Privacy Policy

Chumy Spot LLC, of [[ STREET ADDRESS ]], Florida, United States, is responsible for the personal information described here — the “data controller”, if you are reading this from somewhere that uses that term. For anything in this policy, including a request to see or delete your data, write to [[ PRIVACY EMAIL ]].

We are a United States company and our service is operated from the United States. If you use it from elsewhere, your information is handled here — see section 9.

Your account. Email address, and the display name you choose. If you sign in with Google, we receive your email address, name and profile picture from Google — not your Google password. A unique account identifier is generated for you.

Your purchase. A record that you hold access, when it was granted, and the Stripe payment reference. We store the customer identifier Stripe assigns you so a repeat visit does not create a duplicate record.

How far you have read. For each season, the chapter you are on and roughly how far down it you scrolled, so the book opens where you left off across devices.

Technical data. Our infrastructure providers log IP addresses, timestamps and error diagnostics as part of running the service and defending it from abuse.

• Card details. Payment fields are hosted by Stripe inside their own frame. Card numbers never touch our servers, and we could not retrieve one if we tried.
• Analytics and advertising. There is no Google Analytics, no advertising pixel, no session recorder, and no cross-site tracker anywhere in this application.
• Your reading, in any detail beyond your place. We keep a chapter and a scroll position. We do not build a profile from what you read, and we do not sell or share reading data.

• To give you what you paid for — account, entitlement, reading position. Without these there is no way to know that you may read, or where you left off.
• To take payment, and to keep the records tax and accounting law requires us to keep.
• To keep the service working and secure — diagnostics, and preventing abuse and payment fraud.
• To answer you when you write to us.

We do not send marketing email. If that ever changes we will ask you first, and you will be able to opt out at any time.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have never done so and have no plans to.

Google (Firebase and Google Cloud) provides authentication, the database, file storage and the server functions. Our server functions run in the United States (us-central1).

Stripe processes payments and is an independent controller for the payment data it holds. Stripe uses that data for fraud prevention, and sets its own cookies in its payment frame to do so. Their privacy policy governs that processing.

Both are bound by data-processing terms. Where either moves data out of the United Kingdom or the EEA, they rely on the European Commission’s standard contractual clauses or an equivalent mechanism. We pass your data to nobody else, and we never sell it.

We use no advertising or analytics cookies, which is why you are not asked to dismiss a cookie banner. What is stored is strictly necessary for the site to work:

• Sign-in state, held by Firebase Authentication so you are not signed out on every visit.
• Your reading preferences — theme and text size — kept only in your own browser and never sent to us.
• Stripe’s fraud-prevention cookies, set within the payment frame when you visit checkout.

Clearing your browser storage signs you out and resets your reading preferences. It does not affect your purchase.

• Account and entitlement records: for as long as you have an account, since the entitlement is what proves you may read.
• Payment records: as long as tax and accounting law requires, typically six years from the transaction.
• Reading positions: until you delete your account.
• Webhook and diagnostic logs: a short operational period, typically 30 days.

When you close your account we delete your account data and reading positions. We keep the minimum transaction record the law obliges us to keep.

Whoever and wherever you are, you may ask us to show you the personal information we hold about you, to correct it, to delete it, or to give it to you in a portable form. We extend these to everyone rather than only to people whose local law compels it.

Write to [[ PRIVACY EMAIL ]]. We aim to respond within 30 days. There is no charge, and we will not give you a worse service for asking.

Deleting your account removes your profile and your reading positions. We keep the minimum transaction record that tax law obliges us to keep, and nothing more.

The GDPR and UK GDPR can apply to us even though we operate from the United States. Where they do, our lawful bases are: performance of a contract for your account, entitlement and reading position; legal obligation for tax and accounting records; and our legitimate interests in keeping the service running, secure and free of payment fraud.

You additionally have the right to restrict or object to processing, and the right to lodge a complaint with your supervisory authority — the Information Commissioner’s Office in the UK, or your national authority in the EU. Please tell us first if you can, but that is a request and not a precondition.

Using the service means your information is processed in the United States, which has not been found to offer equivalent protection as a matter of course. Our processors rely on standard contractual clauses or an equivalent safeguard for those transfers.

The service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, write to [[ PRIVACY EMAIL ]]and we will delete it promptly.

Buying access requires you to be 18 or over, because a purchase is a contract. See the Terms of Sale.

If we change how we handle your data in a way that materially affects you, we will email you before it takes effect. Lesser revisions will be posted here with a new effective date.