Last updated: 25 October 2026
We use your statement or essay only to write your review. We never sell your data and never use your writing to train AI.
A single review's statement is deleted once the review is written, but the report (which quotes your statement) is kept so your results link keeps working. If you have an account, your essays and reports stay in your dashboard until you delete them.
Analytics and advertising cookies are off unless you click Accept, and you can change your mind any time under Cookie settings at the bottom of every page.
You can ask us to see, correct or delete your data at any time: email support@statementory.com.
Statementory ('we', 'us', 'our') is run from Spain and is the data controller for the personal data you give us when you use statementory.com. For anything to do with privacy, email support@statementory.com or use statementory.com/contact.
Single reviews (UCAS, and Common App reviews bought through the old single checkout): your email address, your statement, the course and universities you give us, whether you ticked the box for tips and offers, and how you found us (the campaign tags in the link you arrived on and the website you came from). Stripe collects your payment details; we never see your card number.
Free previews (UCAS): your email address, your statement and, if you give them, your name and course, plus how you found us. Common App free previews (offered from 19 to 25 October 2026) worked the same way, with the prompt you chose.
Accounts (packs, Common App, Pro, Schools & Mentors): your email address; your name if you sign in with Google or add it; a password only if you set one (stored as a one-way hash); your saved profile (name, course, target universities); your essays and statements, the prompt and intended major you choose, and your reports; your credit or token balance and whether you have used your free Common App review. If you sign in with a six-digit code we email you, the code is stored only as a hash and expires after 10 minutes.
Free Common App review: we also keep a fingerprint of the essay, made of hashed fragments of its wording that cannot be turned back into the text, used only to stop the same essay receiving a second free review under another account.
Schools & Mentors: the names, courses, target universities and statements of the students a teacher or mentor adds. For that data we act on behalf of the school or mentor, who is responsible for telling their students.
Free tools: text you paste into the free AI checker is sent to Anthropic to produce the result and is not stored by us. The character and word counters run in your browser and send nothing.
Blog reminder list: your email address and the page you signed up on, if you ask for a reminder when the writing season opens.
Trustpilot reward claims: your email address and the link to your review, if you claim the free report.
Offer-results survey: if you answer the optional email we send after decision season, the universities or colleges you name, the result for each and, optionally, your firm choice. It is stored with your email address and your review's score, and only if you tick the consent box, to check and improve our scoring. It is never published.
Emails to support: whatever you choose to tell us.
Technical data: to keep the service secure, our hosting provider records your IP address and browser details in short-lived server logs, and the sign-in and free-preview forms run a Cloudflare Turnstile check to stop bots.
Cookies and similar storage: see section 8.
We rely on: (a) Contract: to write and deliver the review, preview or report you asked for, to run your account and to take payment; (b) Legitimate interests: to keep the service secure and prevent fraud (including the Turnstile check and the essay fingerprint that keeps the Common App free review to one per student), to understand which websites and campaigns bring us customers, and to send customers and free-preview users the few service-related emails listed in section 4, which you can stop with one click; (c) Consent: for analytics and advertising cookies, for tips and offers by email, and for using your offer-results survey answers; you can withdraw consent at any time; (d) Legal obligation: to keep payment and accounting records for as long as tax law requires.
We use your email address to deliver your review or preview, to sign you in and to run your account. We do not sell your personal data, and we do not share it with anyone for their own marketing.
Besides the emails you ask for, we may send: one reminder the day after a free preview; after a paid UCAS review, one email asking you to recommend us to a friend and one asking for an honest Trustpilot review (with a free report as thanks, whatever rating you give); and, after decision season, the optional offer-results survey. We send tips and offers only if you ticked the box. Every one of these emails has a one-click unsubscribe link, and once you unsubscribe we keep your address on a do-not-email list so it stays that way.
Your score and report are produced automatically by AI. They are advice for you to use as you see fit and are never used to make any decision about you.
These companies process data for us, only on our instructions: Anthropic (the Claude AI model that writes reviews and previews; under our API agreement your text is not used to train its models); Winston AI (an independent AI-detection service that scores how machine-like each sentence reads; it receives only the text, with no name or contact details); Stripe (payments); Resend (email delivery); Neon (our database); Vercel (website hosting and cookieless page-view statistics); Railway (the server that runs reviews in the background); Inngest (background job scheduling); Cloudflare (the Turnstile bot check and our inbound email); and Google (sign-in, if you choose Sign in with Google).
Only if you accept cookies: Google (Google Analytics and Google Ads), Microsoft (Microsoft Advertising), Meta (the Meta Pixel) and TikTok (the TikTok Pixel) receive information about your visit, such as the pages you view and whether you started a checkout or made a purchase, and its value. They use it to measure our ads and, under their own privacy policies, as independent controllers. We never send them your statement, your essay or your email address.
Our database is hosted in London. Several of our providers (including Anthropic, Stripe, Resend, Vercel, Railway, Inngest, Cloudflare, Google, Microsoft, Meta and TikTok) are based in, or process data in, the United States; Winston AI is based in Canada. Where data leaves the UK or the European Economic Area, we rely on adequacy decisions (including the EU-US Data Privacy Framework and its UK extension, where a provider is certified) or on Standard Contractual Clauses. Contact us for more information about these safeguards.
Statements submitted for single reviews are sent to our AI model, and the statement itself is deleted as soon as the review is generated, or within 7 days if checkout is never completed. The report we send you quotes your statement sentence by sentence, and it is kept so the link to your results keeps working; ask us and we will delete it. Free-preview statements are deleted within 48 hours (they are kept for that short window only so you can order the full report without pasting again); the preview itself is kept with your email address. If you have an account, your essays, statements and reports are kept in your dashboard so you can compare drafts: 'Clear saved data' removes your saved profile and earlier statements, 'Delete my account' removes everything, and you can also ask us. We never publish your writing or use it as an example.
Strictly necessary (always on): 'pro_session' keeps you signed in for up to 30 days; 'google_oauth_state' and 'google_oauth_intent' exist only during Google sign-in. Your browser's local storage remembers your cookie choice and keeps unsent drafts of your statement or essay on your own device, and its session storage remembers, for the current visit only, the campaign tags and referring website you arrived with, so a review or preview can record how you found us. After you buy a pack, a one-off 'uet_purchase' cookie carries the order number and amount back from the payment page; it is read once and deleted, and the purchase is passed to Microsoft's ad tag, which stores nothing unless you have accepted cookies.
Only if you click Accept: Google Analytics (_ga cookies) to understand how visitors use the site; and advertising cookies and pixels from Google Ads, Microsoft Advertising, Meta and TikTok to measure whether our ads work. Before you choose, the Google and Microsoft ad tags load in a 'consent denied' mode that sets no cookies, and the Meta Pixel loads with consent revoked.
You can change your choice at any time with 'Cookie settings' at the bottom of every page. Vercel's page-view statistics use no cookies.
Statementory is designed for UCAS and Common App applicants, who are usually 16 to 18. You must be at least 13 to use it. If you are under 14 and live in Spain, a parent or guardian must agree to it first. We do not knowingly collect data from children under 13; if you are a parent or guardian and think your child under 13 has given us data, email support@statementory.com and we will delete it promptly. Advertising cookies are off unless you accept them, and we never use your writing or account details to target ads.
Single-review statements: deleted as soon as the review is generated, or within 7 days if checkout is never completed. Reports and order records (email address, amount, date, how you found us): kept so your results link keeps working and for our accounting records; ask us to delete your report and we will, keeping only what tax law requires for the payment.
Free-preview statements: deleted within 48 hours. The preview and your email address are kept unless you ask us to delete them.
Accounts: kept while your account exists. If you delete your account, we delete it and everything linked to your email address (reviews, essays, sign-in codes, survey answers, reward claims and blog reminders), and anonymise your past single reviews and previews, keeping only the bare record Stripe payments need. Free-review essay fingerprints are kept for up to 400 days; if you delete your account they are detached from it (no email or name attached) and expire on the same schedule.
Unsubscribes: if you unsubscribe, we keep your email address on a do-not-email list for good, so we never email you marketing again.
Cookies: Google, Microsoft, Meta and TikTok keep the data they receive under their own retention settings.
Under the UK GDPR, the EU GDPR and Spanish data protection law, you have the right to access the personal data we hold about you; correct it; have it erased (account holders can delete their account and its data from the dashboard; anyone else can email us); restrict how we use it; receive it in a portable format; object to processing based on legitimate interests, including the follow-up emails; and withdraw consent at any time where we rely on it (including cookies, under Cookie settings). You can complain to the Spanish data protection authority (Agencia Española de Protección de Datos, aepd.es), to the UK Information Commissioner's Office (ico.org.uk) or to the authority where you live, though we would like the chance to put things right first. If you live in the United States, you can ask us to access, correct or delete your data in the same way, whichever state you live in. We do not sell personal data. To use any of these rights, email support@statementory.com.
We will update this page and the date at the top whenever what we collect or how we use it changes, and email account holders about significant changes before they apply.
For any privacy question or request, email support@statementory.com or use statementory.com/contact. We aim to reply within 5 business days, and always within one month.