Privacy Policy

Who we are

This site is run by Alex Thorn, an independent author. We are the data controller for the personal data described in this policy.

1. What data we collect

Data you provide voluntarily:

• Name and email address when you create an account or subscribe to the mailing list.
• Any text you submit in a comment or contact form.

Data collected conditionally, only with your consent:

If you click «Accept» in the cookie banner, we collect the following to improve the site and understand what readers enjoy:

• Reading activity: which book and chapter you opened, and when.
• Session data: roughly how long you spend on a page across a visit.
• Comments and ratings you post to books and chapters.
• A device identifier to associate activity when you are not logged in. No name or exact location is stored with it.

2. Legal basis (GDPR)

• Consent (Art. 6(1)(a)) — for reading-activity tracking, done only after you accept.
• Performance of a contract (Art. 6(1)(b)) — for account creation, comments and ratings.
• Legitimate interest (Art. 6(1)(f)) — for security and basic functionality (essential cookies, theme, session).

3. How we store and process data

Data is stored securely in a hosted European database (Supabase, EU region) managed under data-processing agreements. Access to usage analytics is restricted to the site operator.

4. Retention

We keep accounts, comments and ratings for as long as your account exists. Usage/device identifiers may be retained for up to 12 months for analytics, then deleted or anonymised.

5. Your rights

Under GDPR you may:

• Access a copy of data we hold about you.
• Rectify inaccurate data (e.g. change your display name).
• Erase your account and associated data («right to be forgotten»).
• Withdraw consent to tracking at any time (via the consent banner or settings).
• Port your data upon request.
• Object to processing based on legitimate interest.

To exercise any right, contact us via the contact page. You may also lodge a complaint with your local data-protection authority.

6. Sharing

We do not sell personal data. We share data only with service providers needed to run this site (hosting, email delivery, database), each bound by processing terms and located in secure jurisdictions.

7. Children

This site is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect their data without a parent's consent.

8. Cookies

See our Cookie Policy for details on what cookies we use and how to manage them.

Contact

For any privacy question, use thecontact page.