Privacy Policy

Last updated 23rd of June 2022.

Privacy is on the top of our list and we want to set an example how online privacy should be handled.

In a Nutshell

Here's our privacy policy in a nutshell.

  • No tracking cookies.
  • No IP address saved or logged anywhere.
  • No JavaScript required.
  • No third party assets used, like scripts, styles or fonts.
  • One functional cookie needed when you want to post new content or login.
  • Possible to post content anonymously without saving the content server side.
  • All servers and data is located inside the European Union and is never transferred outside the EU.

Contact Us

If you have any questions or need more information, please, don't hesitate to ask. Here's our company contact information:

  • Innota (registered in Finland, VAT ID FI27771315)
  • Person responsible for data protection: Jaakko Naakka
  • Email: i@wrote.re

Our email service provider is Tutanota. Tutanota makes it easy to keep our email conversations private and encrypted if you need to contact us.

Handling Personal Information

Your personal information is collected and handled differently based on what you do on Wrote. We have divided this section into three parts based on your role in Wrote.

1. Viewing Public Pages and Blog Posts

  • No cookies
  • No JavaScript
  • No IP address or other personal information logged

When you view a public page, like this blog post, we do not place any cookies on your device.

Zero cookies. No JavaScript. No IP address logged anywhere on our system.

No personal user data is collected.

2. Posting New Content Anonymously

  • One functional cookie to prevent spam
  • Optional JavaScript
  • No IP address or other personal information logged

The post new content page uses a session cookie. This cookie is purely functional, and it's used to improve user experience and prevent spam. Posting new content wihout allowing this cookie is not possible.

The post new content page also uses JavaScript. This is, however, completely optional. If you have disabled JavaScript, the page still works as intended and you can post new content on Wrote. With JavaScript enabled user experience is improved and you can benefit from using our Markdown content editor.

No personal user data is collected. No content is saved on any server. All the data from the blog post is contained withing the URL that you get after posting the content.

3. Registering a User Account and Posting as a Logged in User

  • One functional cookie to enable log in sessions
  • Optional JavaScript
  • Optional email address saved (to enable resetting forgotten passwords and receiving security notices)
  • No IP address or other personal information logged

It is possible to sign up for a user account. This allows you to claim your own space in Wrote and post all of your content in your own blog. Obviously, for this to work we need to ask for some personal details. These are:

  • Your username (this can be a pseudonym or a pen name)
  • Password (this is needed so we know it's you whose trying to publish content in your blog)

To improve user experience and make it possible to reset forgotten passwords, it is possible to add your email address in your personal settings. This is, however, completely optional. Your email address is only used to reset your forgotten password and used for important security notifications.

Logging in requires the use of a functional session cookie. Without this cookie it is not possible to log in to Wrote. This cookie is not used for tracking in any way.

No personal user data is collected, unless you want to be able to reset forgotten passwords using an email address.

Our IT Infrastructure

Want to know more where our servers are and who handles our infrastructure? Read on but be prepared for some nerdy details.

Servers at Scaleway in The Netherlands

Our application and database servers are hosted by Scaleway in the Netherlands. Scaleway is a French company operating under French jurisdiction. This is the most critical part of our infrastructure, and our database is the only place where some personal information could be saved if you are a registered user and you add an email address in your settings. All this data is securely handled on our servers and no data is ever transferred outside the EU.

Image Processing at AWS in Germany

Registered Wrote users can upload images and other files into their blog. These files are saved in Amazon Web Services S3 in Germany. Image scaling and optimizing is also handled on Amazon Web Services infrastructure. Downloading the files from S3 is handled through a reverse proxy, which hides the client IP address from AWS. AWS is only used for files that are publicly available for download, and AWS has zero access to other parts of our infrastructure.

Content Delivery from KeyCDN

To make our service as fast and smooth as possible, we use a content delivery network in front of our application. Our CDN of choice is KeyCDN. KeyCDN is registered in Switzerland, and they have no access to personal information saved on our servers.

Email Sending from Tipimail

Registered users can optionally add their email address in their user settings. This email can be used to reset forgotten passwords and to receive security notifications from Wrote. We use Tipimail as our email service provider. Tipimail is French company and all of their email processing is handled in France. We use Tipimail only to send emails, and email addresses are never saved on Tipimail servers.