Contents
Reading or writing erotic fiction is personal. Fictera is designed to collect as little data as possible, show it to no one and genuinely erase it when you ask. This policy explains which data, why and for how long, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1.Data controller
The data controller is [TO BE COMPLETED: publisher’s name], [TO BE COMPLETED: address].
For any question or request about your data: [TO BE COMPLETED: privacy email address].
Data protection officer: [TO BE COMPLETED: DPO, or “none appointed”].
2.Our commitments
- No advertising, no advertising trackers, no embedded social networks.
- No selling or renting of data, to anyone.
- No third-party service loaded on chapter reading pages.
- Your IP address is not recorded in our database.
- Reading requires no account; an account only requires an email address.
- Deleting your account genuinely erases your data.
3.Sensitive reading data
Your favourites, lists, kudos, reading progress and exclusion preferences may reveal your sexual orientation or preferences. We treat them as special category data under article 9 GDPR.
In practice:
- this data only exists because you create it yourself (adding a favourite, a list, a kudos, saving an exclusion): that action expresses your explicit consent, which you withdraw at any time by deleting it;
- it is private: nobody else sees it. Only the total number of kudos and reads of a story is public, never who gave them;
- it is used only to provide these features: no profiling, no advertising, no sharing;
- internal access is limited to administrators, for security or moderation needs.
4.Data processed, purposes and retention
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email, password (hashed, never in clear text), sign-up date, preferred languages, interface language (to write to you in your language) | Create and secure your account, send service emails | Performance of the Terms (art. 6.1.b) | Until the account is deleted |
| Login session (token, browser) | Keep you signed in | Performance of the Terms | Until you log out or the session expires |
| Public author profile (pen name, bio, languages), stories and chapters | Publish your texts | Performance of the Terms | Until they or the account are deleted (or anonymised, at your choice) |
| Favourites, lists, kudos, reading progress, tag and warning exclusions | Your library features | Explicit consent (art. 9.2.a), expressed by your action | Until they or the account are deleted |
| Chapter read: random identifier hashed with a daily salt, chapter, day | Count one read per visitor per day | Legitimate interest (aggregated statistics) | 30 days, then only the aggregated total is kept |
| Reports: reason, description, optional email and the language of the form (to answer you in that language) | Handle notices of illegal content (DSA) | Legal obligation (art. 6.1.c) | 12 months after the report is closed |
| Automated analysis results, log of moderation decisions | Moderate, state reasons for decisions, answer authorities | Legal obligation and legitimate interest | [TO BE COMPLETED: duration to be confirmed (proposal: 3 years)] |
6.Recipients and processors
Your data is only accessible to the Fictera team, as far as needed, and to the following technical providers, who act on our instructions:
- Vercel Inc. (United States): hosting and delivery of the website. Like any host, Vercel technically processes IP addresses to route requests and may keep them briefly in its logs.
- Neon: database, hosted in a European Union region ([TO BE COMPLETED: exact region]).
- Resend (Plus Five Five, Inc., États-Unis): sending service emails (address confirmation, password, moderation). These emails are neutral and never contain an excerpt of a text.
- OpenAI (United States): automated analysis of the text of published chapters, for moderation. No account data is sent.
- Plausible Analytics (European Union), only if audience measurement is enabled.
- Sentry (European Union region), only if error tracking is enabled. It only receives technical server errors, without IP address, cookie or account data.
We may also disclose data to judicial or administrative authorities that request it under the conditions provided by law.
7.Transfers outside the European Union
Providers based in the United States (Vercel, OpenAI) are covered by the EU–US Data Privacy Framework and/or by the European Commission’s standard contractual clauses.
8.Deleting your account
Deleting your account, available from your account page, permanently erases your email, password, sessions, favourites, lists, kudos and progress. For your stories, you choose between deleting them and keeping them online as “Anonymous”, with no link to you (see the terms of use).
Database backups are erased in their normal rotation cycle ([TO BE COMPLETED: backup retention period]). Only data that a legal obligation requires us to keep may be retained, for example the elements of a file passed on to the authorities.
9.Your rights
You have the rights of access, rectification, erasure, restriction, portability and objection, the right to withdraw your consent at any time and, under French law, to give instructions about your data after your death.
Most of them can be exercised directly from your account (edit, delete). Otherwise, write to [TO BE COMPLETED: privacy email address] from the address linked to your account. We answer within one month.
You can lodge a complaint with the French data protection authority (CNIL): www.cnil.fr/fr/plaintes, or with the authority of your EU country of residence.
10.Security
Connections are encrypted (HTTPS), passwords are hashed, access to administration is restricted to a few people and data is stored with providers that encrypt it at rest. As no measure is infallible, we will inform you and the CNIL of any data breach that puts you at risk.
11.Minors
Fictera is not open to minors. If we learn that an account belongs to someone under 18, we delete it along with its data.
12.Changes
This policy may change, for example if new providers are added. The date of the last update is shown at the top of the page; registered users are notified by email of any significant change.