Privacy
Wriffen collects the minimum account and billing metadata needed to authenticate users, verify subscriptions, and grant entitlements inside the app.
The website stores account records, session records, verification and reset tokens, Stripe customer references, subscription status, and entitlement flags. Passwords are stored as hashes, never in plaintext.
IP address and user-agent data may be stored for fraud detection, abuse mitigation, and support investigation. They are audit signals, not the primary trust boundary for app access.
