Privacy Policy

1. Scope and contact

Universal Network Development LLC currently holds SerumWrites. This notice describes the present publishing website. Contact serumwrites@gmail.com for privacy questions or requests. Do not include passwords, card numbers, identity documents or private manuscripts in an initial request.

2. Visiting the site

Cloudflare receives network information needed to deliver and protect a hosted page, such as an IP address, requested URL, time and browser or protocol information. Necessary hosting and security processing can occur before a cookie choice; it is distinct from optional audience analytics. Cloudflare may use security cookies under its own policies.

Public browsing, search and rotating promotions do not require an account or load advertising pixels, audience analytics, session replay, third-party chat or AI forms. If you choose Google sign-in, Google authenticates you and Supabase processes your provider identity, email, authentication/session records and security metadata. We do not receive your Google password. We use your account identifier and chosen display name to provide the reader account.

3. Local preferences

A versioned consent choice is stored in localStorage for up to 180 days. It contains categories, a notice version and timestamps, not an account identifier. Local storage is not described as automatically anonymous.

Only if you allow preference storage do we persist saved story identifiers or a motion preference. Without that permission, those controls work for the visit. Withdrawing preference permission removes these keys. Device reduced-motion settings continue to apply. These preferences are not sent to a SerumWrites database or synchronized across devices.

4. Actual providers and external platforms

Cloudflare delivers the website and runs the account gateway. Supabase hosts authentication and the dedicated reader database in the United States (East US/Ohio), including your profile preset, saved story identifiers, timezone/appearance settings, notification read state, email-topic choices and exact-version agreement records. Google handles the chosen sign-in and the Gmail support mailbox. GitHub hosts private source/builds; it is not a visitor tracker. Account data is not sent to a reader-facing AI in this release.

Apple Podcasts, Amazon Music and Spotify distribute the audio series. Royal Road, Wattpad and Scribble Hub are reading destinations. Linktree, X and Ko-fi are other external destinations. Visiting them brings you under their own privacy practices. RedCircle hosts audio distribution; we do not currently embed its player or fetch its feed in visitors’ browsers. Platforms may supply creator statistics under their account terms; that does not mean this website collects every field they process.

No direct payment processor, newsletter-delivery service, analytics provider or AI processor is active in this release. Optional email-topic choices record what future updates you request; delivery is not promised until the sender is activated. Marketing is not a condition of an account. We do not sell account information or share it for cross-context behavioral advertising. New material purposes/providers require an updated notice and any required choice before processing begins.

5. Purposes and disclosures

Necessary processing supports page delivery, security and responding to a message you choose to send. Optional preferences support requested settings. This website does not currently sell personal information, use behavioral advertising, send marketing messages or make consequential automated decisions about people.

Acknowledging this notice is not blanket consent for every processing purpose. Accepting Terms does not activate optional analytics, advertising, replay, chat or AI transmission. Required choices must be specific and recorded separately. Information may be disclosed where law requires or reasonably necessary for security, fraud prevention or legal claims, subject to applicable safeguards.

6. Retention and security

The browser consent choice expires after 180 days or a notice-version change. Optional local settings remain until removed, consent is withdrawn or site data is cleared. Reader profile, library and preferences are kept while the account is active; contact the privacy address to request access, correction or closure/deletion. Closure requests are reviewed under the applicable deadline; only records needed for legal obligations, disputes or security are retained afterward, for that purpose and duration. We review inactive accounts after 24 months. Policy/marketing-choice evidence and support records are reviewed for necessity at least annually, rather than retained as a marketing contact indefinitely. These are operator procedures; this notice does not claim an automated deletion service.

We use HTTPS, server-only Secure/HttpOnly/SameSite session cookies, per-user database access policies and restricted staff permissions. Account tokens are not placed in browser localStorage. Account access checks current identity and current required policy versions. No service can promise zero risk or uninterrupted access; account recovery depends on the authentication provider, and no enterprise certification or verified disaster-restoration claim is made.

7. Requests and withdrawal

Write to serumwrites@gmail.com to request access, correction, deletion or information. We verify requests proportionately, explain applicable exceptions, and respond under the law that applies. You may contact your relevant regulator. An active account or agreement to new Terms is not required to make a request.

Cookie settings and browser controls remove local preferences. Withdrawal stops future optional activity; deleting data already held elsewhere needs a separate request to the appropriate holder. Some records may require restricted legal retention, and backup deletion can follow a documented cycle. We do not promise immediate erasure from unverified provider backups.

8. Children and international visitors

Reader accounts in this release are for adults aged 18 or older and are not designed for children. We ask for an age affirmation, not a birth date. Contact the privacy address if you believe a child supplied account information, without unnecessarily sending additional sensitive information. Public browsing and external platforms have their own applicable restrictions.

Readers may access the site internationally where lawful; direct checkout and paid international sales are not activated. Account, hosting and support processing may take place in the United States and other provider infrastructure locations. We use providers subject to applicable data-processing terms and transfer arrangements, including standard contractual clauses where required. Depending on applicable law, you may have rights of access, correction, deletion, restriction, portability or objection and the right to contact your supervisory authority. Contact serumwrites@gmail.com to exercise applicable rights; Florida law does not remove mandatory protections elsewhere.

9. Changes

Dated versions remain in the Legal Centre. A significant new purpose or provider requires notice and any legally required consent or other action before it begins. A material account agreement update and an optional tracking consent update are separate events.

Contact

serumwrites@gmail.com