Privacy Policy
Last updated: September 29, 2026.
Controller
Torben David Bergner, c/o MDC#schaffzeit, Welserstraße 3, 87463 Dietmannsried, Germany. info@climbwriter.com.
Writing in your browser
Daily drafts, net word counts, your word goal, display preferences, and local recovery points are stored in this browser for writing, autosave, and recovery. Statistics are calculated from the words currently present in your daily drafts; deleting text reduces the corresponding word count. Focus mode only changes the display. You can write and download full backups without an account.
Guest statistics
While you write without an account, ClimbWriter sends the current word count of today's draft to Supabase at intervals. No draft text, email address or advertising identifier is sent in these reports. The server uses the request's IP address and browser user agent to create a protected identifier that changes each Berlin calendar day. It stores that identifier, the latest reported word count, and first and latest report times, so we can estimate daily guest activity and writing totals. Shared networks or browsers can make these estimates imperfect. The IP address and browser user agent are not stored in the guest statistics table, although ordinary technical request logs may contain them. Guest statistics do not require a tracking cookie or a separate browser identifier. We process these limited statistics under Article 6(1)(f) GDPR to understand use of the writing service. You may object to this processing by contacting us at the address above.
Optional account and cloud copy
If you sign in, Supabase processes your email address and authentication data. ClimbWriter stores your daily drafts, word counts, daily goals, update times, and any optional profile picture, original image and crop settings in a separate Supabase project in the EU Central region. Your account can access only its own writing records. The website keeps your sign-in session in browser storage so you remain signed in. A cloud copy that differs from your browser draft is not automatically replaced; you can review it in the account panel. You can sign out without deleting your browser drafts.
Account emails
Supabase sends sign-in links, account confirmation and password recovery emails through Resend. Resend processes the recipient email address, email content and delivery information to deliver these requested account messages. This processing is necessary to provide account access under Article 6(1)(b) GDPR. Resend may process data internationally; its Data Processing Addendum describes the applicable transfer safeguards. Writing drafts are not included in account emails.
Optional public progress
If you create a public handle and choose to share progress, your handle and word counts appear in community rankings. Your draft text is never shown there. You can turn sharing off in your account. “Words together” totals only the word counts of writers who opted in.
Backups
You can download a JSON backup of all locally stored ClimbWriter drafts and recovery points. Import skips dates that already exist in this browser; it does not overwrite existing drafts. Downloaded files are under your control. Clearing browser data or changing the site address can remove access to local writing; keep a downloaded backup outside your browser.
Payments and free trials
When you choose a paid plan, Stripe handles checkout, payment details, subscription management, invoices and billing emails. ClimbWriter stores Stripe customer and subscription identifiers, subscription status, trial start and end dates, and the paid access period in Supabase to provide Plus. Your account keeps a trial-use record so the free trial is available once. Draft text is not sent to Stripe, and ClimbWriter does not store full card details. Payment processing is based on Article 6(1)(b) GDPR; legally required accounting records are retained under Article 6(1)(c) GDPR. Stripe may process information internationally as described in its Privacy Policy.
Cancellation notices
The cancellation form records your name, account email, optional contract reference, cancellation type, reason and requested end date, together with the notice's receipt time. The notice is stored in Supabase and a receipt is sent through Hostinger email to you and info@climbwriter.com for processing. This is necessary to handle your contract and document your notice under Articles 6(1)(b) and 6(1)(c) GDPR. Notices are retained for the applicable legal recordkeeping and limitation periods; they are not published or used for advertising.
Hosting
This site is hosted by Hostinger. Its servers process technical request data, including your IP address, browser information, requested page, and request time, to deliver and secure the site. Hostinger records access logs; see Hostinger's privacy policy for more information.
Providers and international processing
Hostinger provides website hosting, and Supabase provides the optional account and database service. Supabase Pte. Ltd. and its subprocessors may process service or support data outside the European Economic Area even when the project database is hosted in the EU. Supabase's Data Processing Addendum describes transfer safeguards, including applicable Standard Contractual Clauses, and links to its subprocessor list.
Contact and optional bug reports
If you email us, we use the information you send to respond and keep it only as long as necessary or legally required. Bug reports are sent only after you agree in the form. Your description, optional title, reproduction steps and contact email, together with the page path, browser information and viewport size, are sent through our shared Supabase support service, also used by NovelSprint, to Linear. Writing drafts, authentication tokens and URL query parameters are not automatically attached. Please do not include private drafts or sign-in links yourself.
Bug-report processing is based on your consent under Article 6(1)(a) GDPR. You can withdraw consent by contacting us, without affecting earlier lawful processing. Reports are kept as long as necessary to investigate and resolve the issue, or as legally required. A hashed network identifier is used to limit abusive submissions; rate-limit records are retained for up to seven days. Linear may process support data internationally as described in its Privacy Policy.
Retention and deletion
Browser drafts and preferences remain until you clear the corresponding browser storage or replace them yourself. Local recovery history keeps up to 20 versions. Downloaded backups remain until you delete the files. Cloud writing and profile data are kept while your account is in use, unless you request deletion. Signing out does not delete local or cloud writing. To request account deletion or a copy of your cloud records, contact the controller above; you can also export your account data or delete your account in Account. Deletion requires a recent sign-in and confirmation, and any subscription must have ended first. The sole admin account is protected from self-deletion. Technical logs and provider backup copies follow the respective provider's retention settings. Data needed to meet a legal obligation or resolve a legal claim may be retained for that purpose.
Cookies and analytics
ClimbWriter does not use third-party analytics or advertising tracking scripts and does not set tracking cookies. Limited first-party guest statistics are described above. Fonts are served with the website. Browser storage holds drafts, recovery points, preferences and, if you sign in, your authentication session.
Advertising on X
We may advertise ClimbWriter on X. This website does not currently embed an X Pixel or send registration or writing events to X for advertising measurement. Clicking an advertisement takes you to the site; ordinary hosting request logs may include the referring page and URL parameters. X processes activity on its own platform under its Privacy Policy.
Legal bases
Account authentication, private cloud copies, and requested writing features are processed under Article 6(1)(b) GDPR. Technical hosting and security are based on Article 6(1)(f) GDPR, reflecting our legitimate interest in delivering and protecting the service. Optional public sharing is based on your consent under Article 6(1)(a) GDPR. You can withdraw it at any time by switching sharing off, without affecting earlier lawful processing. Contact requests are handled under Article 6(1)(b) GDPR when they concern the service or a potential contract, and otherwise under Article 6(1)(f) GDPR to respond to correspondence. Necessary browser storage supports the features you request under § 25(2)(2) TDDDG.
Your choices and rights
You can write without an account. An email address is required only for account access; without it, cloud features are unavailable. Public sharing is optional. We do not make automated decisions producing legal or similarly significant effects about you.
Subject to the conditions in the GDPR, you may request access, correction, deletion, restriction, or portability of personal data. You may object to processing based on legitimate interests and withdraw consent at any time. Contact us using the address above. You may also complain to a supervisory authority, including the Bavarian State Office for Data Protection Supervision (BayLDA), or the authority where you live or work.