Privacy

Who is responsible

Familiar Lands Archives is a small fan archive about the work of basedbinkie, run by one person in France. Under the GDPR that person is the data controller.

Contact: contact@familiarlandsarchive.com — write here to ask a question, or to exercise any of the rights below that the account page doesn't already give you.

What is collected

If you only read

Nothing. There is no analytics, no advertising, no tracking cookie and no record of which pages you visited. The site loads no scripts, fonts or images from anyone else's servers — the two libraries it uses and the two fonts it uses are served from this site, precisely so that opening a page doesn't hand your address to a third party. The web server keeps ordinary short-lived access logs, as every web server does; they are not read for anything but keeping the site running.

If you make an account

• Your email address. Used to confirm the account and to reset a forgotten password. Nothing else is ever sent to it — there is no newsletter and no announcements.
• Your password, stored only as a hash. Nobody, including whoever runs this site, can read it.
• A display name, if you set one, and the date the account was created.
• A short bio and a profile picture, if you choose to add them. Both are optional and both are public. The picture is served from a public address, so anybody who has that address can open it without visiting the site.

If you contribute

Every suggestion you send, and every change that is applied to the archive, is recorded with your account and a full copy of what the page said before and after. That record is public — it is what the Recent Changes feed and each page's history are made of. A wiki that cannot show who changed what, and back to what, is not much of an archive.

Suggestions that are still waiting, or that were declined, are seen only by you and by an administrator.

Why, and on what basis

• Your email address is necessary to provide the account you asked for — confirming it is what stops somebody signing up under an address that isn't theirs, and it is the only way back in if you forget your password. (GDPR article 6(1)(b): performance of a contract you entered into.)
• Your display name, bio and picture are there because you chose to put them there, and you can change or remove any of them at any moment. (Article 6(1)(a): consent.)
• The record of who changed what serves the archive's own legitimate interest in being able to show its history, check an edit and undo a bad one. (Article 6(1)(f).)

Who else handles it

Three companies process data on this site's behalf, each under a contract that limits them to that:

• Supabase — the database and the accounts. The project runs in their eu-west-1 (Ireland) region, so the data stays in the EU.
• Resend — sends the two emails this site sends at all: the confirmation of a new account, and a password reset.
• Hostinger — the server the pages and images are served from.

Nothing is sold, and nothing is shared with anyone else. There is no advertising on this site and there never will be.

How long it is kept

Indefinitely — and that is a decision, not an oversight. The law asks that a retention period be stated, not that it be short: data is kept no longer than the purpose needs, and for an archive that purpose does not expire.

• Contributions are kept for good. What a page says today only makes sense beside what it said before, and who changed it. Deleting old versions after a year would break the page histories, the comparisons and the record of who wrote what.
• Your account is kept for as long as it exists. There is no sweep that deletes accounts which have gone quiet: somebody who doesn't edit for a year is a contributor who came back, not an expired record.
• Nothing else accumulates. No mailing list, no analytics, no log of who read what — so there is no third pile of data with a retention question of its own.
• You end it, not a timer. Deleting your account works immediately and takes your address, password, display name, bio and picture with it. That is the real limit on how long any of this is kept, and it is in your hands rather than in a scheduled job nobody would remember had been set up.

Your rights, and how to use them

Most of these don't need you to ask anybody — they are buttons on your account page:

• See what is held about you (article 15) — the summary on your account page, drawn live from the database.
• Take it with you (article 20) — the same answer as a JSON file, one button away.
• Correct it (article 16) — your address, display name, bio and picture are all editable there.
• Erase it (article 17) — deleting your account is immediate and needs nobody's approval. Your contributions stay in the archive, because a wiki cannot unwrite its own history, but your name comes off them: they will read as made by a deleted account, and nothing will connect them to you.

For anything else — restricting or objecting to processing, or a question this page doesn't answer — write to contact@familiarlandsarchive.com. If you think this site has handled your data badly and we can't settle it between us, you can complain to the CNIL, the French data protection authority, at cnil.fr.

Age

Creating an account asks you to confirm you are 15 or older, the age of digital consent in France. It is a statement, not a check — nothing on a page like this could verify an age, and pretending otherwise would be worse than asking honestly.

Cookies

None for tracking, and none for anything else. Signing in stores a session token in your own browser so that you stay signed in between pages; it never leaves your device except to talk to this site's own database, and signing out removes it. There is nothing here to consent to, which is why there is no banner asking you to.

If this changes

This page is part of the site's source code and changes with it, in the open. If what is collected ever changes materially, this page changes in the same breath — and anyone with an account will be told rather than left to notice.