Privacy Policy

Last updated: July 9, 2026

witchlog ("we", "us", accessible at witchlog.com) is an emotional wellness journal. Your trust matters deeply to us — especially because the content you share here is personal. This policy explains what we collect, why, and the choices you have.

1. Data we collect

• Account data: email address, optional nickname, and a salted hash of your password (we never store your password itself).
• Conversation & diary content: messages you write in guided journaling conversations and the diary entries generated from them.
• Wellness markers: optional sleep-status tags you choose to log.
• Billing data: subscription status and order records. Card details are processed entirely by our payment provider, Paddle; we never see or store your card number.
• Technical data: basic request logs (IP, user agent) kept briefly for security and abuse prevention.

2. How your sensitive content is protected

Conversation messages and diary summaries are encrypted at rest with AES-256-GCM before being written to our database. All traffic is encrypted in transit with TLS. Access to production systems is limited to the operators of this service.

3. How we use your data

• To provide the service: generating guided journaling replies, creating your automatic emotion diary, and showing your trends.
• To process your messages, we send conversation text to our AI model providers (e.g. DeepSeek) strictly to generate a response. We do not sell your data, and we do not use your conversations to train models.
• To manage your subscription and comply with tax and accounting law.

4. What we never do

• We never sell or rent your personal data.
• We never show advertising based on your emotional content.
• We never share your diary or conversations with third parties except the AI processing described above or where required by law.

5. Your rights (GDPR & equivalent laws)

You may request access to, correction of, export of, or deletion of your personal data at any time by emailing support@witchlog.com. Account deletion permanently removes your conversations, diary entries, and personal data within 30 days.

6. Data retention

Your content is retained while your account is active so your diary and history remain available to you. Order records are retained as required by tax law. Security logs are retained for up to 90 days.

7. Not a medical service

witchlog is a self-reflection and wellness tool. It is not a medical device, does not provide medical or psychological diagnosis or treatment, and is not a substitute for professional care. If you are in crisis, please contact your local emergency number or a crisis hotline immediately.

8. Cookies and local storage

witchlog does not use advertising or analytics cookies, and does not track you across the web — which is why you will not see a cookie consent banner here. We use your browser's local storage solely to keep you signed in (a strictly necessary function). When you open the payment checkout, our payment provider Paddle may set cookies that are strictly necessary for processing the transaction and preventing fraud.

9. Children

witchlog is not directed at children under 16, and we do not knowingly collect their data.

10. Changes

We will post any material changes to this policy on this page and update the date above. Continued use after changes constitutes acceptance.

11. Contact

Data controller: witchlog.com. Questions and privacy requests: support@witchlog.com.