Cookie Policy

1. What This Covers

Mythwrite is a trading name of Tian Digital Security Ltd.

• Registered company: Tian Digital Security Ltd
• Company number: 09278102
• Registered office: 3rd Floor, 86-90 Paul Street, London, EC2A 4NE

For this policy, “cookies” also includes similar technologies that store or read information on your device, such as local storage. Some of these technologies are strictly necessary for the service you request, while others would require consent if we introduced them.

2. Essential Authentication and Session Technologies

We use strictly necessary cookies and similar technologies to keep you signed in, maintain account security, and support core workspace functionality. In the current implementation this includes technologies such as:

• Refresh-token cookies used for account authentication and session continuity.
• CSRF cookies when CSRF protection is enabled in a given environment.
• Workspace-selection and similar browser storage used to preserve app state between page loads.

These technologies are required for login, session handling, and other core app functions.

3. Security and Infrastructure Cookies

Mythwrite is delivered behind Cloudflare and production access controls. Cloudflare may set strictly necessary cookies related to authentication, routing, bot protection, traffic management, and security controls. These are used to protect the service and are not deployed by us for advertising purposes.

4. Browser Storage for Preferences and Recovery

The app also uses browser storage for preferences and resilience features such as theme and accessibility settings, editor or proofing preferences, workflow preferences, offline queue state, and certain local draft/session recovery data. Depending on the feature, this data may remain on your device until you clear it.

If you use a shared device, remember that local browser storage may remain accessible to other people who use the same browser profile.

5. Billing and Stripe

If you start a checkout or customer-portal flow, you may be redirected to Stripe-controlled pages or services. Stripe may use its own cookies or similar technologies for payment, security, fraud prevention, and session management on those surfaces. Those technologies are governed by Stripe’s own notices and settings.

6. Analytics and Advertising Cookies

As of the date of this policy, we do not intentionally use non-essential advertising cookies on the core Mythwrite app. If we later introduce non-essential analytics, personalisation, or marketing cookies, we will update this policy and ask for consent where required by law before placing them.

We do use privacy-friendly product analytics (PostHog, hosted in the EU) to understand how people move through sign-up and the app. It is cookieless: it sets no cookies and writes nothing to your browser storage, so it does not need a consent banner. It does not track you across other websites, and it does not record your screen or your keystrokes. We collect page views at route level, product events such as creating a project or exporting a book, an internal account ID once you sign in, and which campaign or partner link (if any) you arrived from when you sign up. We never send your email address, name, project titles or manuscript text to analytics.

PostHog acts as our processor under a data processing agreement. Analytics data is kept for 12 months and then deleted.

You can opt out with the “Exclude me from analytics” switch in the settings menu (signed in), or with the control on our Privacy Policy page (signed out). We also honour your browser’s Global Privacy Control and Do Not Track signals. Choosing to opt out from the Privacy Policy page stores a single “off” preference in your browser’s local storage. That is a strictly necessary preference, because it only records your objection, and it is the only thing analytics ever stores on your device.

7. Managing Cookies and Browser Storage

You can control cookies and local storage through your browser settings. Clearing or blocking essential cookies or related storage may prevent login, billing, security protections, saved preferences, or recovery features from working correctly.

Contact

For cookie-related questions, contact [email protected]. See also our Privacy Policy.