Privacy Policy | Hollow's Edge

1. Who We Are

Hollow's Edge is an independent fiction publishing website operated by a sole trader author. This policy explains how we collect and use personal information when you visit our website, sign up for our newsletter, create an account, or purchase digital goods.

If you have questions about this policy, please contact us at privacy@hollows-edge.com.

2. What Information We Collect

Information you provide directly

Email address: when you sign up for our newsletter or create an account.
Display name: if you choose to set one in your account profile.
Payment information: handled entirely by Stripe. We never see or store your card number, bank details, or billing address. Stripe may share a billing country and last-four digits with us for order records.

Information collected automatically

Usage data: pages visited, time spent, reading progress within The Vault. This is used to power the reading progress feature and to improve the site.
Log data: IP address, browser type, referring URL. Collected automatically by our hosting provider (Vercel) and retained for a limited period for security purposes.

3. How We Use Your Information

To operate your account and allow you to sign in.
To fulfil purchases and provide access to purchased digital content.
To send you the newsletter you subscribed to (you may unsubscribe at any time via the link in any email).
To send transactional emails: purchase confirmations, password reset, and similar notifications.
To save and restore your reading progress within The Vault.
To maintain security and prevent abuse.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Third-Party Services

We use the following services to operate this website. Each has its own privacy policy governing how it handles data:

Supabase: authentication and database hosting. Stores your account information, purchase records, and reading progress. Data is hosted on servers within the EU (Ireland region by default). Supabase Privacy Policy
Stripe: payment processing. Processes all card payments. Stripe is PCI-DSS compliant and we do not handle your raw payment data at any point. Stripe Privacy Policy
Beehiiv: newsletter platform. Stores your email address and newsletter subscription preferences if you opt in to our mailing list. Beehiiv Privacy Policy
Resend: transactional email delivery. Used to send purchase confirmations and account emails. Resend Privacy Policy
Vercel: website hosting and edge delivery. Processes traffic logs as part of normal hosting operations. Vercel Privacy Policy

5. Cookies

We use only the cookies strictly necessary to operate this website:

Session cookies: to keep you signed in across pages.
Preference cookies: to remember lightweight UI settings.

We do not use third-party advertising cookies or tracking pixels. You may disable cookies in your browser settings, but doing so will prevent you from staying signed in.

6. Data Retention

We retain your account data for as long as your account remains active. If you request deletion of your account, we will remove your personal data within 30 days, except where we are required to retain certain records for legal or financial compliance purposes (such as purchase records, which Stripe and applicable tax law may require us to keep for a period of years).

7. Your Rights

Depending on where you live, you may have rights including:

Access: request a copy of the personal data we hold about you.
Correction: ask us to correct inaccurate data.
Deletion: ask us to delete your account and associated personal data.
Objection: object to certain types of processing, including marketing emails.
Portability: request your data in a portable format where technically feasible.

To exercise any of these rights, email privacy@hollows-edge.com. We will respond within 30 days.

You may also unsubscribe from our newsletter at any time using the unsubscribe link in any newsletter email.

8. Children's Privacy

This website is intended for users aged 16 and over. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Security

We take reasonable measures to protect your data, including using HTTPS encryption, secure authentication, and limiting access to personal data. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top of this page will reflect any changes. Continued use of the website after changes are posted constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests, please contact us at privacy@hollows-edge.com.