Legal
This policy explains what personal data Postbarrel collects, why, who we share it with, and the choices you have. Postbarrel is the data controller; our legal details are in the Contact section at the end. Questions: support@postbarrel.com.
| Data | Where it comes from | Why we use it |
|---|---|---|
| Email address and password | You, at sign-up, or your email address from Google if you choose Sign in with Google. Passwords are stored only as a hash by our authentication provider; we cannot read them. | To create and secure your account, sign you in, and send account emails (confirmation, password reset, welcome) and a few onboarding emails about your own account, such as how your free scripts work and our offer when they are used up. You can turn those off when you sign up, and each of them carries a one-click unsubscribe link. Account and security emails are unaffected. |
| Two-factor authentication secret | You, if you turn 2FA on. | To verify the code from your authenticator app. |
| Country | Chosen at sign-up, pre-filled from the country Cloudflare sees on your connection. | To show the right currency and taxes at checkout. |
| Your answers, topics, series names, saved ideas and generated scripts | You, as you use the product. | This is the product: to generate your scripts, keep them for you, and let later scripts in a series build on earlier ones. |
| Sensitive answers on the Fitness and Self-Improvement profiles (your own physical condition, and your own personal beliefs and practices) | You, only after ticking a separate consent box shown before those two profiles. We record when you ticked it and the exact wording you agreed to, alongside your answers. | Those profiles are about your own body or your own practice, so that is what the script is written from. No other profile asks for sensitive information. Separately, on every profile, an automatic check looks for signs that you may be in crisis, so that we can show support information instead of a script (see Automatic safety checks). To withdraw this consent, delete the script: deleting a script also deletes the answers behind it. |
| Confirmation on the Storytime and Horror/True Crime profiles | You, by ticking a box before those two profiles that you have the right to share the story and will not include private details that could identify someone without their agreement. We record when you ticked it and the wording. | To make sure stories about other people are shared with the right to do so. |
| Business profile (name, what you do) | You, if you fill it in. | To write business scripts about your business. |
| Feedback (thumbs up/down on scripts) | You, optionally. | To learn your style and improve your future scripts. Used for your account only. |
| Purchase and subscription records | Stripe, our payment provider, after you buy. | To credit your account, manage your plan, and handle refunds. We receive transaction and subscription identifiers and status, never your card details. |
| Support requests (name, email, message) | You, via the support form. | To reply to you. |
| Technical and security logs (IP address, request details, timestamps) | Automatically, when you use the service. | To keep the service running, detect abuse and fraud, and debug problems. |
| Usage events (that you viewed the front page, signed up, generated your first and second scripts, ran out of credits, opened checkout, paid or cancelled) and, where present, the link you arrived by (a referral or campaign code) | Automatically, first-party only. | To understand where people drop off and which creators or partners referred them, so we can pay referral partners and improve the product. Stored on our own systems, never shared with advertisers, and unlinked from your account when you delete it. |
Three checks run automatically, without a person reading your answers:
If five scripts or requests on an account are blocked within seven days, script and idea requests on that account pause automatically until the count drops, and we are told so that a person can look at it. If you think a block or a pause is wrong, email support@postbarrel.com and a person will review it and reply within one month.
The teleprompter's record mode uses your camera and microphone in your browser only, and only when you start it. The video is created and saved on your device. It is never uploaded to Postbarrel and we cannot see it.
We do not run advertising or analytics trackers, and we do not build profiles of you for marketing.
Sign in with Google is optional. If you choose it, Google sends us three things from your Google account: your email address, your name, and your profile picture. We use your email address to create and identify your account and to send the account emails described above. We use your name to greet you inside Postbarrel. We do not use your profile picture and do not store it. We do not receive your Google password, your contacts, your calendar, your files, or anything else from your Google account, and we never ask Google for more than these three things.
This data is stored by our authentication provider, Supabase, alongside the rest of your account data, and is deleted with your account (see section 5). We do not share it with anyone else, we do not use it for advertising, and we do not sell it. You can remove Postbarrel's access at any time from your Google account's security settings; if you do, sign in with your email and password instead, or ask us to delete your account.
We use a small number of providers to run Postbarrel. Each only receives what it needs for its job, under a contract that restricts it to that job.
| Provider | Role | What they receive | Their privacy terms |
|---|---|---|---|
| Cloudflare | Hosting, network security, bot protection (Turnstile) and country detection | Your requests, IP address and technical data. | Privacy terms |
| Supabase | Database and authentication | Your account data and everything you create in Postbarrel. | Privacy terms |
| Anthropic | The AI model that writes your scripts | Your answers, topic and profile details for the script being written, and for a series, brief paraphrases of your earlier takes. Anthropic does not use data sent through its API to train its models. | Privacy terms |
| Nebius | Backup AI provider in the EU, used only if Anthropic is unavailable | The same script details Anthropic would receive, and only during such an outage. We have switched off its storage of prompts and outputs. | Privacy terms |
| Tavily | Web research for scripts that benefit from facts | The topic or subject text only, never your account details. | Privacy terms |
| Stripe | Payments, merchant of record, taxes, refunds | Your email, country and payment details, which you give to Stripe directly at checkout. See Stripe's privacy policy. | Privacy terms |
| Resend | Sending our emails | Your email address and the content of account emails. | Privacy terms |
| Optional Sign in with Google, and Google Workspace hosts our support mailbox | Your email address and basic profile from your Google account, only if you choose this sign-in method. Anything you email to support@postbarrel.com, and our replies, are held in our Google Workspace mailbox. | Privacy terms | |
| Google Fonts | Typefaces for this website | Your IP address when the font files load. | Privacy terms |
We do not sell your personal data. We may disclose data if the law requires it, or to protect the rights and safety of Postbarrel and its users.
Some providers process data in the United States or other countries outside the UK and EU: Cloudflare, Supabase, Anthropic, Tavily, Stripe, Resend and Google. Nebius processes data in the EU. Where data leaves the UK, transfers rely on appropriate safeguards such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses, and, where applicable, the provider's certification under the EU–US Data Privacy Framework.
Postbarrel's own pages set no cookies, and we use no analytics, advertising pixels or tracking of any kind. The home page carries a short video hosted on YouTube. Nothing loads from YouTube until you press play. If you do, YouTube's privacy-enhanced player runs under Google's privacy policy. To keep you signed in, your session is stored in your browser's local storage by our authentication provider and removed when you sign out. Local storage also holds one small record: a random visit identifier, any referral, campaign or discount code from the link you arrived by, and the time you first arrived, so that a sign-up can be credited to the right partner and a discount code can be carried to checkout. It never leaves postbarrel.com. To stop it being kept in your browser, open postbarrel.com/?tracking=off. That removes the record and keeps nothing from then on in that browser. postbarrel.com/?tracking=on turns it back on. Cloudflare Turnstile, which protects sign-up and sign-in from bots, may set a cookie for that purpose. Cloudflare also inserts its own bot-detection script into our pages at the network edge, and our security policy stops it from running, so it stores nothing. Google Fonts receives your IP address when the font files load. Checkout and the billing portal are pages on Stripe's site, reached by a redirect, and nothing from Stripe loads on postbarrel.com.
Depending on where you live you can ask us to access, correct, delete, or export your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on it. You can do most of this yourself: your scripts and settings are editable in the app, deleting a script deletes the answers it was written from, and account deletion is on the account page. For anything else, email support@postbarrel.com and we will respond within one month.
If you are unhappy with how we handle your data, tell us first at support@postbarrel.com. We acknowledge every complaint within 30 days, look into it, tell you the outcome, and keep a record of it. If you are in the UK you can also complain to the Information Commissioner's Office. Elsewhere, you can complain to your local data protection authority.
Data is encrypted in transit, passwords are hashed, payment details never touch our systems, and you can add two-factor authentication to your account. No service can promise perfect security. If we become aware of a breach affecting your data we will tell you and the regulator as the law requires. We keep a log of every breach, including any that do not need to be reported.
Postbarrel is for adults. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, contact us and we will delete it.
We will post any changes here and update the effective date. For material changes we will also tell you by email or in the app.
Fuad Laguda, trading as Postbarrel
First Floor Right, 35A Cowane Street
Stirling, Scotland, United Kingdom
Email: support@postbarrel.com