what we keep, and what we don’t

the trenches is built to collect as little as possible. to use the app you sign in with your email — that’s the only personal information we store on our servers. your habits, journal, letters, and saved lines live in your browser’s local storage on your device. we never see them.

if you upgrade to pro, we also store a stripe customer identifier so we can attach your subscription to your account. that is the entire footprint of a paying user on our side.

email address — required to sign in. used to send magic-link sign-in emails and, if you upgrade, billing receipts.

stripe customer id — created when you start checkout. attaches your subscription to your account.

subscription status — active / canceled / past due and the billing period. needed to gate pro features.

your journal, habits, letters, saved lines, mantras, and generated insights— these stay on your device in localStorage. we never receive or store them. if you upgrade to pro and generate a synthesis, that single request is processed through anthropic’s api in real time but is not retained on our servers afterward.

stripe processes your payment. they see your card details, billing address, and email. their privacy policy applies to that data.

resend sends the magic-link sign-in emails. they see your email address.

anthropicprocesses your habit and journal data when you generate an insight. the request payload is sent over tls to their api, used to produce the synthesis, and not retained by us. anthropic’s policy governs their side.

neonhosts the database of pro accounts (email + stripe customer id + subscription state). that’s all.

vercel serves the website and runs the api routes.

no analytics scripts, no third-party trackers, no ad networks, no session replay, no fingerprinting.

no contents of your journal, letters, habits, or saved lines — those never reach our servers unless you generate an insight, and even then they’re relayed in real time and not retained.

no location data, no device sensors, no contacts, no photos.

export everything. pro accounts can download their full local data as json from /account.

delete everything.clear your browser’s site data and every trace of free-tier use is gone. for pro accounts, email us and we’ll delete your account and stripe customer record within 7 days.

cancel anytime. manage subscription from /account → manage subscription — stripe handles cancellations and refunds per their normal flow.

the trenches is intended for users 13 and older. if we learn we have collected information from a child under 13, we will delete that information promptly.

if we change anything substantive, we’ll update the date at the top of this page and email pro users about the change. continued use after a change constitutes acceptance.

questions or requests: email privacy@trenches.cloud.