Privacy Policy
Last updated:
1. Scope and controller
This policy describes Manuscript Builder’s current data handling. The controller is its publisher, mKzz, an individual operating Bag Of Holding Tools on a personal and non-commercial basis. For privacy questions or requests, contact support@bagofholdingtools.com. Publisher and hosting details are in the Legal Notice.
Personal data is information that identifies you directly or indirectly. We handle it under the GDPR and applicable French data protection law. Other Bag Of Holding Tools apps share sign-in but describe their own features in their own policies.
2. Guest drafts and saved manuscripts
The guest editor at /workspace stores the manuscript name, pages, text, formatting, selected style and imported illustrations in your browser. Signing in does not automatically upload that draft. If you create a manuscript from your dashboard or choose to import a browser draft, its contents are stored in your account database and subsequent edits are saved there so you can open them on other devices.
PNG and JSON exports are generated on your device. Illustrations and JSON you import into an account manuscript are included in its saved contents. Browser drafts that you have not imported remain local, and we cannot recover them through the service.
3. Optional Google sign-in
If you choose Google sign-in, Google and Supabase process the identity and session information needed to authenticate you. This may include your email address, account identifiers and profile metadata supplied by Google. We do not receive your Google password.
Manuscript Builder’s account record contains your email address, shared authentication identifier and account timestamps. Account manuscripts contain their title, style, pages, text, illustrations and update timestamps. We use these to identify your account, save your manuscripts and let you retrieve them on other devices. The legal basis is performance of the account service you request. You can edit manuscripts without supplying this information.
4. Technical and support information
Hosting and authentication providers process connection information, such as IP addresses, request times, browser information and authentication events, to deliver and secure the service. This is separate from manuscript content. We rely on our legitimate interest in operating a reliable service and preventing abuse.
If you contact support, we receive your email address and the information you send. We use it to answer your request, based on our legitimate interest in providing support or on a legal obligation when responding to a data-rights request. We do not use your data for advertising or sell it.
5. Providers and international processing
- Supabase provides shared authentication and database hosting for account records and saved manuscripts.
- Vercel hosts and delivers the application.
- Google provides sign-in when you choose it.
These providers may process technical or account information outside your country, including in the United States. Their privacy notices describe processing locations and transfer safeguards. Provider data-processing terms describe applicable contractual safeguards, including standard contractual clauses. Contact us for information about safeguards applicable to your data.
We may also disclose information where required by law. The app does not integrate Google Analytics, advertising trackers or behavioral profiling. See the Cookie Policy.
6. Retention and deletion
Your local draft remains until it is replaced, you clear this site’s browser storage, or your browser removes it. Downloaded files remain wherever you save them. Signing out or deleting your account does not erase either kind of local copy.
Account records and saved manuscripts are retained while your account exists. The Account page lets you delete the shared sign-in and Manuscript Builder account records, including saved manuscripts and their pages. This affects sign-in to the other suite apps. Contact us if you need help with data held by another tool.
Support correspondence is kept for the time needed to resolve and follow up on the request. Technical logs and provider backups follow the providers’ configured retention cycles; deletion from active records may not immediately remove backup copies. Information needed to meet a legal obligation or resolve a dispute may be retained for that purpose.
7. Your choices and rights
Where the applicable legal conditions are met, you can request access, correction, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. Where processing relies on consent, you can withdraw that consent. French law also provides for instructions concerning personal data after death.
Contact support@bagofholdingtools.com to exercise your rights. We normally respond within one month; if a permitted extension is necessary, we will explain it within that period. We may request information reasonably needed to verify your identity.
You can export your local manuscript using Download JSON and remove it by clearing this site’s browser data. We cannot clear drafts on your device remotely.
You may complain to your data protection authority, including the CNIL in France.
8. Security, children and updates
We use authentication and access controls to protect account data. No service or device is completely secure; protect access to your browser and keep backups of important manuscripts.
The service is not directed at children under 15. If you believe a child has provided account data inappropriately, contact us. If our data handling changes, we will update this page and its date and provide any additional notice required.