Privacy Policy

Account information: your registration email, display name and birth year (used solely for age-appropriate content rating), plus your avatar and bio if you set them. If you sign in with Google, we receive your Google email address, display name and profile photo.

Content and activity data: works, comments, favorites, bookmarks, ratings, reading progress, notifications, support tickets and other data you actively generate while using the platform.

Security and technical data: sign-in records (including IP address and browser user-agent) kept to secure accounts and prevent abuse, your timezone if you enable it, and cookies necessary to keep you signed in.

Usage analytics: cookieless, aggregated visit statistics described in Section 3.

We process account and content data to provide reading and publishing features, review notifications, recommendations and content moderation; we process security data to prevent abuse and keep accounts safe. Processing relies on the performance of our service (contract), compliance with legal obligations and our legitimate interest in platform security.

We do not sell your personal information or use it for commercial purposes unrelated to the platform.

Essential cookies keep core features such as sign-in working.

We measure aggregate traffic with Umami, a cookieless analytics service: it sets no cookies, does not track you across websites and does not store your full IP address.

If advertising or marketing cookies are ever introduced, they will be enabled only with your explicit consent (denied by default) and you can withdraw consent at any time. See the Cookie Policy for details.

We share personal data only with the processors needed to operate the platform: cloud hosting (Vercel Inc.), transactional email delivery (Resend), cookieless analytics (Umami Cloud) and, when you use Google sign-in, Google. They process data on our instructions and may not use it for their own purposes.

These providers may be located in, or process data in, countries other than yours, including the United States. Where required, we rely on recognized safeguards such as the EU Standard Contractual Clauses.

Passwords are stored as irreversible hashes and sensitive traffic is encrypted in transit. We apply reasonable technical and organizational measures to protect your data from unauthorized access.

Account data is retained while your account is active. Deleting your account starts a 30-day cooling-off period during which you can cancel; afterwards your personal data is anonymized or deleted and the account cannot be restored. Generated export packages are automatically purged once their download window ends. Any other data is kept only as long as necessary for the stated purposes or as required by law.

Under the GDPR and other applicable laws, you have the right to access, rectify, export and erase your personal data, to restrict or object to processing, to withdraw consent, and to lodge a complaint with your local data-protection authority. Where other laws grant you additional rights (such as Brazil's LGPD, California's CCPA or Thailand's PDPA), we apply the same protections worldwide.

You can exercise these rights in account settings or by submitting a data request ticket. We respond within 30 days. Once a deletion request has been executed, your personal data is anonymized or deleted and the account cannot be restored.

The platform is not directed to children under 13 and we do not knowingly collect their personal data. The birth year you provide is used only to enforce age-appropriate content ratings (All ages / 13+ / 16+ / 18+). If you believe a child under 13 has created an account, contact us and we will delete it.

DeepSpaceTales is independently created and operated by an individual creator (pen name: Xinglan), based in Spain. For questions about this policy or to exercise your data rights, contact us at support@deepspacetales.com.