This notice covers two things: what this website collects, and how the Inkory extension handles your data on your own computer. In one sentence — your highlights, notes and drafts live in your own browser, and we cannot see them.

1. Who processes your data

This website (getinkory.com) and the Inkory browser extension are operated by Inkory ("we", "us"). For any data-related question, or to exercise the rights in section 7 below, write to jack@getinkory.com. We usually reply within 30 days.

2. The website: what we don't do

  • No accounts. Browsing this site requires no registration, and we keep no database of visitor profiles.
  • No analytics cookies, no ads, no third-party tracking scripts. Pages load no external fonts, analytics tools or social plugins.
  • No selling, renting or exchanging of data. Not in the past, not now, not ever.

3. The website: the small amount processed technically

This site is hosted on Cloudflare. Like every website, in order to deliver pages and block attacks, Cloudflare processes the IP address, user agent, request time and path of each request. These are logs required to run the service, not a behavioural profile we build. Retention follows Cloudflare's logging policy (typically a few days up to 30), and we look at them only to diagnose faults or respond to attacks.

If you email us, we receive your email address and the content of the message, and use them only to reply to you.

4. The extension: your data stays in your browser

  • Every sentence you highlight, every note, tag, source snapshot and writing-desk draft is stored in your browser's local storage (IndexedDB).
  • None of it is uploaded to our servers — we have no server that can read it.
  • Uninstalling the extension or clearing browser data deletes it permanently. Please export a backup yourself.
  • The permissions the extension requests are used only to highlight on pages and read the text you are editing. It does not read browsing history unrelated to highlighting.

5. AI checking: content goes to the provider you chose

AI checking uses your own model key (BYOK). When you run a check, the extension sends the passages to be checked and the sources you cited directly to the model provider you entered in settings (for example OpenAI, Anthropic or DeepSeek).

  • We do not relay, proxy or store those requests or responses, and we cannot see your key.
  • How that provider handles and retains the content is governed by their privacy policy, not by us. For sensitive material, check their terms first.
  • With no key configured, checking and Q&A trigger no network request at all, and everything else keeps working locally.

6. Payment

Subscriptions are handled by Creem. Creem acts as Merchant of Record, taking payment and handling invoices and taxes, so your card number and billing address are collected and processed by Creem directly — we never touch or store them. What we receive is limited to: email address, order number, product and subscription status, and expiry date, used to enable and renew Pro.

Creem's own privacy policy governs its processing. To have order-related information deleted, you can ask us or ask Creem directly.

7. Legal bases and your rights

If you are in the EU or the UK, we process the information above on the basis of: performance of our contract with you (Art. 6(1)(b)), our legitimate interest in running the site and blocking attacks (Art. 6(1)(f)), compliance with tax and accounting obligations (Art. 6(1)(c)), and your consent when you write to us (Art. 6(1)(a)).

You may ask to: access the data we hold about you, correct errors, erase it, restrict processing, object to processing, receive it in a portable format, and withdraw consent at any time. Write to jack@getinkory.com. If you believe we have not handled it properly, you have the right to complain to the data protection authority in your country.

8. Cookies

This site sets no cookies for visitors, which is why you see no consent banner — there is nothing to consent to. The only cookie is the session cookie the site owner uses to sign in to the admin area (HttpOnly, SameSite=Strict, scoped to this site). It appears only when we sign in ourselves and has nothing to do with visitors.

If we ever add a service that needs cookies (analytics or comments, say), we will describe it here first and ask for your consent before setting anything.

9. International transfers

The website and database run on Cloudflare's global network (the application currently sits in Asia-Pacific), payments are processed by Creem, and model requests are processed by the provider you chose. These may transfer your information outside your country, under lawful transfer mechanisms such as the standard contractual clauses each provider offers.

10. Children

This product is built for adult professional writers. It is not directed at children under 16, and we do not knowingly collect their information.

11. Security

The site is HTTPS throughout, the admin area is restricted to authorized access, and credentials are stored encrypted. The extension does not transmit your local data. But no system is absolutely secure: keep your model key safe, and export important drafts regularly as backups.

12. Changes

When this notice changes, the date at the top changes. For substantive changes (starting to collect new data, for example), we will explain them separately in the blog.

Last updated: November 5, 2026　·　Questions: jack@getinkory.com