INTERROBANG™
PRIVACY POLICY

Version 1.0 — Effective 1 November 2026

Privacy at a glance

• Local projects stay on your device unless you deliberately use an online feature or send information to Interrobang.
• Interrobang does not claim ownership of your manuscripts, notes, comments or edits.
• Online sharing is private and permission-based. It is not designed as a public publishing service.
• Interrobang does not use User Content to train or fine-tune generative-AI or general-purpose machine-learning models, and does not sell or license User Content for that purpose.
• Supported online payloads are encrypted; operational metadata remains visible and some browser-local content is plaintext. Protect private links and devices.
• You can exercise your GDPR rights for personal data Interrobang actually controls; local-only data remains under your control on your device.

1. Who we are

Interrobang is an independently developed writing application based in the Netherlands. In this Privacy Policy, 'Interrobang', 'we', 'us' and 'our' mean the person or legal entity responsible for the Interrobang service identified below.

Controller: Interrobang work, a Dutch sole proprietorship (eenmanszaak), registered under KVK number 42153619.

Trading name: Interrobang work.

Correspondence address: Mare 56, 2642 KB Pijnacker, the Netherlands.

Dutch Trade Register (KvK): 42153619.

Privacy contact: contact@interrobang.work

General website: interrobang.work. General contact: contact@interrobang.work.

2. Scope and our role

This Privacy Policy explains how Interrobang handles personal data in connection with:

the interrobang.work website and official download flow;

the official Interrobang Discord server, to the extent Interrobang receives or records information there;

the Interrobang desktop application and any connections it makes to Interrobang-operated services;

optional Alpha (reading and comments), Beta (review and suggested edits), Omega (browser writing), and Plotbox with its Plotmail concepts and messages; and

support, privacy, security, abuse and legal communications sent to Interrobang.

This Policy does not give Interrobang control over information held only in local project files it never receives. Providers can process some information independently and some on Interrobang’s behalf; the role depends on the actual service and contract. Referring to a provider’s own privacy terms does not remove Interrobang’s obligations for processing it controls or commissions.

For the operational processing described in this Policy, Interrobang generally acts as a controller. GDPR roles depend on the actual facts, not on a label. If Interrobang later offers a business service under which it processes personal data solely on a customer's documented instructions, the parties must enter into an appropriate Article 28 data processing agreement before that use begins. Until then, do not use the Online Services where your organisation requires Interrobang to act as its processor.

Accepting the Terms of Use forms a contract; it is not blanket consent to personal-data processing. Where consent is required - for example, for optional telemetry or non-essential cookies - Interrobang will request it separately.

Definitions:

The Online Services covered by this Policy are Alpha (reading/comments), Beta (review/suggested edits), Omega (browser writing) and Plotbox (ideas, concepts and messages). Availability depends on the release and the features you enable.

Project Owner means the author or other person who initiates an online share and selects its recipients and permissions.

User Content means manuscripts, drafts, notes, comments, suggested edits, Plotmail concepts/messages and project metadata deliberately submitted to an Online Service.

3. Local projects and device data

Interrobang is designed to be local-first. Manuscripts, notes, project metadata, images, snapshots and backups kept solely in a local Interrobang project remain on your device or in storage you choose. Interrobang does not ordinarily receive, inspect or moderate that content.

The Desktop Software stores preferences, recovery information and Terms acceptance on your device. Online-link state can include encryption and owner credentials in local files. Protect the device and backups. Uninstalling may leave project files, settings and backups stored elsewhere.

Local content can leave the device through selected external functions. Synonyms sends selected or typed query text, sometimes including adjacent words, to Datamuse. Enabled online links can synchronise and poll automatically after the original user action; a separate action is not required for each request. Operating-system or third-party folder synchronisation is under your control. The following section distinguishes these connections from ordinary offline writing.

4. Personal data we process

Website and download access

Website and download delivery exposes request information to the relevant infrastructure, potentially including IP address, time, requested resource, referrer, user agent, approximate region, response status and security signals. Infrastructure request processing is separate from any aggregate download total. We do not use download access to build marketing profiles or fingerprints. Cookies and similar storage are addressed in Section 13.

The website also uses Cloudflare Web Analytics performance measurement where enabled. A beacon can load from static.cloudflareinsights.com and submit page/navigation timing and related performance information to a Cloudflare reporting endpoint. Cloudflare describes this service as privacy-focused performance measurement without cross-site tracking; it is separate from manuscript processing and the download counter. This technical measurement serves the legitimate interest in reliable website delivery, subject to any separate choice required by applicable law.

Discord distribution and community

Interrobang moderators can see information made available in the official Discord server, including display names, user IDs, membership, roles, posts, attachments, Community Rules acceptance and moderation events. Those records are separate from software-Terms acceptance. Discord itself also processes data under its own privacy policy.

Discord operates the Discord service independently and processes additional information under Discord's own privacy policy. Joining the Discord server or accepting Community Rules is distinct from accepting Interrobang's software Terms.

Desktop connections after online use

External synonym lookup through Datamuse is optional. When enabled, it sends the selected or entered query and, where needed for context, limited neighbouring text, together with ordinary network-request information. Local synonym functions remain available without using that service.

After a user enables an Online Service, the Desktop Software or browser interface may periodically connect to check for permitted updates, comments, suggestions, presence information or Plotbox messages. These requests may process relevant project, link, session, routing and security identifiers and any content needed for the requested function.

Optional AO3 lookup, Google Docs export, donation and user-selected external-link functions connect to independent third-party services at the user’s direction. Those services process the information sent to or requested from them under their own privacy notices. Interrobang does not automatically upload crash reports or general manuscript analytics unless a separate optional function is introduced and appropriately disclosed.

Alpha, Beta, Omega and Plotbox Online Services

When a Project Owner uses an Online Service, Interrobang may process:

• User Content selected or submitted for the feature, including manuscript text, comments, highlights, suggested edits, direct edits and related project metadata;
• encrypted or otherwise protected service payloads for the categories identified in the Security and Encryption Notice;
• project, share, session or object identifiers; recipient-routing information; permissions; expiry, revocation and service-status information;
• timestamps, IP addresses, browser or device information, request and error records, content size, storage or traffic measurements and security events; and
• private links, tokens, keys or owner-authorisation credentials necessary to authenticate and operate the requested feature.

Only selected content is transmitted through these functions. The Security and Encryption Notice explains which content is encrypted before transmission, which metadata remains visible, how access credentials and keys operate, and what information may remain on an authorised device or browser.

Support, privacy, security and legal communications

If you contact Interrobang, we process the details you provide, such as your name or handle, email address, message, attachments, relevant project/share identifiers, diagnostic information and correspondence history. Security or illegal-content reports may also contain evidence, affected URLs or tokens, and information about other people. Please send only what is reasonably necessary and use the private security channel for vulnerabilities.

5. Sources of personal data

We obtain personal data directly from you; automatically from your browser or application when it connects; from a Project Owner who invites a collaborator or sets permissions; from an invited collaborator who comments or edits; from Discord and other providers to the extent their services expose information to us; and from reporters, authorities or advisers in connection with security, abuse or legal matters.

6. Why we use personal data and our legal bases

We process personal data only for specified purposes and where an appropriate legal basis is available under the GDPR. The principal purposes and legal bases are set out below.

7. Information you must provide

To use Alpha, Beta, Omega or Plotbox, you must provide the selected User Content and the links, permissions, identifiers and other information necessary to operate the chosen feature. If you do not provide required information, Interrobang may be unable to provide that Online Service. No Interrobang account is required.

Connections to the Online Services necessarily expose network and request information used to deliver and secure the service. Acceptance of the Desktop Software Terms is recorded locally on the user’s device or browser using the applicable Terms version or document identifier and the date and time of acceptance. Clearing that local record may cause the Terms to be presented again.

Discord membership, acceptance of the Community Rules and download-access actions are separate from acceptance of the Interrobang software Terms. Privacy choices are also separate from Terms acceptance.

Information requested for optional telemetry, non-essential cookies, voluntary diagnostics, feedback or other optional functions is not required to use unrelated core features. Where consent is the applicable legal basis, declining or withdrawing consent will not prevent use of functions that do not depend on that information.

Where we rely on legitimate interests, those interests include delivering and securing the Services, preventing abuse, responding to requests and protecting legal rights. We limit processing to what is reasonably necessary and balance those interests against the rights and reasonable expectations of affected individuals. You may object as explained in Section 17.

If we propose to use personal data for a materially different purpose, we will first assess whether the new purpose is compatible with the purpose for which the data was collected and provide any additional notice, legal basis or choice required by law. An amendment to this Policy will not be treated as permission to expand a limited service purpose into a broad right to exploit manuscripts or other User Content.

8. User Content, private sharing and other people

Your User Content remains yours, subject to any existing third-party rights. Interrobang processes only the content you select as necessary to provide the requested feature, secure the service, comply with legal obligations and enforce applicable service rules. User Content is not made public by default.

The Project Owner selects the recipients, permissions and any applicable expiry or access-ending controls. Authorised readers and editors may access the content and metadata shared with them and may comment on or edit it where permitted. Revoking access prevents further access through the service but cannot remove copies, screenshots or exports already made by an authorised recipient. You should therefore share User Content only with people you trust.

If User Content includes personal data about an identifiable real person, you are responsible for having an appropriate lawful basis or other legal authority for the way you collect, use and share that information and for providing any notice required by applicable law. Consent is not necessarily the only available lawful basis. Where data-protection law applies to you as a controller, this responsibility does not affect Interrobang’s own obligations for processing for which Interrobang is the controller. Information about a wholly fictional character is not personal data, although a manuscript may identify or contain information about real people.

The Online Services are not designed for medical or counselling records, client or human-resources files, identity documents, financial-account credentials, criminal records or other regulated or high-risk information.

If another user provides personal data about you, contact us with enough information to locate the relevant record. Where content is protected by end-to-end encryption, Interrobang may be unable to identify or access it without information held by the Project Owner or an authorised recipient.

9. Encryption, access and visible metadata

The Security and Encryption Notice identifies the categories of content encrypted before transmission, the applicable key and recovery model, the metadata visible to Interrobang and its processors, and whether a feature qualifies as end-to-end encrypted. Interrobang uses the term “end-to-end encrypted” only for the scope for which the implemented architecture supports that description.

Encryption does not necessarily make information anonymous. Interrobang and its processors may still process operational information such as project, share or session identifiers, IP addresses, timestamps, content size, routing information, permissions, expiry or revocation status, error records and security signals.

Encryption cannot prevent an authorised recipient from copying content, protect content displayed on an unlocked or compromised device, or prevent access where a private link, token, credential or key is disclosed. Browser or device copies may remain readable after content has been decrypted and are not necessarily erased when server access ends.

Where a user-controlled key is necessary to decrypt content, losing that key may make recovery impossible, including for Interrobang. If Interrobang or another party can recover or access protected content through a recovery mechanism, that fact and the limits of the protection will be disclosed in the Security and Encryption Notice.

10. Who receives personal data

We disclose personal data only as reasonably necessary to:

• people a Project Owner authorises to read, comment on, suggest edits to or edit selected User Content;
• service providers acting on our behalf under appropriate data-protection terms, including hosting, content delivery, security, email, support, monitoring or storage providers actually used;
• independent third-party services you choose to use, such as Discord or an external image host, which apply their own terms;
• professional advisers where confidentiality protections apply; and
• courts, regulators, law-enforcement bodies or other recipients where disclosure is required by law or reasonably necessary to protect rights, users, the service or the public.

We do not sell personal data. If operation or ownership of Interrobang changes, relevant data may be transferred as part of that change only subject to applicable law, appropriate safeguards and notice where required.

Service providers and other recipients

The table identifies service providers and categories of recipients relevant to these functions. Where a provider acts on our behalf, applicable data-protection terms govern that processing. Providers can also act independently for their own services, legal duties and security. Contact us for information about recipients and safeguards relevant to your data.

11. International transfers

Interrobang is based in the Netherlands. Cloudflare and other external services use international infrastructure, including processing in the United States and other countries outside the EEA. Online storage is not represented as EEA-only. A storage region does not necessarily determine where network handling, support, security or logs are processed.

Where personal data is transferred outside the EEA, we will use a lawful transfer mechanism where required, such as an adequacy decision or the European Commission's Standard Contractual Clauses, together with supplementary measures where appropriate. We will rely on a provider certification or framework only after verifying that it covers the relevant entity and service. You may contact us for information about the applicable safeguard and, where available, a copy subject to necessary redactions.

Cloudflare’s Self-Serve Subscription Agreement incorporates its customer Data Processing Addendum for applicable personal data. That DPA identifies Cloudflare, Inc. and sets out transfer safeguards, including Standard Contractual Clauses where applicable. Other independent services explain their transfers in their own privacy notices. You can contact us to request information about relevant safeguards and a copy where available, subject to necessary redactions.

12. Retention, expiry and deletion

We retain personal data only for as long as reasonably necessary for the purpose for which it is processed, taking account of service operation, security, applicable legal obligations and the establishment, exercise or defence of legal claims. Where a fixed period is not appropriate, the table below describes the applicable retention criterion.

Unless a link specifies a fixed expiry, it remains active until the Project Owner ends it or until an inactivity or retention limit disclosed in the applicable feature notice applies. Expiry or revocation ends ordinary recipient access once enforced but does not erase copies already obtained by recipients.

Active-service deletion, recovery periods, backups, security logs, legal holds and recipient-held copies follow the periods or criteria stated in this Policy and the applicable feature notice. Interrobang will not describe content as deleted until the applicable deletion process has been completed.

Where Chapter VI of Regulation (EU) 2023/2854 applies, a formal switching or exit request made by the Project Owner before ordinary deletion is completed suspends routine deletion of the relevant exportable data. The relevant data remain retrievable during the applicable transition and for at least 30 calendar days after it ends, as described in the Data Portability and Switching Schedule at https://interrobang.work/data-switching. This is separate from routine link expiry or revocation and does not restore data already deleted.

Collecting Plotmail into a Project or moving it to Deleted does not by itself complete remote deletion. Where applicable, the relevant interface will identify the additional action required to initiate permanent deletion. Interrobang cannot delete information independently retained by an authorised recipient or by an external service operating under that party’s control.

13. Cookies, local storage and optional telemetry

The online interface uses functional browser storage where necessary for matters such as drafts, recovery, comment continuity, reading position, preferences, session coordination and local Terms acceptance. This storage is not used for targeted advertising, advertising tracking or marketing fingerprinting.

Some information stored in a browser or on a device may be readable after it has been decrypted for use. Clearing browser data may remove drafts, recovery material, acceptance records or preferences. Expiry, revocation or deletion from Interrobang’s active systems does not automatically erase information retained in a recipient’s browser or device.

The Security and Encryption Notice provides further information about browser copies, local protection, recovery material and the limits of remote deletion.

Any non-essential telemetry, diagnostics, cookies or similar technologies will be clearly disclosed and, where required by law, used only after the user has given separate consent. Such consent will not be bundled with acceptance of the Terms and may be withdrawn without affecting the lawfulness of processing that occurred before withdrawal or access to unrelated core functions.

14. Security and personal-data breaches

Interrobang maintains technical and organisational measures appropriate to the risks presented by the Services, including data minimisation, access controls, encryption for the scope identified in the Security and Encryption Notice, service permissions, security logging, vulnerability handling and incident-response procedures, to the extent those measures are implemented for the relevant service. We review these measures as the Services and relevant risks change.

No system can be guaranteed to be completely secure. You should keep your device, operating system and Interrobang version updated, protect private links, tokens and encryption keys, and maintain independent backups of important writing. Report suspected vulnerabilities privately to contact@interrobang.work.

If a personal-data breach occurs, Interrobang will assess and document the incident and take the actions required by applicable data-protection law. Where the breach is likely to result in a risk to individuals’ rights and freedoms, Interrobang will notify the Autoriteit Persoonsgegevens without undue delay and, where feasible, within 72 hours after becoming aware of it. Where the breach is likely to result in a high risk, Interrobang will also inform affected individuals without undue delay, unless an applicable legal exception applies.

15. No AI training, sale or targeted advertising

Interrobang does not use User Content to train or fine-tune generative-artificial-intelligence or general-purpose machine-learning models. It does not sell or license User Content for AI-training purposes, and providers used for Online Services must be contractually and technically compatible with that commitment.

We do not sell personal data, use manuscript content for targeted advertising, profile people from their writing or use device fingerprinting for marketing. Local writing analytics are not a marketing upload. We do not use solely automated processing to make decisions with legal or similarly significant effects about you. Infrastructure security controls may restrict suspicious requests; contact contact@interrobang.work about an access or privacy concern.

16. Children and higher-risk information

Online Services are for people aged 16 or older. Local desktop use under 16 may be permitted where the software was lawfully obtained and any legally required guardian permission has been provided. Discord applies its own eligibility rules. We do not offer an under-16 parental-authorisation process for Online Services. Where consent is the legal basis, applicable child-consent requirements remain distinct from general product eligibility. We take appropriate steps, including deletion where required, if personal data was collected without a required lawful authorisation.

Interrobang is a general writing tool, not a service designed for regulated professional records or systematic processing of special-category or criminal-offence data about real people. Do not place such information in an Online Service unless the service has expressly been approved for that use and all additional legal requirements, safeguards and contractual arrangements are in place.

17. Your GDPR rights

Subject to the conditions and exceptions in applicable law, you may have the right to:

• be informed about how your personal data is processed;
• request access to your personal data and receive a copy;
• have inaccurate or incomplete personal data corrected;
• request erasure of your personal data;
• request restriction of processing;
• receive certain personal data in a structured, commonly used and machine-readable format and transmit it to another controller;
• object to processing based on legitimate interests;
• withdraw consent at any time where processing is based on consent, without affecting the lawfulness of earlier processing; and
• not be subject to a decision based solely on automated processing that produces legal or similarly significant effects, where that right applies.

To exercise these rights, contact contact@interrobang.work.

We will request only information reasonably necessary to verify your identity and locate the relevant data. For accountless or pseudonymous records, you may need to provide the applicable share, session or token identifier. Do not send a decryption key unless a secure, documented support process specifically requires it.

We will not weaken encryption or collect additional identity data solely to make an otherwise anonymous or accountless record identifiable. If we cannot identify the relevant data from the information supplied, we will explain this and may request additional information reasonably necessary to locate the relevant data. This does not limit your rights where you can provide information that enables identification.

Interrobang cannot access, correct, export or delete local-only data that it has never received. You control that data through your device and backups. Requests concerning data controlled independently by Discord or another third-party provider should be directed to that provider.

We normally respond within one month after receiving a request. Where permitted by the GDPR, we may extend that period by up to two additional months because of the complexity or number of requests. If an extension is necessary, we will inform you within the first month and explain the reason. Requests are generally handled free of charge, subject to the GDPR provisions concerning manifestly unfounded or excessive requests.

18. Complaints

You may contact Interrobang so that we can try to resolve your concern. This is optional and does not affect your right to lodge a complaint directly with the Autoriteit Persoonsgegevens or another competent supervisory authority.

In the Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens. Its complaint information is available at Submitting a tip-off or complaint to the AP.

19. Changes to this Policy

Each version of this Policy will show a version number and effective date, and prior versions should remain available. If a change materially affects how we use personal data, we will provide appropriate notice through the website, application, Online Services, email or Discord, depending on the data and relationship involved. A material new purpose may require an additional choice or legal basis; changing this Policy alone does not create consent.

20. Contact

Privacy requests: contact@interrobang.work

Security reports: contact@interrobang.work

Correspondence address: Mare 56, 2642 KB Pijnacker, the Netherlands.

Website: interrobang.work