Privacy Policy

Last updated 1 October 2026

Storskarvia is a writing studio built on a simple promise: your manuscript lives in your storage, not ours. This policy explains what we collect, what we don't, who else touches it, and what you can ask us to do. It is written to be read, and it applies to everyone who uses Storskarvia, wherever they live.

Who we are

Storskarvia is a product of Aristocratix, LLC ("Storskarvia", "we", "us"), 2108 N St, Ste N, Sacramento, CA 95816, United States, operating the website and application at storskarvia.com. We are the data controller for the personal data described here. You can reach us about anything in this policy at .

Where your writing lives

When you create a document, you choose where its canonical copy is stored: your Google Drive, your Dropbox, or a folder on your own computer. That copy is yours. Storskarvia keeps a working copy on our servers only so the app can function: to render the editor, run fact-checks, produce insights, and let you browse version history. If you delete a document, we remove its working copy. Disconnecting a storage provider revokes our access to that provider and discards its tokens; the working copies stay until you delete the documents or your account.

Information we collect

Why we process it, and on what legal basis

For readers in the EEA, the UK and Switzerland, this is the legal basis for each use:

How Storskarvia uses Google user data

If you connect Google Drive, Storskarvia requests a single, narrowly-scoped permission: drive.file: "See, edit, create, and delete only the specific Google Drive files that you use with this app." Concretely, this means Storskarvia can only touch the folders and files it creates for your Storskarvia documents. It cannot see, list, or access any other file in your Google Drive.

We use this access solely to save your documents (as .skarvia.json and .txt files), to write version snapshots, and to read a document back when you open it. Storskarvia's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use Google user data for advertising, we do not sell or transfer it to third parties except as needed to provide the storage feature you asked for or as required by law, we do not allow humans to read it except with your consent, for security, or as required by law, and we do not use it to train generalized or artificial-intelligence models. Dropbox connections work the same way, limited to the Storskarvia files they create.

You can review or revoke Storskarvia's access to your Google Account at any time from Storskarvia's Account page, or directly at myaccount.google.com/permissions. Revoking access removes the stored tokens; files already saved to your Drive remain yours.

What we do not do

Cookies and measurement

Storskarvia sets a small number of cookies. None of them is used to build a profile of you, and none of them ever contains anything you have written. You can see and change your answer at any time on the Cookie preferences page, linked from every footer.

Our aggregate page-view counting (Cloudflare Web Analytics, described under Service providers) sets no cookie and stores nothing in your browser. Google Analytics, where you have allowed it, counts visits and the pages read; the IP address is truncated and nothing you write is ever part of it. Stripe sets its own cookies on its own checkout and billing pages; those are governed by Stripe's privacy policy, not ours.

Advertising measurement

We advertise Storskarvia in other places, and we would like to know which advertisement led to a signup. Where we run advertising we may load Meta's advertising pixel, which tells Meta that a browser visited a page here or created an account. That is a transfer to a third party, and under California law it counts as "sharing" for cross-context advertising, so:

Meta's own handling of that data is described in its privacy policy.

Service providers we rely on

To run the service we use these providers. Each receives only what its function needs, and each has its own privacy terms, which we link to or name so you can read them.

International transfers

We are a United States company and our providers are in the United States, France and, for the AI features, the People's Republic of China. If you are in the EEA, the UK or Switzerland, your data therefore leaves your region. Where a provider offers them, we rely on the European Commission's Standard Contractual Clauses (and the UK addendum) in that provider's data processing terms; and we send the minimum needed, so the AI step receives the text listed above (for a fact-check, that includes the short dated excerpts from earlier documents) and never your name, email or account. If you would rather no passage travel that way, do not run fact-checks, continuity passes, "Populate from draft", Research questions or lookbook images; the editor and everything else work without them. Nothing else you write leaves our servers for an AI provider, except what an AI assistant you connect with an agent access key reads, under that assistant's own terms.

Your choices and rights

If you are in the EEA, the UK or Switzerland, you also have the right to access the personal data we hold about you, to have it corrected or erased, to receive it in a portable form, to restrict or object to certain processing, and to withdraw consent at any time without affecting what was done before. Write to and we will answer within one month. You may also complain to your local data protection authority.

If you are a California resident, you have the right to know what personal information we collect and how we use it (this policy), to delete it, to correct it, to opt out of sale or sharing, and not to be discriminated against for exercising these rights. We do not sell personal information. The only "sharing" we do is the Meta pixel described above, and you opt out on the Cookie preferences page or by sending the Global Privacy Control signal, which we honour. Requests to ; we will confirm receipt within 10 days and answer within 45. Residents of other US states with similar laws have the same rights and the same route.

Children

Storskarvia is not directed to children. You must be at least 13 to use it, and at least 16 if you are in the EEA or the UK unless a parent or guardian has agreed. If we learn we hold data from someone under those ages without that agreement, we will delete it. Write to if you think that has happened.

Data retention & security

We keep your working copy and account data for as long as your account is active, and remove them when you delete the account. Backup copies are kept for about two weeks and then removed. Web server logs are kept for 14 days. Records of payments are kept for as long as tax law requires. Passwords are hashed with bcrypt; storage tokens are encrypted at rest; traffic is served over HTTPS only and browsers are told to insist on it; sign-in is rate-limited; the application runs without administrative privileges. No system is perfectly secure, but keeping the canonical copy in your own storage means the most valuable thing, your finished words, is never solely in our hands. If a breach ever affects your data, we will tell you and the relevant authorities as the law requires.

Changes to this policy

If we make material changes we will update the date above and notify you by email or by a notice in the app before they take effect. Continuing to use Storskarvia after that date means you accept the updated policy.

Questions?