Privacy Policy

1. Who we are (data controller)

The data controller is Jenny Raven of London, W5 5EP.

Privacy contact: jenny@jennyraven.com.

2. What we collect

Account data (email, display name, handle, password hash); profile data you choose to add (bio, photos, links, answers); content you post (messages, posts, comments, uploads); and technical data (approximate country derived from your connection — never your raw IP address — device/browser info, and activity logs needed to run and secure the Service).

3. How we use it and our lawful bases

To provide the Service and your account (performance of a contract); to keep the Service safe, prevent abuse and meet legal obligations (legitimate interests and legal obligation); to send service and, where you have opted in, community emails (consent or legitimate interests); and to comply with law-enforcement and child-safety obligations (legal obligation).

Emails we send (such as the weekly newsletter) include a small tracking image and measured links, so we can see whether our emails are being read and delivered properly (legitimate interests). This tells us the first time you open an email and which links you click; we use it only in aggregate to improve what we send, and it is deleted with your account. Unsubscribe links are never tracked.

4. Cookies

We use essential cookies to run the Service (your session, two-factor sign-in, your age confirmation and your cookie choice). We also count page views, but only if you accept when we ask. Embedded media from other services may set their own cookies. See our Cookie Policy for detail.

5. Who we share data with

We do not sell your personal data. We share it only with the service providers who help us run the platform (our "sub-processors"), listed in our Sub-processors page, and with authorities where we are legally required to — including reporting child-sexual-abuse material.

6. International transfers

Some of our providers operate outside your country. Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK/EU adequacy regime or Standard Contractual Clauses.

7. How long we keep it

We keep personal data only as long as needed to provide the Service and meet our legal obligations. When you delete your account we delete or anonymise your personal data, except where we must retain limited records (e.g. for safety, legal or accounting reasons).

8. Your rights

You have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. California residents have the right to know, delete, correct, and opt out of "sales"/"sharing" (we do neither), and not to be discriminated against for exercising those rights.

To exercise any right, contact jenny@jennyraven.com. You can also do much of this from your account settings.

9. Children

The Service is for adults aged 18+ only and is not directed at children. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it and close the account.

10. Security

We use technical and organisational measures to protect your data, including hashed passwords, encrypted transport (HTTPS) and access controls. No system is perfectly secure, but we work to keep your data safe.

11. Complaints and contact

Contact us first at jenny@jennyraven.com. If you are unhappy with our response you can complain to the UK Information Commissioner's Office (ico.org.uk).

We may update this policy; material changes will be notified through the Service.