Last updated: 2026-10-02.
Account info: email, username, optional display name, optional bio, optional avatar, password (bcrypt-hashed, never stored in plain text), your settings, and the date you accepted our Terms.
Content: what you write and upload - stories, beats, characters, world elements, themes, scripts, manuscripts, files and images, forum posts, direct messages, reviews, and Hall of Fame entries.
Activity history: the pages you open and how long you spend on each (a short signal every 30 seconds while the tab is visible). We use it to understand how the product is used. It is tied to your account and to a browser cookie (see Cookies), which is how pages you viewed before signing up are joined to the account you create. We do not record it when your browser sends a privacy signal (see Do Not Track and Global Privacy Control below).
AI usage logs: for each AI request, the feature used, the model, token counts, cost, how long it took, and whether it succeeded. These logs do not contain the text of your prompts or of what the AI returned; the results you keep are saved with your work like anything else you write. We use the logs for cost tracking and to investigate problems.
Error logs: error messages, with the page address, your browser type, your account ID when you are signed in, and sometimes a short excerpt of the content involved in a failed request (for example, part of an AI response).
Request data: your IP address and browser user agent, used to rate-limit requests and prevent abuse.
Payment info: handled by Stripe. We store a Stripe customer ID; Stripe stores your card details. If you sell services on the Marketplace, Stripe Connect holds the identity and payout details it needs to pay you.
Run the Service: render pages, send notifications, deliver AI features, process payments, prevent abuse. Internal analytics on aggregate usage to decide what to build next. Customer support and bug investigation. To check the quality of our coverage feature, our staff may occasionally run it on a project internally, never on the work of a writer who has turned AI features off; the text of those test runs is deleted after 90 days and is never shared.
We do not:
Your work is private unless you share it. Other people see it when:
We set three cookies, all first-party:
We also keep a few preferences in your browser's local storage, such as your theme and which panels you collapsed. Cloudflare Turnstile, our bot check, runs on the sign-in, sign-up, waitlist, and password-reset pages (see below).
We use one measurement tool, scoped deliberately narrowly.
Plausible Analytics - privacy-friendly traffic stats (page views, referrers, campaign links) across the site. It sets no cookies and never follows you to other sites. We serve it from our own domain. To count unique visitors without cookies, our server passes your IP address and browser user agent to Plausible with each page view; Plausible does not store them. We strip one-time links (email confirmation, share links, password reset) of their secret token before any measurement data leaves our server.
We do not record sessions or use heat maps: nothing on One More Draft replays your clicks, scrolling, or typing.
Do Not Track and Global Privacy Control. We honor both. When your browser sends either signal, we do not load Plausible or send it any events about you, we do not record your activity history, and we do not set the sb_session or omd_attr cookies. An omd_attr cookie set before you turned the signal on is not copied to an account you create while it is on. We still keep what we need to run the Service and your account: the sign-in cookie, records of actions you take in your account (for example signing in, creating a project, or placing an order), request data for abuse prevention, and error logs.
We share your data only with the service providers we need to operate One More Draft: AI providers that turn your prompts into text, images, and audio; database and file-storage hosting; email; our application host; payments; error reporting; and two word-lookup services. We do not sell your data, and we share your content with these providers only as needed to deliver the feature you asked for.
Current sub-processors
The specific providers behind those categories today. We keep this list current; last updated 2026-10-02.
You can:
Active accounts: kept until you delete the account or the item.
Deleting your account: when you delete your account it is deactivated right away. You are signed out everywhere, including linked desktop apps; your profile, share links and packets stop working; collaborators lose access to your projects; and we stop sending you notifications and marketing email. We send you a confirmation email, and a reminder about a week before the date.
30 days to change your mind: for 30 days you can sign in and choose Restore my account, and everything comes back as it was.
Then it is permanently deleted: after 30 days we permanently delete everything you own: your stories, manuscripts, screenplays, scripts, uploaded files, generated images and audio, your profile, your activity history, and your email address, username and password. We also delete your customer record at our payment processor, Stripe.
What stays, shown as "Deleted writer": posts you made in shared spaces stay so other people's conversations aren't broken: forum posts, workshop reviews you wrote, Hall of Fame entries, prompt responses, Logline Arena and contest entries, and messages you sent to other people (they keep their copy). They show as "Deleted writer", with no name, profile link or picture.
Financial records: payment, membership, credit, voucher and Marketplace order and payout records are kept for accounting and legal reasons, with your name, email, notes and addresses removed. A ban record, if any, is kept to prevent ban evasion.
Email logs: emails we sent you may remain in our email provider's logs for a limited period.
AI usage logs: kept for cost reporting; they hold no prompt or response text. The text of internal quality-test runs is deleted after 90 days.
Activity history: kept while your account exists; deleted when your account is permanently deleted.
Error logs: deleted after 30 days on our side. Error reports sent to Sentry follow Sentry's retention.
IP addresses used for rate limiting: removed when the limit window ends, within one day.
Backups: we take a daily backup of the database and keep each one for 30 days, so deleted data can remain in a backup until that backup expires. Together with the 30-day restore period, a deleted account is fully gone within about 60 days of the request.
Passwords are bcrypt-hashed at rest. Sessions are random tokens with server-side validation. All traffic is HTTPS. We use parameterized queries everywhere (no SQL injection surface) and run a strict CSP. Vulnerability reports go to security@onemoredraft.com.
The Service is for writers 16 and older. It is not directed at children, and we don't knowingly collect personal information from anyone under 16 - or from anyone under 13 in the United States, where the Children's Online Privacy Protection Act (COPPA) applies. Creating an account requires confirming that you are 16 or older.
If we learn that an account belongs to someone under 16, we will suspend the account and delete the personal information associated with it. If you are a parent or guardian and believe your child has created an account, email privacy@onemoredraft.com and we will remove the account and its data.
The Service may be hosted in or transmit data through countries outside your country of residence. By using the Service, you consent to such transfer.
Material changes will be announced via in-app notice and email (if opted in) at least 30 days before they take effect, except where immediate change is required by law or to address a security incident.
Privacy questions: privacy@onemoredraft.com.
