Panthassia Privacy Policy (draft)
Last updated: [DATE]. Controller: [LEGAL NAME / COMPANY NUMBER], [ADDRESS]. Contact: [PRIVACY EMAIL]. ICO registration: [NUMBER]. We follow UK GDPR and the Data Protection Act 2018.
The short version
- Browsing with the app does not send us anything. The app has no analytics, no telemetry and no account requirement. Your history, bookmarks, notes and settings are stored on your computer.
- If you create an account, we store the data listed below on our server so you can use the community and sync your area.
- We do not sell your data and do not run advertising.
Data on your device only (we never receive it)
Browsing history, tabs, bookmarks, notes, timers and settings. The privacy shield blocks known trackers; it runs locally.
Data we hold if you make an account
| Data | Why | Legal basis |
|---|---|---|
| Email address | Sign-in, verification, password reset, account notices | Contract |
| Handle and display name | Shown with your posts and stories | Contract |
| Password | Stored only as a salted scrypt hash. We cannot read it. | Contract |
| Session records | A hashed sign-in token, created, last-used and expiry times, so you stay signed in and can sign out other devices | Contract |
| Your synced area (if you press "Save to account") | Settings, pinned tools, tabs and similar data you choose to sync. Notes are only ever synced as a blob encrypted on your device. | Contract |
| Posts, stories, lore, scenes, characters, reports | To run the community. Public to other members unless stated. | Contract / legitimate interests |
| Moderation records | Who decided what, and why, for safety and accountability | Legitimate interests; legal obligation |
| Search usage counters | A daily count per person, or per hashed network address for signed-out use, to limit cost and abuse | Legitimate interests |
| Waitlist email (landing page only) | If you join the waitlist, we keep your email address to write to you once when an invitation is ready, then delete it when you create an account or ask us to | Consent |
| Invitations | If you use an invitation, we record who invited you, so invitations can be limited and abuse traced | Legitimate interests |
| Technical logs | Request time, route and errors, kept [30] days, to keep the service running and secure. Logs may include your IP address as it reaches our host. | Legitimate interests |
In-app search
If you use "Panthassia search", your search words are sent to our server and on to our search provider ([Brave Search / OTHER]) to get results. Your account identity is not sent to the provider. If you use another search engine in the app, your search words go to that engine under its own policy.
Who receives data (processors)
Our hosting provider ([Fly.io]), our email provider ([Resend]), and, for search, [Brave]. They process data on our instructions. Some are outside the UK; where so, we rely on UK-approved transfer safeguards. [Confirm each provider's data processing terms before launch.]
How long we keep it
Account data until you delete your account, then deleted within [30] days (backups age out within [35] days). Posts you made are removed or anonymised on deletion; moderation records are kept for [12] months. Logs [30] days.
Your rights
You can ask to access, correct, delete, restrict or export your data, object to processing, and withdraw consent. In the app: Account → Export downloads your data, Account → Delete removes your account. Or email [PRIVACY EMAIL]. You may complain to the Information Commissioner's Office (ico.org.uk).
Security
Passwords are hashed; sign-in tokens are stored hashed on the server and encrypted by your operating system on your device; connections use HTTPS. No system is perfectly secure; we will tell you and the ICO of a serious breach as the law requires.
Children
The service is for people aged 16 and over. If we learn that a younger child has an account we will delete it.
Changes
We will tell you in the app or by email before material changes.