Privacy Policy

Last updated: July 20, 2026

1. Who We Are

WrittaShot is developed and published by Dotting S.R.L. ("we", "us", "our"). This privacy policy explains how we handle data in connection with the WrittaShot desktop application and the writtashot.com website.

2. Data We Do Not Collect

WrittaShot is designed with privacy in mind. We do not:

• Store your screenplays, projects, or creative work on our servers
• Require user accounts or registration to use the application
• Track your usage behavior or collect analytics within the app
• Sell or share personal data with third parties for advertising

3. Local Data Storage

All your projects, screenplays, shot lists, and character profiles are stored locally on your device. WrittaShot does not sync to any cloud service. You are responsible for backing up your own data.

4. License Validation

When you activate or validate your WrittaShot license, the application communicates with our license server (api.writtashot.com) and with Lemon Squeezy (our payment and licensing provider). This process transmits:

• Your license key
• A unique instance identifier for your installation
• Application version

Our license server verifies the license and does not log or store personal data beyond what is needed for activation. Lemon Squeezy processes license data under their own privacy policy. No screenplay content or personal files are sent during license validation.

5. AI Features (Optional)

WrittaShot offers optional AI-powered features (shot breakdowns, prompt generation) that use the Anthropic Claude API. These features are entirely opt-in.

When you use AI features:

• Relevant scene content is sent directly to Anthropic's API for processing
• If you use your own API key (BYOK), communication is between your device and Anthropic — we are not involved
• If you use our credit plan, requests are routed through our proxy server, but we do not log or store your screenplay content

Anthropic's handling of data sent to their API is governed by Anthropic's privacy policy.

6. Claude Desktop Integration (Optional)

WrittaShot can optionally connect to the Claude Desktop app installed on your computer, so Claude can read and write your project as you work. This integration is off by default. It only activates after you both enable the toggle in Settings → Connect to Claude Desktop and accept a separate in-app consent dialog.

When the integration is active:

• WrittaShot opens a local socket on your computer that the Claude Desktop app reads from and writes to.
• The Claude Desktop app then sends the contents of any project you open in WrittaShot — scenes, characters, locations, freestyle documents — to Anthropic's servers in order to generate Claude's responses. This is the same data flow as pasting text into a chat at claude.ai.
• The recipient of that data is Anthropic PBC (548 Market St, PMB 90375, San Francisco, CA 94104, United States), or Anthropic Ireland, Limited (6th Floor, South Bank House, Dublin 4, Ireland) for users in the EEA, the United Kingdom, and Switzerland.
• Data may be processed in the United States or other countries outside the European Economic Area. Where applicable, transfers rely on Standard Contractual Clauses approved under Article 46 GDPR, as described in Anthropic's privacy policy.

Anthropic's processing of this data is governed by Anthropic's privacy policy. You can withdraw your consent at any time by turning the toggle off in Settings → Connect to Claude Desktop, after which WrittaShot stops the local socket and the Claude Desktop app can no longer reach your project. Do not enable this integration if your project contains material you cannot share with a third-party processor (NDAs, embargoed work, regulated personal data, etc.).

7. Error Reporting

WrittaShot does not currently collect any error or crash reports. No diagnostic data is sent from the application. If this changes in the future, error reporting will be opt-in only, and this policy will be updated accordingly.

8. Website & Cookies

The writtashot.com website is a static site. All fonts and assets are self-hosted. We use CookieYes to manage cookie preferences and Google Consent Mode v2. Google Tag Manager is loaded site-wide after a default denied consent state is set so it can apply and relay your consent choices. Measurement and conversion tags operate according to those choices. Analytics and advertising cookies are used only with your prior consent, as described below.

Necessary cookies (always active, exempt from consent under Article 5(3) of the ePrivacy Directive):

• CookieYes consent cookies (cookieyes-consent and related cookieyes-* cookies) — store your cookie preferences and allow the consent banner to function. Duration: usually up to 1 year.
• Language preference (ws_language) — remembers your chosen language so you are redirected to the correct version on your next visit. Duration: 1 year.

Analytics cookies (require your consent):

• Google Analytics 4 — The Google Analytics tag loads with analytics storage denied by default. Before consent, Google Consent Mode may send cookieless measurement pings to Google for aggregate measurement; these pings do not read or write analytics cookies. If you accept analytics cookies, analytics storage is enabled and Google Analytics may set cookies such as _ga and _ga_* to help us understand website usage and improve the site.

Marketing and advertising cookies (require your consent):

• Google Ads / Google Tag Manager — Google Tag Manager and Google measurement tags load with advertising and analytics storage denied by default. Before consent, Google Consent Mode may send cookieless measurement and conversion pings to Google for aggregate measurement and conversion modelling. These pings do not read or write advertising or analytics cookies, but they may include technical request data such as the IP address and user agent, page interactions and, after a completed Lemon Squeezy checkout, the pseudonymous order identifier, order value and currency for attribution and deduplication; we do not send the customer's name or email address. If you grant advertising consent, Google Ads may additionally use advertising cookies and identifiers to measure campaign performance and conversions, including cookies such as _gcl_au (duration: 3 months). The recipient is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) for users in the EEA; data may be transferred to Google LLC in the United States under Standard Contractual Clauses approved under Article 46 GDPR. We implement Google Consent Mode v2: advertising storage, ad user data, and ad personalization are denied by default and enabled only if you accept marketing cookies. For details, see Google's Privacy Policy and how Google uses cookies.

Third-party / Embedded content cookies (require your consent):

• YouTube — Our website includes embedded YouTube videos. By default, videos are loaded with YouTube's privacy-enhanced youtube-nocookie.com embed. If you accept the relevant optional cookie categories, YouTube may use its standard embed and cookies when the video loads or when you interact with it. If you reject optional cookies, the video remains visible through the no-cookie embed; Google may still receive technical information and may process data when you play or interact with the video. For details, see Google's Privacy Policy.

Proof of consent. When you make or change a cookie choice, CookieYes records proof of your consent so we can demonstrate it as required by Article 7(1) GDPR. The record may include a consent ID, the date and time, your choices, the banner/version information, the page or domain, and technical request information processed by CookieYes as our consent-management provider. These records are used exclusively for consent management and compliance.

You can change your cookie preferences at any time by clicking the CookieYes consent preferences button on the website. Withdrawing consent is as easy as giving it. You can also delete cookies through your browser settings.

9. Payments

Purchases are processed by Lemon Squeezy, which acts as Merchant of Record. We do not directly collect or store your payment information (credit card numbers, billing details). Lemon Squeezy handles all payment processing under their own privacy policy and PCI compliance.

10. Your Rights

Since we do not collect or store personal data beyond what is described above, there is generally no personal data for us to delete or provide. However, if you have questions about your data or wish to exercise any rights under applicable data protection laws (such as the GDPR), please contact us.

11. Children's Privacy

WrittaShot is not directed at children under 16. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of WrittaShot after changes constitutes acceptance of the revised policy.

13. Contact

If you have questions about this privacy policy, contact us at:
writtashot@gmail.com