Privacy
FullCastFiction, operated from Spain, is responsible for the data described here. Questions and requests (access, correction, deletion) go to contact@fullcastfiction.com.
What we store
| Data | Why it exists |
|---|---|
| Account: username, display name, email, password (stored as a hash, never the password itself), optional bio, avatar colour, profile privacy setting | to sign you in and render your profile |
| Activity: listens and ratings, reviews, lists and their items, list comments, likes, follows, listening status and listen list, personal tags | to show your own history, and to show it to other members when your profile is public |
| Sign-in sessions: a server-side session record (issued, expiry, revocation) plus a token and a small cached profile in your browser's localStorage | to keep you signed in for up to 30 days and to draw your own header without a round trip |
| Corrections you submit, with their review status, and your account id if you were signed in | to review the suggestion and keep the catalogue's edit history auditable |
| Short-lived counters for repeated sign-in attempts | to slow down password guessing |
| Anonymous retailer click events: title, retailer, region, view grouping token and timestamp | to measure aggregate outbound-link use; the event has no account identifier or destination URL |
What we do not do
- No advertising, no cross-site trackers, no data sold or shared for marketing. Cookieless Cloudflare Web Analytics measures aggregate page views.
- Product analytics (PostHog, hosted in the EU) runs only after you accept it in the banner. Until then no request goes to PostHog. With consent it records page views, active time on a page and outbound retailer clicks against a random per-site browser id; it never records what you type, search for or who you are, and session recording, heatmaps and autocapture are off. Your choice is kept in your browser (
pa_consent_v1) and can be withdrawn from the footer at any time. Member, list, account and settings pages are never reported. - No email is sent by this site: there is no newsletter, no notification email and no password-reset email. Corrections and account state are tracked in the app instead — which also means a forgotten password is handled through the contact route, not by a reset link.
- No audio, and no behavioural profile built from your listening for anyone else's use.
- Retailer click events are stored in the Cloudflare-hosted D1 database with no automatic expiry currently implemented. They are used for aggregate measurement, are not sold or shared for marketing, and are not joined to account identity. The current event recipient is Cloudflare as our infrastructure provider; the retailer itself receives the visit only after you follow the outbound link and then applies its own policy.
Who else necessarily sees something
- Cloudflare hosts the site and the database, so it processes every request and stores the rows above as our infrastructure provider.
- PostHog (EU) receives the analytics events described above, and only after you accept the banner.
- GitHub receives the text of a correction you submit (what you propose and any note, not your IP address or account name), so the operator is notified; it is kept in a private repository.
- Publisher and retailer servers see your IP address when a cover image loads from their CDN, and again when you click through to listen or buy. From that point their own privacy policies apply.
Your controls
- Profile privacy — public or private — and your profile text live in Settings.
- Delete account (Settings, confirmed with your password) runs as one transaction that removes your account row and your activity — listens and ratings, reviews and the likes on them, lists and their items, list comments, likes, follows, listening status and listen list, personal tags — and revokes every session, including sessions already open elsewhere.
- Your correction submissions are deliberately kept as catalogue edit history, because they document what changed in the catalogue and why; the account id recorded with them stays, is seen only by whoever reviews corrections, and is never published with your name. If a submission contains something you want removed, say so through the contact route.
Children
This is a general-audience catalogue with no age gate. We do not knowingly hold accounts for children under 13; if you believe a child has one, tell us via the contact route and it will be removed.
Changes to this page
The date at the top changes when this text changes. The rule this project works to: no new data store or new third-party script may ship without updating this page in the same change.