Privacy Policy

1. Data controller and contact

For questions about this privacy policy or the processing of your data, write to us at support@poeta.ink. More about who runs Poeta is on the Contact page.

2. What data we collect

Reading and writing poems is possible anonymously — in that case, we only store a random, non-personal session identifier in your browser (local storage), so you can edit, delete, or hide your own poem within that same visit. That session is deliberately never linked to any account you open later — see the Copyright page.

If you open an account (email or Google), we store your email for signing in and for linking your poems to your profile. To protect against automated abuse (Cloudflare Turnstile), your IP address and basic technical browser signals are also processed.

For all visitors, including anonymous ones, we also process basic technical visit data — IP address, browser type, and page address — via Cloudflare Web Analytics and Umami analytics, for anonymous aggregate traffic statistics. Umami does not store your IP address in raw form: it is used only transiently, hashed with a daily-rotating key, to count unique visits and provide coarse geolocation (country). This data is not linked to your identity and is not used to track you across other sites.

3. Legal basis for processing

We process data on the basis of contract performance (providing the service you're accessing), your consent (when creating an account), and our legitimate interest (preventing abuse and keeping the platform secure).

4. How we use data

Your email is used solely for authentication and for showing “My poems”. We do not sell or share your personal data with third parties for marketing purposes.

5. Published content

The poems you publish are public. Do not add personal data to a poem's text that you do not want to share publicly.

6. Third-party processing

We use Supabase for storage and authentication, and Brevo for sending transactional emails (signup confirmation, password reset). The site is served, protected from automated bots, and anonymous traffic statistics are collected (Cloudflare Web Analytics) — all via Cloudflare.

For additional, independent anonymous traffic statistics we also use Umami (Umami Cloud, servers hosted in the EU), with whom we have a data processing agreement (DPA) in place. Umami does not use cookies or collect personal data.

We use Sentry to track technical errors in the browser. When an error is reported, it processes your IP address, browser details, and the address of the page the error occurred on.

For AI analysis, a poem's text is sent via the intermediary OpenRouter to one of several external AI providers, randomly selected from a pool of available models, solely to generate its score and short review.

7. International data transfers

Some of the providers listed above may process data outside the European Union/EEA (particularly for AI analysis, where the model is chosen at random from a global pool). Such transfers rely on the safeguards those providers contractually put in place (e.g. the European Commission's Standard Contractual Clauses).

8. Data retention

We keep account-related data for as long as your account exists, or until you request its deletion. Poems that were published publicly may remain available after account deletion unless you specifically request their removal too.

9. Cookies and local storage

We use local storage strictly necessary for signing in, remembering your anonymous session, and keeping an unfinished poem draft, plus one functional cookie (poeta_lng) that remembers your chosen interface language for a year. Both are necessary for the service to work and do not require your consent.

We do not use cookies or local storage for marketing or analytics, whether our own or a third party's. For cookie-less, anonymous traffic statistics we use Cloudflare Web Analytics and Umami — see section 2.

10. Your rights

Under the General Data Protection Regulation (GDPR), you have the right to request access to your data, its rectification, erasure, restriction of processing, data portability, and to object to processing. For any of these requests, write to us at support@poeta.ink.

If you believe your data has not been processed in accordance with the law, you have the right to lodge a complaint with a supervisory authority — in Croatia, the Personal Data Protection Agency (AZOP), azop.hr — or with the supervisory authority in the EU member state where you reside.