Spineey is in beta.All data here is wiped when the beta ends, and most of the stories are seed data.

Legal

Privacy Policy

Last updated 1970

This is what this application stores about you, and why. It is written from what the code does today.

Your account

Stored against an account: your handle, your display name, an optional bio, your email address, a password hash, the public keys of your passkeys, and your sessions.

Your password is never stored as text — Better Auth keeps a hash of it and never the password itself. A passkey is stored as its public half only.

No email is ever sent: this application has no mailer. Your address is the account's identifier, it is not verified, and it cannot be used to reset your password.

While you are signed in, your browser holds the session cookie that names the session on the server; clearing your cookies signs you out.

What you read and write

Stored against your account: the stories you write and their chapters, the comments and likes you leave, the works and paragraphs you save, where you left off reading, and the works and authors you follow.

Contest entries and their results are stored too, together with the quote a winning entry is shown with.

A purchase is recorded as a row naming the book your account bought. It holds no card data.

In your browser

Reader preferences — the theme and the prose scale — live in your browser's localStorage, so they survive a chapter change, a reload and the next visit. The site-wide light/dark/system choice is kept there the same way.

That copy is on the device you read on, and clearing your browser storage removes it.

Payments

Books are paid for one at a time through Stripe Checkout, in Stripe's own page. Card details are entered there and never reach this application, which is told only that a payment for a book succeeded.

No ads and no analytics

This application ships no advertising, no third-party analytics and no tracking scripts.

Reading counts, which the rankings rise on, come from this server's own rows rather than from anyone else.

Removing your account

There is no self-service delete button. An account is removed by the operator who runs this instance when you ask, and the same request is how you get a copy of everything you have written.