Privacy
What we keep, what we log, and how to get rid of it.
Second Draft collects an email address and the work you choose to save. There is no advertising, no analytics script, no session recording and no data broker at the end of it. This page lists every place a fact about you lands, in the order you would want to read it, and it is written to match the code rather than to sound reassuring.
The short version
You can read the whole site, use the free tools and copy the free prompts without giving us anything at all. If you make an account, we keep your email address and your subscription state, plus whatever you save. If you ask the assistant a question, we keep the question with names, phone numbers and email addresses removed, and nothing that ties it to you. Your account page has a button to download everything we hold and a button to delete it.
What we keep, and why
| Your email address | So you can sign in, so your receipt can reach you, and so we can answer you. It is the only identifier we ask for. |
|---|---|
| Your subscription state | Whether it is active, the renewal date, and whether it is cancelled or paused. It comes from Polar; we keep a copy so the library knows whether to open, and it is what the account page shows you. |
| What you save | Saved prompts and kits, collections, notes you write on an item, the minutes you log, and the business details you enter on Your details. All optional: delete the account and it goes. |
| A sign-in record | When you sign in we store a one-way hash of the session token, the browser's own user-agent string, and a hash of your IP address. The raw IP address is never stored. This is what lets you stay signed in and what lets us spot a session being used from somewhere else. |
What we log, and why
This is the part most privacy pages leave out. Every row below exists for a stated reason, and every one is visible to us if we look; none of it is sold, shared for advertising, or combined with anything else.
| Sign-in attempts | The fact that a sign-in link was sent or not sent, and when. No IP address, no device. It is how we answer “I never got the email”. |
|---|---|
| Account actions | A short line for things that happen to an account: signed in, signed out, subscription started, cancellation requested, pause requested, data exported, data deleted, saved work imported. It exists so a mistake — ours or anyone's — can be reconstructed. It holds no content. |
| Questions to the assistant | The question as you typed it, with email addresses, phone numbers and long digit strings replaced before it is stored, and no account, no session and no IP address attached. We keep it to see which jobs the library is missing, which is the only way the library improves in the right order. |
| Thumbs up and down | The vote, an optional note, and the same cleaned-up question. No name and no email. |
| A daily write counter | A number per day, with nothing in it about you. It stops a busy day from exhausting the database allowance and taking the site down. |
| Payment events | The kind of event Polar sent and when — not the amount, not the card, not the address. Duplicate events are ignored using it. |
There is no third-party analytics script on this site, no advertising pixel, no heat map and no session recording. We do not know which pages you read, how long you stayed or what you clicked, beyond the server logs our host keeps.
What we do not keep
- No passwords. There are none to leak: signing in is a single-use link sent to your email, valid for 20 minutes.
- No card or bank details. They are entered on Polar's checkout and never reach this site.
- No customer or staff details, in practice. The free tools run inside your browser: the review text, the quotes and the figures never leave your device. The tools page says so on every tool, and it is true — those pages make no network request with what you type.
- No raw IP addresses in the database, and no location data.
- No profile of your browsing, and nothing bought from a data broker.
Who else touches your data
Four companies, each doing one job. They are listed because “we may share your data with partners” is not an answer.
| Polar | Checkout, payment, sales tax, receipts, refunds and the customer portal. Polar is the merchant of record, so it is the seller on your receipt. It receives your email address and payment details; we receive the subscription state and never the card. |
|---|---|
| Resend | Delivers the sign-in email. It receives the address and the message, and nothing else. |
| Cloudflare | Hosts the site and the database. Like any host it processes the requests that reach it. |
| Google Fonts | The typefaces load from Google's servers, which means Google sees the request and the IP address it came from. It is the only third-party request a page makes. |
Cookies and what sits in your browser
There is one cookie: a sign-in cookie that holds a session token, set only when you sign in, and removed when you sign out or it expires. It is not used for advertising and there is no consent banner because there is nothing to consent to.
Your browser also stores a few things locally, which never leave the device unless you sign in: the prompts and kits you save while signed out, your quiz answers, your business details from Your details, and a flag for whether this browser has been shown the “moved to your account” message. Clearing site data in your browser removes all of it.
How long we keep it
- Sign-in links expire in 20 minutes and stop working once used.
- Sessions expire; signing out deletes the row.
- The checkout record that signs you in when you come back from Polar is ignored after a day.
- Account data stays until you delete the account. Cancelling a subscription does not delete it, because your saved work is still yours to come back to.
- Assistant questions and votes carry no identifier, so they cannot be traced back to you and are kept as a record of what the library was missing.
Your choices
- Download everything from your account page: email, subscription, saved work, profile and the account actions we logged, as a JSON file.
- Delete everything. The same page deletes the account, the sessions, the subscription record, every saved item, collection, note, logged minute and profile entry. The deletion happens immediately.
- Ask a question about any of this by email, including “what do you hold about me”, and you get an answer within one business day.
- Complain. If the answer is not good enough you can complain to the data protection authority where you live. We would rather you told us first.
If something goes wrong
If we ever discover that data has been exposed, we will tell the people affected and the relevant authority, in plain words, describing what was exposed and what we changed. We will not wait for a legal deadline to decide whether to mention it.
Who is responsible
Second Draft is run by Brenn Cornec, an individual business based in Mariposa, California, United States. That person is responsible for the data described on this page, decides why it is kept and how long for, and is who you contact about it. If you are outside the United States, the data reaches this business in the United States and is handled there.
Changes to this page
When this page changes, the change is listed on What changed and the date below moves. The version in force when you paid is the one that applies to that payment.
Last updated 26 October 2026. Questions and requests: hello@seconddraft.dev. Related: the terms, the refund policy, the subscription.