Privacy policy

Thorwick gives creative freelancers one link per project to send their clients, showing where the project is and what it includes. It is run by Maximilian Maczynski, an individual based in the United States. Questions about this policy or your data go to hello@thorwick.com.

Creatives have an account, set up projects, and send portal links. Their clients open those links. Clients never create an account and never sign in.

• Your email address, which is how you sign in.
• If you sign in with Google: your name, email address and profile picture, as Google provides them. We ask Google for nothing else.
• What you enter about your business: business name, your name, logo, accent colour and timezone.
• What you enter about your projects: titles, client names, client companies, client email addresses, descriptions, stages, notes, deliverables, and documents you upload (images and PDFs, up to 5 MB each).

Only what a creative enters about you, such as your name, company and email address, and the project details they share with you. The creative decides what goes on your project page. For questions about it, ask them first, or write to us.

Opening a project link sets no cookies and requires no sign-in. Like any website, our hosting provider receives basic request information, such as your IP address and browser type, in order to deliver the page.

The only cookies Thorwick sets keep creatives signed in. There are no advertising cookies, no analytics cookies and no third-party tracking, and project links set no cookies at all.

To run Thorwick: to sign you in, to store and show your projects, and to show each client the project page they were sent. We do not sell personal information, show advertising, or use your content to train AI models.

Thorwick’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Your Google information is used only to sign you in and identify your account.

We use a small number of providers to run the service. Each processes data only to provide its part of it:

• Supabase, for the database, file storage and sign-in
• Vercel, for hosting
• Google, only if you choose to sign in with Google

These providers may process data in the United States. We share personal information with anyone else only if the law requires it.

A project link works without a password, so anyone it is forwarded to can see that project page. The link is long and random, so it cannot be guessed, and project pages are hidden from search engines. A creative can change a link, which stops the old one working, or turn it off entirely.

As long as your account is open. When you delete a project, it disappears from your list and its link stops working. We keep the record until your account is closed. When you ask us to close your account, we delete your account and its projects within 30 days.

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Write to hello@thorwick.com and we will reply within 30 days. We will not treat you differently for asking.

All traffic is encrypted over HTTPS. Project data can only be read by our own servers, never directly from your browser, and every request is checked against the account it belongs to. No system is perfectly secure, and if a breach affects your data, we will tell you.

Thorwick is a tool for working professionals and is not directed at children under 13. We do not knowingly collect their information.

When this policy changes, the date at the top changes too. If a change affects how your data is used, we will email account holders before it takes effect.