Privacy.

What is stored, who sees it, how to get rid of it

This is a plain description of what the software actually does, written to be read rather than to cover anybody. It is not a lawyer's document. If you are handling scripts under an NDA or anything else with real obligations attached, read this and decide for yourself whether it's good enough — and ask before uploading if it matters.

The short version

Your screenplay is sent to Anthropic's API, because that's what produces the read.
It's stored so you can come back to an unfinished read.
It isn't used to train models, isn't published, and isn't shown to other users.
Ask and it gets deleted.
There's no advertising, no tracking pixels, and nothing sold to anyone.

What gets collected

Your email address: Only if you make an account. It's the account identifier and the only way to sign in. There is no password to store.
Your screenplay text: The pages you paste, split into scenes, together with the reactions produced. Stored against your account so a part-finished read can be resumed.
Read records: Which reader you chose, how many scenes were read, and the model token counts for that read. Token counts exist to check that pricing covers cost.
Credit history: A ledger of credits added and spent, so a balance can be explained if you query it.
A session cookie: One cookie, named sid, holding a random session identifier for 30 days. It exists so you stay signed in. It is not used for tracking and there are no third-party cookies on this site.
Free-trial rate limiting: If you use the no-account trial, a counter is kept against your IP address for the current day, so the free trial can't be drained by one visitor. It's a count, keyed to the day, not a browsing history.

Who your script is sent to

Producing a read means sending your scene text to Anthropic, whose model generates the reader's reaction. This is unavoidable — it is the service. Anthropic does not use data submitted through its business API to train its models.

Other than that, your pages are not sent anywhere. Specifically:

Stripe handles payments and receives your email and the amount charged. It never receives your script. Card details go to Stripe directly and never touch Cold Read's servers.
A mail provider (currently Resend) sends your sign-in link and therefore handles your email address. It never receives your script.
Cloudflare runs the servers and the database the site is built on.

How long things are kept

Scripts and reads are kept until you ask for them to be deleted. There is no automatic expiry, because the point of storing them is that you can come back to an unfinished read months later. If that's not what you want, delete them — see below.

Sign-in links expire after 15 minutes and are single-use. Sessions expire after 30 days.

Deleting your things

Email from the address on your account and say what you want gone: individual scripts, all your reads, or the whole account. Account deletion removes the email, the reads, and the script text stored with them. Unused credits are refundable at that point under the refund policy.

If you're in the EU or UK

You have rights to access, correct, export and delete your personal data, and to object to its processing. All of those are handled by emailing the address above — there is no separate portal and no fee. The legal basis for processing your email and scripts is performing the service you asked for; for the trial rate-limit counter it is the legitimate interest of not having the free tier drained.

Children

Cold Read isn't intended for under-16s and accounts shouldn't be created by them.

Changes

If this changes in a way that affects what happens to your script, the change will be described here rather than quietly swapped in. Last updated August 2026.

Terms Contact