We cannot read your script. Nobody can but you.
Your writing is encrypted on your own device, with a passphrase only you know, before it is saved. This page says exactly what that means, what it protects, and what it doesn’t.
Encrypted on your device
When you first open Pagefurl you choose a writing passphrase. From then on every page, card, note, beat, timeline, earlier version and picture is encrypted in your browser with a key that only your passphrase (or your recovery code) can unlock, and only then sent to the server. The encryption is AES-256-GCM; the key is derived from your passphrase with 600 000 rounds of PBKDF2-SHA-256, the method recommended for passwords. The passphrase, the recovery code and the key never leave your device.
What that means
The server holds scrambled data that is useless without your key. We cannot read your script. Base44, the company that hosts Pagefurl, cannot read it, and neither can its hosting or AI partners. If someone broke into the database, they would get nothing readable. We also cannot reset your passphrase, because we never had it. That is the point.
Your recovery code
When you set your passphrase, Pagefurl shows you a recovery code: thirty letters and digits in six groups. Save it outside Pagefurl, in a password manager, on a printed note in a drawer, or as the file you can download. If you forget your passphrase, the code opens your scripts and lets you set a new one. If you lose both the passphrase and the code, your scripts can’t be opened by anyone, including us. We keep no copy of either. Export regularly so you always hold a readable copy too.
What is not encrypted
Some things stay readable, because the app needs them or because you send them to us on purpose: your name and email address; the contact line you put on title pages; messages you send to support; how many scenes and words a project has, whether it is a screenplay or a novel, and when it was last saved; and the fingerprint of each saved version, which shows only whether two versions are identical. Pictures added before encryption was switched on, in October 2026, are stored unencrypted at unlisted web addresses; pictures added since are encrypted like everything else.
Where it is stored
Pagefurl runs on Base44 (Wix.com Ltd.). App data is stored in the United States, encrypted at rest with AES-256 and in transit with TLS, in a service certified to SOC 2 Type II and ISO 27001. Base44’s own terms give it broad rights over data stored in apps built on it, including the right to use that data to train its AI models. That is one reason Pagefurl encrypts your writing before it gets there: whatever those terms allow, what Base44 holds of your script is ciphertext.
Earlier versions and the Trash
While you write, Pagefurl keeps earlier versions of each project: the first change in a session, then at most every fifteen minutes. It keeps the newest forty, then one a day for ninety days, then one a week for a year. Restoring a version first saves what you have now, so a restore can always be undone. A deleted project goes to the Trash for thirty days with its versions, and can be brought back. All of it is encrypted with your key.
Your own copy
Export is always free, whether or not you subscribe. Download everything, in the account menu, gives you one file with every project as Fountain and Final Draft or Word and Markdown, your pictures, and a complete Pagefurl backup that Restore a backup in the Projects menu can bring back whole. The backup file is not encrypted. Keep it somewhere safe.
Your devices
After you enter your passphrase on a device, the key stays there, in the browser’s own storage, until you sign out or choose Lock on this device in Writer profile. A copy of unsaved work is kept on the device until it reaches the server, encrypted with the same key, and removed when you sign out. On a shared or public computer, sign out when you finish.
Browser or installed app
The installable Pagefurl is the same web page in its own window. It is not a browser extension. It cannot see other websites, your files or anything else on your computer. Pagefurl loads no outside scripts, fonts or trackers; everything comes from pagefurl.com.
Signing in
Sign-in is handled by Base44 with your email address, or by Google if you choose that. Your passphrase is separate from your sign-in password on purpose: signing in proves who you are, the passphrase unlocks what you wrote. Someone who got into your account would still need the passphrase to read anything.
Found a problem?
If you find a security flaw in Pagefurl, write to hello@pagefurl.com. We read every message and fix real problems first. If we ever learn of a breach that affects you, we tell you without delay, in plain words, with what it means for your work.