Privacy Policy
Effective date: 28 September 2026
Version: 1
1. Who operates this website
This website is operated by FaerieSeraphina.
If you have a question about privacy, personal data, or how your information is handled, you can contact me through the contact page.
2. Information you provide
If you use the contact form, you may provide:
- your name;
- your email address;
- the type of enquiry;
- a subject;
- the contents of your message; and
- files that you choose to attach.
Your message may also contain other personal information, such as usernames or social-media handles, if you choose to include them.
I use this information to receive, understand and respond to your enquiry and, where appropriate, to deal with any issue or request arising from it.
I do not use contact-form submissions to add people to a marketing mailing list. The email service used for contact-form messages is used for transactional email delivery only.
3. Information collected automatically
When you visit the website, normal web-server and security infrastructure may process technical information associated with your request. This can include:
- IP address;
- date and time of the request;
- requested URL;
- HTTP response status;
- referring page;
- browser and operating-system information;
- request and response information; and
- information relating to the Cloudflare edge location handling the request.
This information is used for purposes including website operation, security, abuse prevention, troubleshooting and maintaining service availability.
The website's own Nginx access logs are normally retained for up to 60 days, after which they are removed through the server's normal log-rotation process.
Cloudflare also processes website traffic as part of providing its proxy, CDN and security services. Because Cloudflare operates as a reverse proxy, website requests pass through its infrastructure before reaching the origin server. Cloudflare may process information associated with those requests, including IP addresses, traffic-routing information and other request information, in accordance with its own privacy practices.
Cloudflare's processing and retention of information within its own infrastructure is not controlled by this website.
4. Aggregated website usage statistics
The website uses AWStats to generate statistics about website usage from server access logs.
These statistics are used to understand overall website usage and trends, such as traffic levels, commonly accessed pages, browsers, operating systems and referring sources.
The statistics are aggregated website usage statistics rather than a visitor-by-visitor browsing history. They are retained for up to 24 months for historical comparison and trend analysis.
The underlying Nginx access logs from which these statistics are generated are retained for a much shorter period, as described above.
5. Cookies and browser storage
The website does not use cookies or browser storage for advertising or behavioural tracking.
Contact-form rate-limiting cookie
The contact form uses a first-party cookie as part of its abuse-prevention and rate-limiting mechanism. It helps prevent repeated or excessive submissions from the same browser.
This cookie is used for security and abuse prevention rather than advertising, analytics or cross-site tracking.
Contact-form draft storage
The contact form uses the browser's local storage to temporarily save an unfinished draft.
This allows information entered into the form to survive an accidental page refresh or similar interruption.
Draft data is automatically deleted:
- when the form is successfully submitted; or
- when the stored draft is more than 24 hours old.
The draft is stored in the visitor's browser and is not transmitted to the website merely because it is stored there.
6. Third-party services
The website uses a small number of third-party services to operate its infrastructure and provide particular features.
Cloudflare
Cloudflare provides DNS, content delivery, reverse-proxy and website security services, including WAF and Bot Fight protections.
Website requests pass through Cloudflare's infrastructure before reaching the origin server. Cloudflare therefore processes information associated with those requests as part of providing its services.
Oracle Cloud
The website's origin server is hosted using Oracle Cloud infrastructure. Website data processed by the origin server therefore passes through Oracle's hosting infrastructure.
Brevo
Contact-form messages are sent using Brevo's transactional SMTP service. Brevo acts as the email delivery service for these messages; the contact form does not use Brevo to subscribe visitors to marketing communications.
Brevo's transactional system records delivery-related events. The transactional log retention period for this website is configured to two months.
Contact-form messages are ultimately delivered to the operator's Gmail mailbox. Google therefore processes the resulting email as part of providing Gmail and related infrastructure.
Twitch
The website retrieves certain Twitch channel information through the Twitch API. These API requests are made server-side by the website and are not requests made from the visitor's browser containing the visitor's website information.
The /live page also embeds Twitch's live video player and Twitch chat. When this embedded content is loaded, the visitor's browser communicates directly with Twitch. Twitch may therefore process information associated with those requests according to Twitch's own privacy practices.
7. How long information is retained
Different types of information are retained for different periods depending on why they are needed.
| Information | Normal retention |
|---|---|
| Nginx server access logs | Up to 60 days |
| Brevo transactional logs | 2 months |
| Aggregated website usage statistics | Up to 24 months |
| Contact-form drafts | Up to 24 hours, or until successful submission |
| Contact-form enquiries and attachments | For as long as reasonably necessary for the purpose for which they were submitted |
| Contact-form rate-limiting cookie | For the period necessary for its rate-limiting function |
Contact-form enquiries and their attachments are retained for as long as reasonably necessary to respond to the enquiry, maintain relevant correspondence, and address any resulting issues. When there is no longer a legitimate need to retain them, they are deleted, subject to any legal obligations requiring longer retention.
Third-party providers may retain information independently according to their own policies, contractual arrangements and configured retention periods.
8. Legal basis for processing
Where GDPR applies, personal data is processed on the basis appropriate to the particular activity.
For example:
- information submitted through the contact form is processed because it is necessary to respond to a request made by the person contacting the site and to take appropriate steps in response to that request;
- server and security information is processed for legitimate interests in operating, securing and maintaining the website and preventing abuse; and
- information required to comply with legal obligations is processed where necessary to comply with those obligations.
The particular legal basis may depend on the circumstances of an individual interaction.
9. Security
Reasonable technical and organisational measures are used to protect personal information against unauthorised access, loss, misuse or alteration.
The website uses HTTPS for connections from visitors to the website. Traffic between Cloudflare and the origin server is separately protected using authenticated encrypted connections.
No internet-based service can guarantee absolute security, but reasonable measures are taken to protect the information processed by the website.
10. Your rights
Depending on the circumstances and applicable law, you may have rights concerning your personal data, including the right to:
- request access to personal data held about you;
- request correction of inaccurate information;
- request deletion of personal data;
- request restriction of processing;
- object to certain processing;
- request portability of information where the relevant legal conditions apply; and
- complain to the Information Commissioner's Office (ICO).
You can contact me about a privacy request through the contact page.
You also have the right to complain to the UK's data-protection regulator, the Information Commissioner's Office, if you believe your personal data has been handled unlawfully.
11. International processing
Some of the service providers used by this website operate infrastructure or process information internationally. Where this occurs, the relevant provider is responsible for applying the safeguards required by applicable data-protection law to its processing.
This includes services such as Cloudflare, Brevo, Google and Twitch, where applicable.
12. Changes to this Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes to the website, its services, or applicable legal requirements.
The version and effective date are shown at the beginning of the policy. Material changes will be reflected in an updated version of this policy.
Current version: 1
Effective date: 28 September 2026