Privacy Policy
Last updated: May 4, 2026
Authorly is a free toolkit for indie authors. We collect as little data as possible. This page explains exactly what we do and don't collect, in plain English.
What we collect when you use any of the tools
- Whatever text you paste into the tool's form (book description, plot details, author facts, or seed keyword)
- Your selected genre (if any)
- A SHA-256 hash of your IP address (for rate limiting only — the raw IP is never stored)
What we collect when you just visit the site
Standard HTTP server logs (IP address, browser type, page visited, timestamp). These are kept by Cloudflare, our hosting provider, in line with their standard logging practices. We do not run separate analytics on top of this.
What we don't collect: We do not use cookies. We do not run advertising trackers. We have no user accounts. We do not fingerprint your browser. We do not sell your data.
What happens to your input
Whatever you paste into a tool — book description, plot details, author facts, or seed keyword — is sent to Anthropic (the company that makes the Claude AI we use) so it can generate the output. Anthropic processes this data under their privacy policy. As of this writing, Anthropic does not train their models on API data by default, and retains prompts for up to 30 days for abuse monitoring before deletion.
We do not store your input on our servers after the request completes. It exists in memory only long enough to be passed to Anthropic and the response returned to you.
What happens to your IP address
Your IP is hashed (SHA-256, truncated to 64 bits) and used to enforce the 5-runs-per-tool-per-day free limit. The hash is stored in Cloudflare KV (a fast key-value store) tied to today's date, and is automatically deleted after 48 hours. The raw IP is never written to KV. We never see or use it for any other purpose.
Pro-tier waitlist email
If you submit your email through the "Pro tier" waitlist on the homepage, we store it in Cloudflare KV so we can email you once when the Pro tier launches. We don't share it, don't add it to any other list, and don't send anything else from it. To remove yourself before launch, email with the subject "remove me."
Third parties we rely on
- Cloudflare — hosting, CDN, DDoS protection, rate-limiting storage. Standard server logs apply.
- Anthropic — the AI that generates the tool output. Receives your input.
- Google Fonts — serves the Fraunces typeface this site uses. Google may log requests for the font files; we have no control over that and don't receive any data from it.
Your rights (GDPR, UK GDPR, CCPA)
If you're in the EU, EEA, UK, or California, you have rights including the right to access, correct, delete, or port your data, and the right to object to processing. Since we don't store your input and your hashed IP is auto-deleted after 48 hours, in practice there's very little to export or delete. If you want to be sure nothing is retained, or if you have any other privacy question, email .
Children
Authorly is intended for adult authors. We don't knowingly collect data from anyone under 16.
Changes to this policy
We may update this policy as the service grows (for example, when we add a paid tier with accounts). The "last updated" date at the top will reflect any changes. Continuing to use the service after changes means you accept the updated policy.