Privacy

• Your words and rooms live on stanza’s server, for you to edit. Nobody else opens them in stanza, except the readers you name, who can read a room you share with them, and the person who runs stanza when he must (see When we look inside).
• Your pictures live in loupe, stanza’s companion, run by the same owner. If you’re a loupe member, they’re in your library there. If you signed up on stanza’s own pages, loupe keeps them for stanza, out of sight. Either way, stanza keeps a note of each picture you use, never the picture.
• Nothing counts you. No analytics, no ads, and no typefaces from Google: stanza serves its own.
• Cookies only sign you in. Two keep you signed in (one of them for readers); the others last minutes, or say which door you came in by.
• A copy is made every night of your words, rooms and account details, never your pictures. It is encrypted, and the last 14 are kept.
• You can delete your rooms or your account, yourself or by writing to us, and they’re gone from stanza’s server at once.

• People who make rooms. There are three doors in: with a loupe membership (Sign in with loupe); by signing up on stanza’s own pages, as a writer [once stanza opens to writers]; and a few accounts made by invitation before stanza opened to loupe members.
• Readers: people someone names, by email, to read a room that isn’t published.
• Visitors to stanza.pictures, and to a room on an artist’s loupe site.
• Anyone who writes to us at hello@stanza.pictures.

Whichever way you came in, stanza holds:

• Your name, and the email address we write to, to sign you in, to show readers who shared a room with them, and to write to you about your rooms or a change to these pages.
• Your rooms: the moves, their order, the pictures in them, your crops, sizes and stacks, the printers’ marks, the look, and each room’s name. It’s what stanza is for.
• Your words, in your rooms and in My poems and My essays: their type, their tilt, and where each was published, if you say.
• The earlier versions of your words, up to 200 of each, kept each time you change them, so you can see one, put it back or name it. They go when the words do: a poem deleted, or a room or a move taken out.
• A note of each picture you use: its size and shape, its focus, which version of it this is, what it shows, its caption and credit if you write them, and the colors stanza measures from it. Never the picture itself.
• A video in a room: its YouTube address, its title and date, and which of your pictures stands for it.
• A route in a room: its Strava or AllTrails address.
• Your settings: your look, your favorite moves, and whether For poets is on.
• When you were last here, shown on stanza’s console.
• The readers you share a room with: their addresses, when you asked them, whether they’ve chosen a password, and when each last read, so you can see who reads and take anyone off.

Your words are kept as you type them, with two exceptions. When you click Keep, stanza corrects clear typing slips (two or three hyphens become a dash, three dots an ellipsis, straight quotes turn the right way, doubled spaces become one), unless you turn auto-correct off for that poem. And spaces at the ends of lines, and blank lines before the first and after the last, are let go. Nothing else changes your words.

Each person’s work is kept apart, in a folder of its own on stanza’s server, opened only by that person’s sign-in.

Someone who makes rooms can share one with you before it is published, by typing your email address. stanza then holds:

• your email address, and when you were asked;
• your password, as a one-way hash, once you choose one;
• when you last read, updated as you read.

The link in your letter lets in whoever opens it first, so don’t pass it on.

The person who shared the room sees your address, when they asked you, whether you’ve chosen a password, and when you last read. Their letter to you names them and the room, and a reply reaches them. You see only the rooms shared with you.

A reader’s pages are kept from search engines, and send no address on to other sites. A room you read may show a route’s map, from Strava or AllTrails, and a video, from YouTube when you click it (see Other sites a room may show).

When you’re taken off, or every room shared with you is taken back or deleted, stanza deletes your address and your password within the hour, and they leave the nightly copies as those age out. A note of each letter sent to you is kept as Letters says. You can ask to be taken off by writing to us or to the person who shared[, or with Take me off on your page].

On stanza.pictures:

• No cookies from stanza, and nothing kept in your browser.
• No analytics. stanza counts no visits and follows no one from page to page.
• Typefaces from stanza itself. Nothing is fetched from Google.
• Videos play from YouTube’s privacy-enhanced player (youtube-nocookie.com), and only when you click one. Until then nothing loads from YouTube.
• A route’s map comes from AllTrails or Strava when you scroll near it. Once a map or a video loads, it is that service’s own page, and may set its own cookies (see Other sites a room may show).
• Cloudflare serves the site, and sees each request, as any host does.

On a room on an artist’s loupe site: the room is a page of the artist’s site, served by loupe, and loupe’s privacy page covers it. It loads nothing from stanza, carries no map or video player, and nothing a visitor sees names stanza.

A room can hold a video from YouTube and a route’s map from Strava or AllTrails. Each is that service’s own page, shown inside the room. It sees your visit as it would on its own site, under its own privacy policy:

• YouTube: only when you click a video, and from its privacy-enhanced address.
• Strava and AllTrails: the map loads when you scroll near it. What a route shows is set at Strava or AllTrails (Strava’s privacy zones, for one); stanza adds nothing and takes nothing away.

stanza’s server asks YouTube for a video’s title, and checks that a Strava route is public. Neither asks anything about you.

stanza.pictures sets none. app.stanza.pictures sets these, and only these:

• stanza keeps you signed in. It holds a random code; stanza’s server keeps only a fingerprint of it. 30 days, or until you sign out.
• stanza_reader keeps a reader signed in, on the reading pages alone. 30 days, or until you sign out.
• stanza_state checks, while you sign in with loupe, that the way back from loupe is your own browser’s. 10 minutes.
• stanza_room remembers which room to open when you click edit in stanza in loupe while signed out. 10 minutes.
• stanza_door says only “writer”, so a sign-in that has run out takes you back to the writers’ door. A year[, or until you delete your account].

None of them follows you to another site, and none is read by anyone but stanza. While you edit, your browser also remembers whether Edit was on, until you close the tab.

• stanza writes to readers (the room shared with you, a new password), to people who sign up (the link to choose a password), to anyone who asks for a new password, [and to the address kept for your rooms about a change to these pages or a notice about something in your rooms].
• Postmark sends them, from hello@stanza.pictures, and keeps each letter for 45 days.
• stanza keeps a note of each letter it sends: the address, the subject and when, [for 30 days].
• If a letter can’t be sent, stanza keeps it on its server for the person who runs stanza to see and send by hand, [for 30 days].
• Mail you send to hello@stanza.pictures passes through Cloudflare to the inbox of the person who runs stanza, at Gmail, and is kept there with the replies.

Each handles only what its job needs.

• loupe: stanza’s companion, run by the same owner. Signs loupe members in, keeps writers’ accounts behind stanza’s pages, keeps everyone’s pictures, and serves a room put on a loupe site.
• Railway: runs app.stanza.pictures (the sign-in, each person’s editor, and the disk where rooms and words are kept), in the United States (US West).
• Backblaze B2: keeps the nightly copy, encrypted, in a private store of stanza’s own, in the United States (US East).
• Cloudflare: serves stanza.pictures, looks after stanza’s addresses, and passes on mail sent to hello@stanza.pictures.
• Postmark: sends stanza’s letters.
• Google: holds the inbox where mail to hello@stanza.pictures arrives (Gmail).
• YouTube, Strava and AllTrails: show a video or a route’s map in a room, as above.

stanza works with no advertising or analytics company.

• Your rooms, words, picture notes and settings: while your home in stanza exists.
• If your loupe plan stops including stanza, you can’t sign in to stanza again until it does; a sign-in already open runs to its end, at most 30 days. Your rooms stay as they are[, and nothing deletes them by the clock].
• When you delete your rooms or your account, or your home is removed: your rooms, words, picture notes, readers and settings go from stanza’s server at once, and the notes of letters sent to your addresses with them. The nightly copies that hold them age out, normally within 15 days.
• A writer’s account, kept by loupe: [on your word, stanza deletes its side at once, and loupe deletes the account and your pictures within 30 days].
• Sign-ins: until you sign out, or 30 days. Failed sign-ins: a day. Links in letters: an hour to choose a new password, a day to sign up, 30 days for a reader’s first link.
• A record of what was done from stanza’s console, and of each Delete my rooms: what was done, the account’s address, the reason given, when, and who did it, [kept for good, as the account of what was done and why].
• Logs: stanza’s server notes what it does by an account’s number: signed in, a page opened, a change saved, a letter sent [by its kind, never its subject]. It doesn’t log email or network addresses, or your words. Railway keeps these logs for [a week]. Railway, which runs the server, also sees each request and the network address it came from, as any host does.
• Mail to hello@stanza.pictures: in that inbox, for as long as it is kept.

The person who runs stanza can read what is on stanza’s server. He does so only when you ask for help, to keep stanza working, or to meet a legal obligation. stanza’s console shows him, for each account, its name, its address and whether it signs in with loupe, when it joined and was last here, how many rooms and pictures it holds and the space it takes; the last letters sent, with their addresses and subjects; and the record above. It doesn’t show your rooms or your words, except a room’s name in the subject of a letter to its reader. For an account with stanza’s own sign-in, he can make a link to choose a new password, when its owner asks.

• Passwords are kept only as one-way hashes, never as themselves. A writer’s is kept by loupe the same way.
• Sign-ins and links are random codes; stanza keeps only a fingerprint of each, and its server decides when one ends. A letter that couldn’t be sent is kept whole, link and all, until it is sent by hand.
• Every page comes over an encrypted connection.
• Guessing is slowed: five wrong passwords in fifteen minutes, for one address or from one network address, pause sign-in there for fifteen minutes.
• Each person’s editor runs as its own process, pointed at that person’s folder and pictures alone.
• The nightly copy is encrypted where it is kept, in a private store of stanza’s own.

• To see what we hold about you, correct it, or delete it. Write to hello@stanza.pictures from the address you use with stanza. We answer within 30 days.
• To delete your rooms or your account yourself: Delete my rooms (if you came in with loupe) or Delete my account (stanza’s own sign-in), on your account page. A writer writes to us.
• A copy of your words and rooms. stanza can’t yet give you one to download; [write to us and we’ll send you one].
• [A lawyer’s read: which US state privacy laws apply, and whether people in the EU or the UK need a section of their own.]

stanza isn’t meant for children under 13, and we don’t knowingly hold their personal information. To make rooms you must be at least [18].

We’ll write to you before a change to this page that affects you, at the address kept for your rooms, say so in stanza, and put the new date at the top.

hello@stanza.pictures · [who runs stanza: the same as loupe’s] · [a postal address]

The terms: stanza.pictures/terms.