Privacy

1. Who is responsible

Threefold Dictum is run by an individual, contactable atthreefolddictum@gmail.com. For the purposes of the UK and EU General Data Protection Regulation, that person is the data controller for the information described here.

2. What we collect

When you create an account

• Your email address, and — if you sign in with Google — the account identifier Google returns. We never receive your Google password.
• What you put on your profile: username, display name, biography, website, avatar image address. All of it optional except the username, and all of it public.
• When your account was created and last updated.

When you write

• Your articles and comments — title, standfirst, body, subjects — and their status, timestamps, and which article a reply answers.
• A moderation record: who reviewed a submission, when, and any note they wrote to you.
• Drafts you have not published. These are visible only to you and to moderators.

Automatically

• Ordinary server logs kept by our host, including IP address and browser, for security and for diagnosing faults.
• No analytics, no advertising, no tracking of any kind. We do not know how many people read a page, and we are not trying to find out.

3. Why, and on what legal basis

• To give you an account and publish your writing — necessary to perform our agreement with you (GDPR Article 6(1)(b)).
• To moderate submissions, prevent abuse, and keep the site secure — our legitimate interests in running a usable public forum (Article 6(1)(f)).
• To answer you when you write to us — legitimate interests, or the agreement between us.

Anything you publish is public by design. A published article, its subjects, and your profile can be read by anyone and may be indexed by search engines.

4. Who else handles it

We use three services, and no others:

• Supabase — the database and the authentication system. Your account, profile, and writing are stored there. The servers are in the United States.
• Vercel — hosting and domain. It serves the pages and keeps the server logs described above.
• Google — only if you choose to sign in with a Google account, in which case Google's own privacy policy governs what they do.

We do not sell your data, and we do not share it with anyone elseexcept where the law requires it. Because our providers are in the United States, your data is transferred outside the UK and EEA; those transfers rely on the providers' standard contractual clauses.

5. Cookies

We set one cookie: the session cookie that keeps you signed in. It is strictly necessary, so we do not ask for consent for it, and there is no cookie banner because there is nothing to consent to.

Your chosen theme and whether the sidebar is collapsed are kept in your browser's local storage. Those never reach our server and identify nobody.

6. How long we keep it

• Your account and profile — until you ask us to delete them.
• Published articles and comments — until you delete them, or until the account is closed.
• Server logs — for the period our host retains them, typically a few weeks.
• Moderation records — kept while the account exists, so decisions can be explained if questioned.

7. Your rights

Under the GDPR you may ask us to:

• tell you what we hold about you, and give you a copy;
• correct anything wrong;
• delete your account and your writing;
• restrict or object to how we use it;
• provide your data in a portable form.

Write to threefolddictum@gmail.com and we will respond within one month. There is no charge.

Deleting an account removes your profile and your writing. Where you have replied to someone, or someone has replied to you, the reply may remain with your name removed, so that the conversation still makes sense.

If you think we have handled your data badly, please tell us first — but you have the right to complain to your national data protection authority regardless.

8. Children

This site is not intended for anyone under 16, and we do not knowingly hold data about them. If you believe a child has an account here, write to us and we will remove it.

9. Changes

This policy will change as the site does — comments and account deletion in particular are still being built. The date at the top says when it last changed, and substantive changes will be announced on the site.

10. Contact

Any question about your data, or to exercise any of the rights above:threefolddictum@gmail.com.