Terms of Use

1. The service

The Sanctuary is a private writing application operated under the Refined by Fire Press name. It provides local writing, optional account-backed storage, revisions, export, recovery and deletion functions. It is not a medical, counselling, crisis, legal or emergency service.

2. Accounts

An account is optional for local writing. If you create an account, you are responsible for keeping your sign-in credentials secure and for using an email address you can access for confirmation and recovery. Do not attempt to access another person’s account or writing.

3. Your writing and intellectual property

You retain the copyright and other rights you already hold in writing you create or upload. Creating an account, saving a page or making a revision does not transfer ownership of that writing to Refined by Fire Press.

You give Refined by Fire Press only the limited, non-exclusive permission needed to host, transmit, process, back up, restore, export and delete your content so the Sanctuary can provide the functions you request. Private writing is not licensed to Refined by Fire Press for publication, advertising or sale.

4. Sharing

Writing is private by default. Any public or interpersonal sharing function must require a separate, deliberate action by you. The current pre-release sharing layer is not a promise that public publishing is available. Refined by Fire Press will not treat private account writing as published merely because it is stored in the Sanctuary.

5. AI, advertising and profiling

Refined by Fire Press does not intentionally submit private Sanctuary writing to generative-AI services, use private writing to train Refined by Fire Press AI models, or sell private writing for behavioural advertising. The Sanctuary does not currently contain advertising or behavioural analytics.

6. Acceptable use

You must not use the Sanctuary to attack the service, gain unauthorised access, distribute malicious code, impersonate another person, or use the service in a way that is unlawful. You remain responsible for ensuring you have the right to store material you did not create.

7. Availability and your own copies

Refined by Fire Press aims to operate the Sanctuary reliably but cannot promise uninterrupted or error-free availability. Export tools are provided so you can keep your own copies of important writing. Nothing in these terms excludes any guarantee, right or remedy that cannot lawfully be excluded, including rights that may apply under the Australian Consumer Law.

8. Security

The Sanctuary uses layered security controls, but no internet service can guarantee absolute security. The current architecture is private and access-controlled, but it is not a zero-knowledge or end-to-end encrypted writing vault. Authorised application infrastructure can technically process plaintext account writing when necessary to provide save, revision, export and deletion functions.

9. Suspension and closure

Refined by Fire Press may need to restrict an account to protect the service, comply with law, respond to a serious security incident or address substantial misuse. Where reasonably practicable, affected users should receive an explanation and an opportunity to export their writing before closure, unless doing so would create a security risk or be prohibited by law.

10. Changes to these terms

Material changes should apply prospectively and be communicated clearly. The public release architecture is intended to record the version accepted by an account holder and to require renewed acceptance when a material change reasonably requires it. That acceptance mechanism is not activated in this pre-release build.

11. Final legal details

The final public Terms will identify the contracting legal entity, contact details, eligibility rules, governing law and jurisdiction after Australian legal review. Public launch remains blocked until those details are complete.

Privacy Policy

1. Scope

This policy explains how Refined by Fire Press handles personal information and private writing in the Sanctuary. Whether every obligation in the Privacy Act 1988 (Cth) applies to Refined by Fire Press depends on the legal status and circumstances of the business. Regardless, this policy is designed around data minimisation, transparency and the Australian Privacy Principles as a privacy benchmark.

2. Information the Sanctuary handles

• Account information: your email address, authentication identifiers and account timestamps.
• Writing you choose to save: page titles, categories where used, writing bodies and revision history.
• Device-local information: unfinished drafts, local-only pages and Word Keeper entries may be stored in browser storage on your device.
• Technical and security metadata: service providers may process IP address, user agent, request timing, authentication events, error or security-event metadata needed to operate and protect the service.
• Bot and abuse protection: when the account security check is enabled and you open or use account authentication, Cloudflare Turnstile may process technical, browser and network signals needed to distinguish legitimate visitors from automated abuse. Refined by Fire Press does not send your writing body to Turnstile.
• Transactional email metadata: your email address and delivery information when account confirmation or recovery email is sent.

3. Why this information is used

Information is used to create and secure accounts, save and retrieve writing at your direction, maintain revisions, provide exports, recover accounts, delete accounts and writing, send transactional account messages, prevent abuse, investigate security incidents, and meet legal obligations where applicable.

4. Local writing before account save

You can use the local writing functions without creating an account or providing an email address. That reduces the personal information needed for local writing, but it does not make use of the hosted application network-anonymous because hosting and security providers may still process technical request metadata. The Sanctuary can keep unfinished writing locally on your device. Local recovery copies are designed to protect against accidental loss. Local browser storage is not the same as account-backed storage, and clearing site data or losing the device can remove local-only material.

5. Sensitive information in writing

The Sanctuary does not require you to provide health, religious, political, sexual, racial or other sensitive information. Private writing may nevertheless contain sensitive information because you choose what to write. Refined by Fire Press uses account writing only for the purposes needed to provide the Sanctuary and does not use private writing for unrelated advertising or AI-training purposes. The final public launch review must confirm whether any additional consent mechanism is required under applicable privacy law.

6. Service providers and data locations

The Sanctuary currently uses Cloudflare to deliver the application, Supabase for authentication and account-backed database functions, and Resend for transactional email. The Supabase project’s primary data region is currently Oceania (Sydney) ap-southeast-2, Australia. Resend’s verified sending domain currently sends through Tokyo, Japan (ap-northeast-1), while Resend states that customer data, including message content and delivery logs, is stored in the United States. Cloudflare operates a global network and, unless additional data-localisation controls are purchased and configured, request metadata and traffic processing may occur outside Australia. Provider infrastructure and subprocessors can change, so the final public policy must maintain an accurate overseas-processing schedule and legal review must confirm which provider movements constitute overseas disclosure for Australian privacy-law purposes.

7. Analytics, advertising and tracking

The current Sanctuary does not include advertising networks, behavioural analytics or third-party marketing trackers. Resend open tracking and click tracking are disabled for the verified sending domain. Refined by Fire Press may retain or receive limited operational and security information necessary to run and protect the service.

8. Authentication and browser storage

The application uses browser storage to maintain the signed-in session and to support local writing recovery. Signing out removes account writing from the signed-out device view, but owner-tagged local recovery records may remain on the device so they can be recovered by the same account. Users of shared devices should clear site data when appropriate.

9. Retention and deletion

Account-backed writing remains in the active service until you delete the page or account, subject to technical retention needed for revisions and system integrity. Account deletion is designed to remove the account and owned writing from the active application database and to clear that account’s local recovery data from the current device when possible. Provider backups, authentication logs, security logs or disaster-recovery copies may persist for a limited period under provider retention processes. Refined by Fire Press does not promise instantaneous physical erasure from every backup medium.

10. Access, correction and portability

You can read your saved writing in the application and export your writing. Account information can be corrected through available account functions or the final privacy contact process. A dedicated privacy contact and complaint channel must be published before public launch.

11. Security

Refined by Fire Press uses access control, row-level protections, authenticated server operations, restrictive browser security policy, origin restrictions and other layered safeguards. Security reduces risk but does not make the service immune from compromise. The Sanctuary is not currently a zero-knowledge service.

12. Legal requests and incidents

Refined by Fire Press may preserve, use or disclose information where required or authorised by law. Where applicable, privacy and data-breach obligations will be assessed under Australian law. The final incident and privacy contact process remains a public-launch gate.

13. Changes

This policy will be updated when the service or its providers materially change. The effective public version will identify its version and date so users can tell which notice applies.

Writing Ownership & Licence

Your writing remains yours

Refined by Fire Press does not claim ownership of original writing merely because it is written, saved, revised or exported through the Sanctuary. You retain the rights you already own.

The operational licence is narrow

To provide the Sanctuary, you permit Refined by Fire Press and its service providers to technically copy, transmit, store, retrieve, back up, restore and delete your content as needed to perform the actions you request. That operational permission does not authorise publication, sale, advertising use or AI training.

Private by default

Saving is not publishing. A future sharing feature must be a separate choice. If public sharing is activated later, its exact publication licence and withdrawal behaviour must be presented at the point of sharing.

Third-party material

If your writing contains material owned by someone else, you remain responsible for having any permission that is legally required to store or share it.

Deletion, Security & Recovery

Account deletion

Deleting an account is intended to remove the account and its owned writing from the active Sanctuary database. The application also attempts to remove that account’s local unfinished writing from the current device while preserving unrelated device-local material belonging to another account.

Backups and security logs

Managed infrastructure can retain backups, authentication events and security logs for operational periods outside the active application database. These records are not treated as active writing and may not disappear at the exact moment an account is deleted.

Recovery

Email is currently used for account confirmation and password recovery. Local-only writing that was never saved to an account may be lost if browser storage is cleared or the device is lost. Keep exports of writing that would be difficult to replace.

Current encryption model

Connections are intended to use HTTPS/TLS in production. Account writing is not currently protected by client-side zero-knowledge encryption, so the service must not be described as end-to-end encrypted. A separate zero-knowledge architecture may be researched in the future rather than being implied by the current product.

Public launch gate

Before public release, Refined by Fire Press must finalise the legal operator identity and contact channel, production hostname and TLS verification, effective Terms and Privacy versions, acceptance recording, privacy complaint handling, provider disclosure schedule and solicitor review.