by its own terms and privacy policy (for OpenRouter, openrouter.ai/privacy and the policies of the model hosts it routes to; for OpenAI, the API data-usage policy at openai.com/policies). You pay the provider directly for what you use. The app records each request's model, token counts, and cost in your project so you can see your spend; those records stay on your machine.
MythScribe Cloud (not yet available)
A MythScribe account exists now, ahead of the service it is for. It is optional: the app never asks you to sign in, and nothing in it — writing, your projects, your own API key — needs an account. If you do sign in, you give us your email address, and we store that address and a sign-in session (a random token and its expiry, held as a hash) on our servers at Cloudflare. On your computer, the session is kept only in your operating system's keychain, and the app trades it for short-lived access tokens (15 minutes, held in memory) for each call. The sign-in emails themselves are sent through Resend, a sub-processor; they carry the sign-in link and nothing else. Signing out revokes the session, and you can ask us to delete the account and its address at any time. No manuscript text is involved at any point.
Cloud AI itself — a prepaid balance in US dollars for writers who do not want to manage an API key — does not exist yet. When it launches, this policy will be updated first, and it will work like this:
- Your account gains a balance ledger beside the email address it already holds: each top-up, refund, and AI request, and for a request only the feature, the model, the token counts, the cost, the status, and when it ran.
- AI requests go from the app through our proxy to the model gateway. The proxy checks your session and balance, reserves the request's maximum cost, passes it on, and charges what it actually cost. Your manuscript, your notes, your questions, and the answers are never stored or logged by the proxy.
- Sub-processors will be Cloudflare (hosting), Resend (sign-in email), Lemon Squeezy (billing), and OpenRouter (the model gateway) with the model host it routes to. Your writing is not used to train models by us; the gateway's and the host's API terms govern their own handling.
- You will be able to export or delete your account data by emailing us.
Payments
Paid products (MythScribe Cloud balance packs and a one-time Supporter license, neither available yet) will be sold through Lemon Squeezy as merchant of record. Lemon Squeezy collects your payment details, issues invoices, and handles sales tax; we never see your card number. Their handling of your data is described in their privacy policy. Refunds follow the terms of service and Lemon Squeezy's refund process.
If you buy the Supporter license, we record against your account that it was bought (the order number, when, and whether it was refunded). The app then asks our servers, about once a day while you are signed in, for a signed confirmation and keeps it on your machine, so the extras keep working for two weeks without a connection. That check carries your sign-in session and nothing else.
This website
mythscribe.app is a static site served by Cloudflare. It sets no cookies, loads nothing from third parties, and runs no analytics, not even Cloudflare's. Cloudflare keeps short-lived server logs (IP address, user agent, requested page) to operate and protect the service, under Cloudflare's own privacy policy.
Email sent to hello@mythscribe.app is forwarded by Cloudflare Email Routing to the operator's mailbox. We keep correspondence only as long as needed to answer you.
Children
MythScribe is not directed at children under 13, and we do not knowingly collect data from them. The Cloud service, when it launches, will require you to be at least 16, or older where your local law requires it, to create an account.
Your rights
For the desktop app there is nothing for us to hand over or delete: your data is on your computer, and deleting a project folder deletes everything in it. If you have written to us or, later, hold a Cloud account, you can ask us at any time to show you what we hold, correct it, or delete it. Email hello@mythscribe.app.
Changes to this policy
When this policy changes, the new version is posted here with an updated date at the top. Changes that affect what the app sends are also reflected in the app's own data-sharing table, which this site's AI settings page mirrors.
Contact
Questions about this policy: hello@mythscribe.app.