Privacy
Last updated: June 23, 2026
script.pub is a minimalist screenwriting app. This policy explains what it collects, why, and what happens to it. It is short on purpose, because the app does deliberately little.
What we collect
- Your account. An email address and a password. The password is only ever stored as a salted hash (handled by Better Auth) — we never store or see your plain password. Email addresses are used as your login and are not verified.
- Your writing. The screenplays you write, kept as document content along with their drafts and the edit history needed to support drafts and to reconcile changes saved from more than one place.
- Nothing else by default. No third-party analytics, no tracking pixels, no advertising, and no social logins.
Stored in your browser
A few things live on your device rather than on a server, and are removed if you clear your browser storage:
- A session cookie, set after you sign in, so you stay logged in. It is not used for tracking.
- localStorage for small preferences — your appearance /
theme choice (
sp_theme) and editor conveniences such as the last open script and cursor position, so the editor reopens where you left off. - IndexedDB holding a local copy of your current document and an offline outbox, so the editor keeps working without a connection and syncs when you are back online (it installs as a PWA).
Where your data lives
Everything server-side runs on Cloudflare. Your account and screenplays are stored in a Cloudflare D1 (SQLite) database, and the app is served from Cloudflare Workers. Cloudflare processes this data only as our infrastructure provider; their handling is governed by their own terms. There is no other third-party storage, backup, or processor.
How we use it
Only to run the service: to sign you in, to store and sync your writing, and to let you manage drafts. We do not sell it, rent it, or use it to build a profile, and we do not share it with anyone beyond the infrastructure needed to run the app.
Your email is your login identifier and the only way we could reach you about the service if we ever had to. We do not send marketing. Because addresses are not verified, keep yours accurate if you want to stay reachable.
Security
Traffic is served over HTTPS and passwords are hashed. No system is perfectly secure, so please do not keep anything here that you could not bear to lose — you can export your scripts at any time.
Your choices
From the Account page you can change your email, change your password, or delete your account. Deleting your account removes your scripts and your account record. You can export your scripts at any time.
Children
script.pub is not directed at children under 13 (or the minimum age required in your country), and is not intended for their use.
Changes
This policy may change as the app changes; the “last updated” date above will move when it does. Significant changes will be reflected on this page.
Contact
Questions about privacy? Email hello@script.pub.
See also the Terms.