Privacy Policy
ONDAS collects only what it needs to function, and nothing more. If you choose to write without an account, nothing is collected at all: your scripts stay on your device, permanently and exclusively. If you create an account, your email address and date of birth are collected: your email to identify you, and your date of birth to verify you meet the applicable age of digital consent. We do not sell your data, scan your writing, or serve advertising of any kind. This policy describes, plainly and completely, what information passes through our systems, why it does, and what you may do about it at any time.
Who This Policy Applies To
ONDAS offers two distinct modes of use. What data we collect, or do not collect, depends entirely on which you choose.
Skip (no account). When you write without creating an account, ONDAS operates in a fully local, fully private mode. No personal information is collected. No scripts leave your device. No analytics, no session data, no email address, and no identifiers of any kind are transmitted to our systems. Your writing exists solely on your computer, under your exclusive control. Cloud synchronisation is not available in this mode.
Account (registered user). If you choose to create an account, whether via email address, Google OAuth, or Apple Sign-In, we retain your email address and a secure, anonymised account identifier. This enables cloud synchronisation and, if you opt in separately, newsletter correspondence. The sections below describe how that information is handled.
You may switch from a registered account back to local-only use by deleting your account at any time. See section 08 for how.
Information We Collect
For users who create an account, ONDAS collects the minimum information necessary to provide a functional screenwriting environment.
Upon account creation we retain your email address and a secure, anonymised account identifier. No additional personal profile is required or requested. We also collect your date of birth at the point of account creation. Your birth year is used solely to verify that you meet the applicable age of digital consent in your jurisdiction; it is discarded immediately once that check is complete and is never retained in your user profile or shared with third parties. Your birthday — day and month only — is stored in your account profile and may optionally be used to mark the occasion if you wish. It is permanently deleted when your account is deleted.
Scripts and drafts are stored on your device by default. If you choose to enable cloud synchronisation, your content is transmitted and stored in encrypted form on Firebase. We do not read, index, or process the content of your scripts for any purpose. This commitment applies to ONDAS as an operator. Firebase, as the underlying infrastructure provider, may access data at an infrastructure level as required for platform operation, subject to Google’s own data processing terms and applicable GDPR safeguards.
Aggregated, anonymised usage signals, such as feature activation frequency and session duration, are collected solely to improve the editor. These signals cannot be used to identify you individually and are never combined with your account data for profiling purposes.
We retain account data for as long as your account remains active. If your account has been inactive for 24 consecutive months, we will notify you by email and provide 30 days to respond before initiating deletion. You may also request deletion at any time. See section 08.
How We Use Your Information
Your information serves three narrow purposes: authenticating your identity so that your account remains secure; synchronising your scripts across devices if you have enabled that feature; and delivering product updates or editorial correspondence if you have separately and explicitly subscribed to our newsletter.
We do not use your personal data or your script content for advertising, algorithmic targeting, or sale to third parties under any circumstances. Crash and stability reports, which contain device metadata and anonymised error traces, are used exclusively to diagnose and repair software defects.
ONDAS has no subscription tiers, no paid plans, and no premium features gated behind payment. The service is entirely free. There is therefore no billing data, no payment processing, and no financial relationship between ONDAS and its users beyond voluntary contributions, which are handled externally by Patreon (see section 12).
Users who contact ONDAS through the Support programme may share their name, email address, and payment method preference directly with Macy Veil. This information is used solely for the purpose of coordinating the contribution and is not processed through any third-party platform by ONDAS. Bitcoin transactions are pseudonymous by design; ONDAS does not log or retain wallet addresses. Supporter data is not shared with third parties, not combined with user account data, and is retained only for as long as the correspondence relationship is active. To request deletion, contact legal.ondas@proton.me.
Contributions at or above $40,000 USD are governed by a separate Contribution Agreement under the ONDAS Foundation. Any personal data provided in that context is held under the same confidentiality standards described in this policy and on the Foundation page, and is never disclosed to third parties except where compelled by law or legal process.
Cookies & Local Storage
ONDAS uses only essential technical storage: authentication session tokens for registered users, a minimal preference record to preserve your chosen interface theme, and local storage entries for in-progress drafts. No third-party tracking cookies, advertising pixels, or cross-site behavioural identifiers are used.
Because we use only technically essential cookies, we are not required to obtain granular cookie consent under applicable law. However, a notice is displayed to users on first visit, in accordance with ePrivacy requirements. You can dismiss or review this notice at any time from the editor settings.
Your session data resides on your device and is not transmitted to external parties. You may clear local storage at any time through your browser settings. For registered users, this will not affect your account or cloud-stored scripts. For users writing without an account, clearing local storage will erase any locally cached drafts. Back up your work regularly.
Third-Party Services
We engage two external providers, each for a defined and limited purpose:
- Firebase (Google LLC) provides account authentication and, optionally, encrypted cloud storage for scripts. Firebase processes data under Google’s standard contractual terms, including executed Standard Contractual Clauses, and applicable GDPR safeguards. Firebase does not receive access to the content of your scripts absent an explicit legal obligation, and even then only at the infrastructure level, not at ONDAS’s direction.
- Supabase manages newsletter subscriber records for those who explicitly opt in via the newsletter form. Supabase does not receive access to your scripts, your account credentials, or any data from users who have not subscribed to the newsletter.
All data transferred between your device and these services is encrypted in transit via TLS 1.3. Users who write without an account transmit no data to either provider.
Newsletter & Communications
ONDAS sends editorial correspondence, including product updates, development notes, and announcements, only to users who have affirmatively opted in by submitting their email address via the newsletter form. This is a separate act from creating an account. Creating an account does not subscribe you to the newsletter. Using ONDAS without an account does not subscribe you to the newsletter.
Newsletter subscription is opt-in only. At the point of submission, you are informed of what you are subscribing to. Every communication we send includes an unsubscribe link that takes immediate effect. You may also withdraw newsletter consent at any time by contacting us at legal.ondas@proton.me. Unsubscribing stops all future correspondence immediately; your email address is retained in our records solely to honour the unsubscribe and prevent accidental re-addition. To have your email address permanently deleted from our newsletter records, contact us at the address above and we will action the request within seven calendar days.
We do not send promotional, commercial, or advertising communications of any kind. We do not share subscriber email addresses with third parties for marketing purposes.
Data Security
All data in transit is protected by TLS 1.3 encryption. Firestore security rules enforce strict per-user access boundaries, meaning no user can access another’s data. We conduct periodic security reviews aligned with prevailing industry standards.
As with any internet-connected service, absolute security cannot be guaranteed. You are responsible for maintaining strong, unique credentials for your account. If a material security incident affects your data, we will notify you promptly and in accordance with applicable law.
Users writing without an account are not exposed to any network-based security risk from ONDAS, as no data is transmitted to our systems.
Your Rights & Choices
Depending on your jurisdiction, you may hold some or all of the following rights with respect to your personal data: the right to access a copy, to correct inaccurate records, to request deletion, to restrict or object to processing, and to data portability.
You may update your email preferences or delete your account at any time from the settings panel. Deletion is permanent and will erase all cloud-stored scripts associated with your account. Scripts stored locally remain under your exclusive device control and are not affected by account deletion.
To exercise any of the above rights, or to raise a privacy concern, contact us at legal.ondas@proton.me. We will respond within seven calendar days.
International Data Transfers
Firebase operates infrastructure across multiple regions. Depending on network latency and availability, your data may be processed in the United States or within European Union regions. By creating an account and using ONDAS, you acknowledge and consent to such transfer.
For transfers from the European Economic Area, we rely on Standard Contractual Clauses as the legal mechanism to ensure your information receives a level of protection materially equivalent to that afforded within the EEA. These clauses are incorporated into Google’s standard Data Processing Agreement, which applies to all Firebase customers.
Users who write without an account are not subject to any international data transfer, as no data leaves their device.
Age & Audience
Writing belongs to everyone. ONDAS imposes no minimum age requirement for use of the editor in its local, account-free mode. The Skip option involves no account creation and no data collection, and is available to all users regardless of age, without restriction.
Account creation — and the associated collection of an email address — is restricted to users who meet the applicable age of digital consent in their jurisdiction. In the United States, this means users must be at least 13 years of age, in accordance with the Children’s Online Privacy Protection Act (COPPA). In the European Economic Area and United Kingdom, the minimum age is 16, unless a lower age of digital consent has been established by the relevant member state (with a minimum floor of 13), in accordance with Article 8 of the GDPR. Users in jurisdictions with other applicable thresholds are responsible for confirming they meet the local requirement before creating an account.
At the point of account creation, users are required to provide their date of birth. ONDAS uses this information to verify that the user meets the applicable age of digital consent in their jurisdiction before the account is created. Users who do not meet the required age threshold — 13 in the United States, 16 in the European Economic Area and United Kingdom (subject to member state variation with a floor of 13) — are automatically prevented from completing account creation and directed to use the Skip option instead, which requires no personal information and involves no data collection. Birth year is used solely for this verification and is not retained after the check is complete.
We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has created an account, please contact us immediately at legal.ondas@proton.me. We will respond within 48 hours and take appropriate remedial action. You may also request a full account review, including confirmation of what data, if any, was collected and has since been deleted.
Users who are below the applicable age threshold are encouraged to use the Skip option, which requires no personal information, involves no data collection, and is fully functional for the core purpose of the service: writing.
Changes to This Policy
We reserve the right to amend this Privacy Policy at any time. Material changes, meaning those that substantively affect the nature of data collected or how it is used, will be communicated via a prominent notice displayed within the editor to all users — including those writing without an account — at least fourteen days before taking effect. Users subscribed to the newsletter will also receive notification by email.
The most current version of this policy will always be available at this address. Your continued use of ONDAS following any amendment constitutes acceptance of the revised terms. Last revised: June 3, 2026.
Funding & Sustainability
ONDAS does not generate revenue by itself. There are no subscription fees, no advertising, and no monetisation of user data. The service is offered freely because the work of writing should not be gated by cost.
ONDAS is sustained entirely by the generosity of its users, through voluntary contributions and memberships made via Patreon, and through the ONDAS Foundation for those who choose to contribute at a larger scale. If ONDAS has been useful to your process, a contribution is always welcome, never required, and received with genuine gratitude.
User suggestions submitted alongside contributions are taken seriously and shape the direction of the tool. ONDAS is, in this sense, built in collaboration with the people who use it.
Contributions are processed through Patreon’s platform and are subject to Patreon’s own terms and privacy policy. ONDAS does not store payment information of any kind.
Contact
For privacy inquiries, data access or deletion requests, newsletter opt-out, or any concerns related to this policy, please contact us at legal.ondas@proton.me. We endeavour to respond to all privacy-related correspondence within seven calendar days of receipt.
No-Liability Disclaimer
ONDAS is provided “as is” and “as available,” without warranty of any kind, express or implied. To the fullest extent permitted by applicable law, ONDAS and its author disclaim all warranties, including but not limited to fitness for a particular purpose, merchantability, and non-infringement.
ONDAS shall not be held liable for any claim, loss, or damage, whether direct, indirect, incidental, or consequential, arising from your use of or inability to use the service, including but not limited to loss of scripts, data corruption, or service interruption. Users are solely responsible for maintaining local backups of their work.
ONDAS is an independent screenwriting tool. It makes no representation that its features replicate, substitute, or infringe upon the proprietary functionality of any other product. All third-party product names and trademarks referenced in any context remain the property of their respective owners. Nothing in this policy or in the ONDAS service constitutes an endorsement of, or affiliation with, any third-party software product.
Note: This disclaimer is provided here for transparency and completeness. Its full contractual effect is governed by the ONDAS Terms of Service, which users accept upon account creation.