How this website collects, uses, protects, transfers, and deletes personal information.
This notice is written in American English and applies worldwide. It describes the current operation of the website. Jurisdiction-specific protections are cumulative: where a law gives a visitor stronger rights, the stronger right controls.
Current deployment status: optional audience measurement is disabled and will remain off for this deployment. It may be activated only through a separate administrative change after consent controls and the legal assessment are reviewed again.
No audience statistics are displayed publicly. The administrator-only dashboard reports estimated unique browsers, not identified people.
1. Scope and controller
This notice covers the public website, public samples and downloads, requests for protected reading access, passwordless reader-room authentication, critiques and factual corrections, professional and rights inquiries, and—only after valid consent and administrative activation—first-party audience measurement. It does not cover third-party websites reached through external links.
The controller is Liana Marie Sive. The project does not appoint a data protection officer because it does not currently conduct the type or scale of processing that would ordinarily require one. The controller has not appointed an EEA or United Kingdom representative. On the current operating facts—no behavioral monitoring, no sales or subscriptions, no public account program, and only individually initiated scholarly, professional, rights, critique, correction, and review-access correspondence—the documented position is that the representative requirement does not apply. This determination must be reviewed before analytics, paid access, subscriptions, public accounts, or systematic EEA or United Kingdom campaigns are introduced.
2. Notice at collection
The following table describes the categories collected, their sources, purposes, recipients, and ordinary retention. Required fields are identified where a form is used. Do not submit sensitive information unless a form expressly requests it.
| Category | Examples and source | Purpose and lawful basis | Recipients | Ordinary retention |
|---|---|---|---|---|
| Anonymous audience measurement | Random browser and session identifiers, public page path, language, broad source category, referring domain, and event time, supplied by the browser only after consent. | Measure and report estimated unique browsers and aggregate use; consent in the EEA/UK and wherever consent is required. | Google Firebase and Google Cloud acting as service providers. | Pseudonymous visitor records up to 365 days after last use; deduplication records up to 100 days; aggregate page/source records up to 395 days (approximately 13 months); rate-limit hash up to 2 days. |
| Reading-access and account data | Name, email, institution, role, discipline, professional profile, works requested, proposed focus, timing, authentication identifiers, and session records, supplied directly by the requester or generated by the authentication service. | Evaluate and administer access, authenticate the user, deliver requested works, and protect copyrighted material; steps requested before access, performance of the access arrangement, and legitimate security interests. | Google Firebase/Cloud; transactional email provider; controller. | Inactive requests and ended-access administration reviewed for deletion after 24 months; necessary security records may be retained longer for an incident or legal claim. |
| Critiques, corrections, and permissions | Works read, critique or correction text, attribution choice, private notes, correspondence, and separate permissions for editorial, confidential professional, or public quotation use. | Receive and evaluate criticism, correct factual errors, preserve provenance, and use quotations only within the permission granted; consent, license, requested service, and legitimate editorial interests. | Controller; selected agents, publishers, editors, or scholars only within the permission chosen; service providers. | Reviewed at least every 24 months; retained only while needed for editorial provenance, permission evidence, dispute prevention, or another stated legal purpose. |
| Professional and rights inquiries | Name, email, organization, role, country, rights territory, requested materials, meeting availability, message, and correspondence. | Respond to representation, publication, rights, scholarly, museum, centennial, and professional inquiries; requested precontractual steps and legitimate professional correspondence. | Controller and relevant professional advisers or recipients when requested or reasonably necessary. | Inactive professional inquiries are reviewed for deletion after 24 months. |
| Security and diagnostic logs | IP address used transiently for rate limiting, user-agent string, App Check token status, timestamps, error records, sign-in events, and provider logs. | Prevent abuse, authenticate requests, investigate errors, protect systems and copyrighted works, and comply with law; legitimate interests and legal obligations. | Google Firebase/Cloud, email provider, security providers, and authorities when legally required. | Rate-limit hash up to 2 days; ordinary diagnostic logs no longer than 12 months unless an incident or legal obligation requires longer. |
| Communications | Email address, message content, headers, attachments, and response history supplied by correspondents. | Answer the communication, provide requested material, document permissions, and preserve necessary business records. | Controller, Spaceship Spacemail, routing providers, and intended recipients. | According to the applicable inquiry, access, critique, permission, or legal-retention period. |
3. EEA and United Kingdom legal bases
- Consent: optional browser storage and audience measurement; public quotation or promotional use when separately authorized; any optional future marketing subscription.
- Requested steps or contract: review-access requests, authentication, delivery of approved works, and requested rights or publication discussions.
- Legitimate interests: answering professional correspondence, protecting the site and copyrighted works, preserving editorial provenance, preventing fraud and abuse, and maintaining reliable records—balanced against the individual’s rights.
- Legal obligation and legal claims: records required by law, security investigations, dispute resolution, and lawful government demands.
The project does not use personal information for solely automated decisions that produce legal or similarly significant effects. It does not conduct behavioral advertising or data-broker profiling.
4. Cookies, local storage, and similar technologies
| Technology | Purpose | Status | Duration |
|---|---|---|---|
| Privacy-choice record | Remember whether optional statistics were allowed or declined, together with the policy version and choice date. | Strictly necessary to honor the visitor’s choice. | Up to 180 days, then the site asks again. |
| Firebase Authentication and App Check storage | Maintain the private reader-room session, secure callable functions, and prevent abuse. | Necessary when the visitor requests protected access or uses a secured service. | Session or provider-defined security period. |
| Audience visitor and session identifiers | Estimate returning browsers and sessions on public pages. | Optional; created only after consent and only when the system is administratively enabled. | Visitor identifier until withdrawal or browser deletion; consent is renewed at least every 180 days; session identifier expires after inactivity. |
The site honors a browser-enabled Global Privacy Control signal and a recognized Do Not Track signal by treating optional audience measurement as declined. Those signals are not interpreted as a request to delete information previously submitted through forms; a separate privacy request may be used for that purpose.
5. Optional audience measurement
The public site contains a first-party counter designed to estimate unique browsers, not identified people. It is disabled by default. When enabled after legal-readiness review, it operates only on the production domain, never on preview channels, the reader room, or the administrator dashboard.
Consent must be affirmative. Declining has no effect on access to public content. The browser identifier is transformed into a one-way server hash; no advertising identifier, precise location, full referring URL, reading content, or form content enters the audience dataset. The controller can see only private aggregates and limited pseudonymous deduplication records.
Select at any time to review or change the choice. A visitor who previously consented may also request deletion of that browser’s pseudonymous audience identity. Historical aggregate counts that no longer identify a browser are not altered.
6. Children and sensitive information
The site is a general-audience literary and historical project and is not directed to children under 13. The project does not knowingly collect personal information online from a child under 13. Anyone who believes a child has submitted information should contact the controller so it can be deleted or handled as required by law.
Do not submit government identification numbers, financial account credentials, biometric data, precise geolocation, medical or health information, information about criminal allegations, or information about a child unless a specific, lawful purpose is stated and the controller has requested it. The project does not sell or use sensitive personal information for advertising or inference.
7. Service providers, data locations, and international transfers
The project uses Google Firebase and Google Cloud for Hosting, Authentication, App Check, Firestore, Cloud Functions, and Cloud Storage. Firestore’s eur3 multi-region uses Belgium and the Netherlands as read-write regions and Finland as a witness region. Functions and protected Storage are configured in Belgium (europe-west1). Website delivery uses Google’s global network. Transactional email is handled through Spaceship Spacemail and ordinary internet mail-routing providers.
The controller administers the project from the United States. Personal information may therefore be accessed in or transferred to the United States and may be processed in Belgium, the Netherlands, Finland, the United States, and other countries used by the providers for support, security, routing, and lawful operations. Where EEA, UK, Swiss, or Australian transfer rules apply, the controller relies on the applicable Firebase/Google and Spaceship data-processing terms and transfer clauses incorporated into the service agreements and maintains a written vendor and transfer assessment.
EEA representative: not required for the current operation under the documented territorial-scope assessment. United Kingdom representative: not required for the current operation under the same assessment. The site does not currently monitor behavior, sell access, operate subscriptions, or run systematic EEA or United Kingdom user programs. If those facts change, the controller will reassess representative obligations before the change is activated.
8. Retention and deletion
The project keeps personal information only as long as reasonably necessary for the disclosed purpose, security, permission evidence, dispute prevention, or a legal obligation. Active-system deletion may not immediately remove encrypted backups or provider logs, which are overwritten or expire under provider schedules. When information is no longer needed, it is deleted, de-identified, or isolated from ordinary use.
9. Security and data breaches
Security measures include passwordless authentication, Firebase App Check, administrator claims, restricted Storage paths, rate limiting, encryption provided by service providers, least-necessary access, separated public and private records, and retention limits. No system is completely secure.
The controller will investigate suspected breaches and will notify affected individuals, regulators, and other parties when required. This includes applicable U.S. state breach-notification laws, the EEA/UK personal-data-breach rules, and—if the Australian Privacy Act applies—the Notifiable Data Breaches scheme.
10. Rights available to all visitors
Regardless of residence, a person may ask the controller to confirm whether personal information is held; obtain access or a portable copy; correct inaccurate information; delete information; restrict or object to certain processing; withdraw consent for future processing; identify recipients; or complain about handling. Requests are subject to identity verification, legal exceptions, security, and the rights of others.
Send a request through Privacy Request or email lianasive.writer@proton.me. The controller aims to acknowledge a request promptly and respond within 30 days when the Australian complaint process applies and within 45 days for U.S. state requests, subject to lawful extensions. EEA/UK requests are ordinarily answered within one month.
11. EEA, United Kingdom, and Switzerland
Where applicable, individuals have rights of access, correction, erasure, restriction, portability, objection, withdrawal of consent, and complaint to the supervisory authority in the country where they live or work or where an alleged infringement occurred. Consent withdrawal does not affect processing already lawfully completed. If a future operation requires a representative, this notice will be updated before that operation begins.
12. United States and state privacy disclosures
The project voluntarily extends the core rights commonly provided by U.S. comprehensive state privacy laws to all U.S. residents, even when statutory revenue, volume, nonprofit, or small-business thresholds are not met.
- The project does not sell personal information.
- It does not share personal information for cross-context behavioral advertising.
- It does not use targeted advertising or profile a person for legal or similarly significant decisions.
- It does not use sensitive personal information to infer characteristics or for purposes beyond the requested service and security.
- It honors Global Privacy Control as a decline of optional audience measurement.
- It will not discriminate because a person exercises a privacy right.
A verified request may seek access, correction, deletion, portability, or information about categories, purposes, sources, recipients, and retention. An authorized agent may act with signed authorization and appropriate verification. If a request is denied, the requester may reply with the word Appeal and explain the basis; the controller will conduct a separate review and provide available regulator contact information.
California notice
During the preceding 12 months, the project may have collected the categories described in the notice-at-collection table: identifiers and contact information; internet or network activity limited to consented first-party statistics and security; professional or institutional information; correspondence; critique and permission records; and authentication/security records. The project has not sold or shared those categories for behavioral advertising. It does not disclose personal information to third parties for their own direct marketing under California’s “Shine the Light” law.
13. Australia
The controller uses the Australian Privacy Principles as a voluntary baseline for Australian visitors whether or not the Privacy Act’s turnover, small-business, or extraterritorial thresholds ultimately apply. Browsing public pages is anonymous unless a visitor elects optional statistics or submits information. Pseudonyms may be used where lawful and practical.
Australian visitors may request access and correction and may make a privacy complaint by email. The controller will ordinarily acknowledge and respond to an Australian privacy complaint within 30 days. If the matter is not resolved and the Australian Privacy Act applies, the individual may complain to the Office of the Australian Information Commissioner. Likely overseas recipient locations include the United States, Belgium, the Netherlands, and Finland, with additional provider locations possible for global routing, support, and security.
The project will not send commercial electronic messages with an Australian link without the required consent or other lawful basis, clear sender identification, contact details, and a functional unsubscribe mechanism. Any unsubscribe request will be honored within five business days, without a fee or account-login requirement, and the mechanism will remain functional for at least 30 days after the message is sent.
14. Email and direct marketing
The website currently sends only requested or transactional messages, such as sign-in links, access decisions, and replies. No commercial mailing list is enabled. Before any commercial email program is activated, the controller must configure a valid physical postal address, preserve consent or other lawful-basis records, clearly identify the sender and commercial nature where required, provide a one-step unsubscribe method, and honor applicable U.S., European, UK, and Australian timing rules.
15. Critiques, permissions, and public quotations
Copyright in a submitted critique remains with its author. Private editorial use, confidential professional circulation, and public quotation are separate choices. A critique is not promotional copy merely because it was submitted. Any payment, gift, employment, family relationship, or other material connection relevant to a published endorsement must be clearly disclosed. The project will not present a site-controlled page as an independent third-party review service.
16. Changes, contact, and complaints
Material changes will be shown through a new effective date and policy version. A change that materially expands optional processing will not convert an earlier consent into consent for the new purpose. Questions, privacy requests, complaints, and appeals should be sent to lianasive.writer@proton.me.