Privacy Policy
Last updated: November 3, 2026
The data controller is Written in Signs (writteninsigns.com). Contact hello@writteninsigns.com. This policy explains what we collect and how we use it.
Email and pack requests
We collect your email address when you request the 30-Day Journal Prompt Pack or our emails. Your pack is ready immediately after your request. UK, EEA and Swiss visitors can leave the separate optional email checkbox unticked and still get the file. Elsewhere the short form line explains that emails follow. Analytics choices do not give email permission.
Before any enrollment attempt, our hosting provider stores a consent record containing your email address, the displayed wording and version, source page, UTC time, country and choice. This choice records permission, not an enrollment outcome. These records expire after two years, including when you request only the file.
An email delivery provider processes your address, subscription information and email engagement to manage our list and send requested emails. Subscription records remain while you subscribe; minimal suppression records remain as needed to honor opt-outs. Unsubscribe using the link in every email.
If email enrollment cannot be confirmed, we may queue your request and email address for review in our own mailbox. The delivery queue expires within 90 days; delivered correspondence remains until deleted. This fallback does not automatically enroll or reactivate you.
The starter quiz is a worksheet you complete offline after downloading the pack. Our signup does not collect your answers or use them to personalize a PDF or recommendation.
Contact messages
The contact form collects your name, email, subject, message, country and submission time so we can answer you. Our hosting and email delivery providers process these details on our behalf. Messages remain in the delivery queue for up to 90 days, with earlier removal possible on delivery. Delivered correspondence remains in our mailbox until deleted; you can request deletion.
A bot-check service processes contact submissions and an IP address to screen automated requests. IP-based contact spam-limit records expire within 25 hours.
Analytics and cookies
We use a cookieless analytics provider, which sets no cookies, and Google Analytics, which uses cookie identifiers. They measure usage such as pages visited, device information and page performance to help us understand the site. Analytics load only after consent in the UK and EEA, and never when we detect a Global Privacy Control signal. Your analytics preference is saved in your browser's local storage. An approximate country and region from your IP address lets our hosting provider apply these choices. California visitors can also use the “Do Not Sell or Share” control. Our hosting provider also counts page views, the referring site, campaign tags, time on page, country, device and browser type through our own cookieless measurement. It uses a daily-changing code derived from your IP address and browser, which it does not store, and keeps the counts for about three months.
Separately, our hosting provider processes outbound offer, referring-page and country details during click requests to measure referrals. This first-party click counting is cookieless and separate from optional analytics.
See how Google uses information from partner sites.
Affiliate links
Links to merchants may set cookies attributed to us. See our affiliate disclosure.
What we don't do
We don't sell your personal information or share your email with third parties for their own marketing.
Your choices
You can unsubscribe at any time. We honor Global Privacy Control signals. Subject to applicable law, you can request access to, correction or deletion of your personal data, restrict or object to processing, and withdraw consent. California residents and EU/UK visitors have additional rights under applicable law.
Contact
Questions or a privacy request? Email hello@writteninsigns.com or use the contact form.