Privacy policy

Wrightkin is the independent studio operated by Resphere. Arcwright is its Windows story development app. This policy covers Arcwright and the tools on this website. For privacy questions or requests, contact resphere.n@gmail.com.

Stories and artwork on your device

Arcwright saves project data and artwork in local files in its application-data folder. It also stores local preferences. Project files and ordinary exported backups are readable data; Arcwright does not encrypt them at rest. Uninstalling the Windows app may leave local data behind.

The free browser tools store their saves in your browser, using IndexedDB or local storage. They do not upload your stories or reference sheets to Wrightkin. Clearing site data can remove these saves. Export a backup if you want a separate copy.

License activation and payments

Arcwright contacts Wrightkin's Cloudflare-hosted license service to activate and validate a license. This sends the license key and activation information, including an app-generated activation identifier. That service contacts Lemon Squeezy and can receive purchase details from it. License records are stored separately from project data with operating-system protection.

First activation needs internet. After activation, local writing and saving can work offline. The app can recheck a license at startup and when internet access returns. Licensing and hosting providers also process technical request information and service logs.

The Arcwright product page loads Lemon Squeezy's checkout script, which makes a third-party request even before a purchase. Lemon Squeezy processes checkout, payment and receipt information. Wrightkin receives purchase and license information needed to support customers. See Lemon Squeezy's privacy policy.

Optional Google Drive connection

If you connect Google Drive, Arcwright requests openid, email and https://www.googleapis.com/auth/drive.file. It reads your Google account identifier, email address and email-verification status to identify the connected account. File access is limited to files created with Arcwright or otherwise granted to the app, rather than general access to your whole Drive.

Arcwright uses that access to create and manage its backup folder and upload the copies you request. Opening the backup folder can create an empty Arcwright folder if needed. Connecting an account alone does not upload a project. Backups go directly from your device to your Google Drive, without a Wrightkin backup-storage server.

Our use of data received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Optional OneDrive connection

If you connect OneDrive, Arcwright uses Microsoft's sign-in service, basic account details and the Files.ReadWrite.AppFolder and User.Read permissions, together with Microsoft's standard sign-in and offline-access permissions. It uses the account identifier and account label to show which account is connected. Requested backups upload directly to that account's Arcwright app folder in OneDrive.

Google and Microsoft connection credentials are stored on your device using supported operating-system credential protection. They are separate from exported story data. Account policies, provider permissions and storage limits can affect whether a connection or upload succeeds.

Backup contents, retention and disconnecting

A normal local or cloud backup contains the selected story or workspace, including its writing, notes, world details and embedded artwork. These copies are ordinary JSON, not password-protected or end-to-end encrypted by Arcwright. Keep exported files and shared cloud folders private.

Arcwright leaves uploaded backups in your provider account and does not automatically prune older copies. Your provider's retention and account rules also apply. Download a backup through your provider and import it into Arcwright when you want to restore it.

Disconnect removes the connection saved on this device. It does not delete cloud files or revoke provider consent. Delete backup files in Google Drive or OneDrive. Manage connected-app access in your Google Account or Microsoft account. Revoking access stops future authorized access, but does not remove copies you already exported.

Optional device transfer

Device transfer uses PeerJS and WebRTC for pairing, with passphrase-based AES-GCM encryption for the transferred packet. Pairing requires internet and can involve third-party signaling, STUN network-discovery and TURN relay services. Those services can process connection information such as IP addresses; relays can also carry encrypted transfer traffic. Transfer is not limited to your local network.

When you set a transfer passphrase, Arcwright remembers it in local app storage until you clear it using the transfer controls. That remembered phrase is not protected by the operating-system credential store. This encryption does not apply to ordinary project files or local and cloud backup exports.

This website and support

Website requests share technical information, such as an IP address and browser headers, with the hosting service. This site does not include an advertising or analytics SDK. VR Stylish loads fonts from Google Fonts, which sends font requests to Google. Visiting external links uses those services under their own policies.

If you email support, the studio and its email provider receive your message, address and anything you choose to attach. Include only the information needed for your request. Do not send passwords, account tokens or private stories unless you intend to share them for support.

To ask about access, correction or deletion of information held by Wrightkin, email resphere.n@gmail.com. For local files and provider-hosted backups, use the device or provider controls described above. Providers may retain billing, security and operational records under their own policies and legal requirements.