Privacy policy
1. Who we are
Fractured Realities (fracturedrealities.co) is the controller of the personal data described here. Contact: contact@contact.fracturedrealities.co.
2. What we collect, why, and on what basis
| WHAT | WHEN | WHY | LAWFUL BASIS | HOW LONG |
|---|---|---|---|---|
| Your email address, a salted hash of your password, an optional display name, and account dates | When you join | To run your account and send the welcome email | Contract | Until your account is deleted |
| Your saved member data: research list, followed cases, investigation board, reading positions and display preferences | When you use member features while signed in | To keep them in step across your devices | Contract | Until you delete it or your account |
| A sighting report: the category and account you write and, if you give them, a title, date, place, number of witnesses and a follow-up email; your browser's user-agent string; your account if signed in | When you submit the report form | Research into reported experiences. Reports are not published as case files and your email is not published | Consent (the checkbox on the form) | Until you withdraw consent |
| Analytics: pages viewed, how you arrived, approximate location (country or city), device and browser type, linked to a random identifier in a cookie | Only if you accept analytics cookies (visitors in the UK, EU and Switzerland are asked first) | To understand how the archive is used | Consent | 14 months, as set in Google Analytics |
| Our own page counter: the page address, a two-letter country code, the referring host, a device class and a bot flag. No IP address, cookie or identifier | Every page view | To count visits | Legitimate interests (site statistics) | Kept as statistics |
| Technical data: IP address, browser details and pages requested | Every request, in our hosting provider's logs | To deliver the site and protect it from abuse | Legitimate interests (security) | Per the hosting provider's log retention |
| Emails you send us | When you write to us | To reply and handle requests | Legitimate interests (correspondence) | As long as needed for the matter |
If a report includes details about your health or beliefs, we process them only for this research, on the basis of your explicit consent.
3. Who receives it
Processors acting on our instructions under a written contract:
- Amazon Web Services: hosting and file storage (London region, with a worldwide content-delivery network).
- Prisma Data: the database holding accounts, member data and reports.
- Resend: the welcome email.
- Google: analytics, only with your consent.
Some pages load material from other organisations, which then receive your IP address: Wikimedia Commons (case photographs) and YouTube (a preview image, and the player once you press play, in privacy-enhanced mode, under Google's privacy policy).
We do not sell personal data. We disclose it otherwise only where the law requires.
4. International transfers
Some providers process data in the United States. Those transfers rely on the UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or the UK International Data Transfer Addendum to the standard contractual clauses.
5. Your rights
Under UK data protection law you have the right to access, correct, delete, restrict, port and object to the processing of your personal data, and to withdraw any consent you have given. For analytics, use Cookie settings. For anything else, write to contact@contact.fracturedrealities.co from the email address on your account, or say which report you mean.
You can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
6. Cookies
See our cookie policy.
7. Changes
The date at the top shows when this policy last changed.