Privacy Notice

WriteLogs turns your coding activity into daily summaries. This notice explains what we collect, why, and your choices. Contact: i.aliyu019@gmail.com.

• Account data — your name, email address, and a hashed password. We never store passwords in plain text.
• Coding activity metadata — sent by the VS Code extension: file paths, programming language, branch names, commit hashes and messages, lines added/removed, timing (when and for how long you worked), and whether a change was written by you or an AI coding tool. Depending on your extension settings this can include limited code context used to improve summary accuracy.
• Billing data — payments are processed by Paddle, our merchant of record. We receive your plan and subscription status; we never see or store full card details.
• Technical data — standard server logs (IP address, request metadata) kept for security and debugging.
• Cookies and local storage — used to keep you signed in and remember preferences (like theme). No third-party advertising cookies.

The extension checks every file on your machine, before anything is sent:

• Sensitive files are never tracked at all — not even their names. That includes .env files (and variants like .env.local), SSH and private keys, certificates (.pem, .key, .p12 and similar), credential and secrets files, and anything inside .aws/ or .ssh/.
• Secret-looking lines are redacted on your machine — any captured code context is scrubbed for API keys, passwords, tokens, and private-key blocks before it leaves your computer.
• Your project API keys are stored in your operating system's keychain, not in plain files.

• To run the Service: store your activity, show your dashboard.
• To generate summaries: your activity data is processed by an AI model acting as our data processor.
• To handle billing, enforce plan limits, and prevent abuse.
• To send transactional email (verification codes, receipts).

We don't sell your data or use it for advertising.

Only service providers that help us run WriteLogs: cloud hosting and database providers, Paddle (payments), our AI model provider (summary generation), and our email delivery provider. Each processes data only on our instructions.

We keep your data while your account exists. Deleting a project removes it from your view immediately; revoked API keys stop working the moment you revoke them. To delete your account and its data entirely, email us and we'll complete it within 30 days.

Data is encrypted in transit, passwords are hashed, and API keys are scoped per project and revocable at any time.

You can access, correct, export, or delete your data. Email i.aliyu019@gmail.com and we'll help. Depending on where you live you may also have rights under laws such as the GDPR, including the right to complain to a supervisory authority.

The Service is not directed at children under 16.

We'll update this notice as the Service evolves and note the date above. Material changes will be announced by email or in the app. See also our Terms of Service.