Privacy Policy

Product: CosmicWriter desktop software
Developer / Data Controller: Mark Cox / Cosmic Horizons
Contact: [email protected]

1. What Data We Collect

At Purchase (via Gumroad)

• Email address — collected by Gumroad to process payment and deliver your license key. We receive your email solely to send the license key email. We do not add you to a marketing list without your consent.
  Legal basis (GDPR): Performance of a contract.

During Software Use

• License key — stored locally on your machine in ~/.cosmicwriter/license.json and sent to our license server to verify validity and enforce seat limits.
  Legal basis (GDPR): Performance of a contract.
• Machine ID — a one-way SHA-256 hash of your computer's hostname. This is not personally identifiable and cannot be reversed. It is used only to track which machines a license key is activated on.
  Legal basis (GDPR): Legitimate interests (license abuse prevention).
• License activation records — machine ID, activation date, and last-seen date are stored on our license server to enforce the 2-machine seat limit.
  Legal basis (GDPR): Performance of a contract.

Optional Telemetry (Opt-In Only)

If you choose to enable anonymous usage data in Settings → License, we collect:

• CosmicWriter version number
• Event type (e.g. "pipeline_run")
• Article topic / slug (metadata only — not the article text or its contents)

Telemetry is disabled by default. You can enable or disable it at any time in Settings → License. We use this data only to improve the software.
Legal basis (GDPR): Consent (freely given, withdrawable at any time).

2. What We Do Not Collect

• We do not collect the content of your articles.
• We do not collect your WordPress credentials.
• We do not collect your AI provider API keys.
• We do not sell or share your personal data with third parties for advertising or any commercial purpose.

3. Where Data Is Stored

• Local machine: ~/.cosmicwriter/license.json — license key, activation cache, telemetry preference.
• License server: Hosted on Railway.app (United States). Stores license records, activation records, and optional telemetry. Data is in a SQLite database accessible only to the developer.

International Data Transfers

If you are located in the European Economic Area (EEA), your personal data (machine ID and activation records) is transferred to and stored in the United States on Railway.app infrastructure. Railway.app maintains appropriate safeguards for such transfers, including Standard Contractual Clauses where applicable. By using CosmicWriter you acknowledge this transfer. You may contact us at [email protected] to request information about the safeguards in place.

4. Data Retention

License and activation records are kept for the lifetime of the license. Telemetry data is retained for up to 90 days. You may request deletion at any time by emailing [email protected].

5. Your Rights (GDPR / CCPA)

If you are located in the European Union, EEA, or California, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Data portability — receive your data in a structured, machine-readable format (GDPR Art. 20)
• Restrict processing — ask us to limit how we use your data (GDPR Art. 18)
• Object to processing based on legitimate interests (GDPR Art. 21)
• Withdraw consent for telemetry at any time (Settings → License → uncheck the telemetry box)
• Lodge a complaint with your local data protection authority (EU) or the California Privacy Protection Agency (CA)

To exercise any of these rights, email [email protected]. We will respond within 30 days.

6. Third-Party Services

CosmicWriter connects to AI providers (e.g. DeepSeek, Gemini), image providers (e.g. Pexels, NASA), and your own WordPress site. Data sent to those services is governed by their own privacy policies. We do not control and are not responsible for their data practices.

7. Children

CosmicWriter is not directed at children under 13. We do not knowingly collect data from children.

8. Changes to This Policy

We may update this policy from time to time. We will update the effective date at the top of this page. EU/EEA users will be notified of material changes by email before they take effect. Continued use of CosmicWriter after changes constitutes acceptance.

9. Contact

Privacy questions? Email [email protected].