Legal document

PRIVACY
POLICY.

Last updated: August 15, 2026

1 · Who I am

Carlos Donoso. Individual, independent author. This site (https://www.carlos-donoso.com/memory-of-iron) is my personal editorial project. Contact email: autor@carlos-donoso.com.

2 · What data I collect

If you subscribe to the newsletter, I store:

  • Your email.
  • Your name (if you provide it — optional).
  • Your phone (if you provide it — optional).
  • The IP and user-agent at the moment of subscription (security against abuse).
  • The signup source (Instagram, TikTok, organic search, etc.).
  • The date and time of your explicit consent.

3 · What I use it for

Only for three things:

  • Send you the short story and wallpapers you asked for.
  • Send you editorial communications about the Iron and Void Saga and launch alerts.
  • Send you the weekly bulletin with exclusive news and images — only if you opted in for that.
  • Comply with my legal obligations (GDPR, CCPA, equivalents).

I don't sell your data. I don't share it. I don't use it for any other purpose.

4 · Where it lives

In the MySQL database of my hosting (carlos-donoso.com). Restricted access by username and password, encrypted connection, daily backups.

If in the future I sync the list with Mailchimp, ConvertKit, or a similar provider to improve email delivery, you'll receive notice in advance and can object. Until then, everything is under my direct control.

5 · Your rights

You can exercise at any time:

  • Access — ask me for a copy of your data.
  • Rectification — correct it if it's wrong.
  • Erasure — delete it permanently.
  • Objection — ask me to stop processing it.
  • Portability — receive it in a structured format.

To exercise any right, write to autor@carlos-donoso.com. I have 30 days to respond.

6 · Unsubscribing

Every email has a one-click unsubscribe link. You can also go directly to https://www.carlos-donoso.com/memory-of-iron/unsubscribe.php. Unsubscription is immediate and final.

7 · Cookies

This site uses no advertising cookies. It sets the PHP session cookie (necessary for the form and CSRF token, deleted when you close the browser) and the language-notice cookie.

To understand which parts of the site readers care about, I use Plausible Analytics (privacy-friendly, no cookies, no individual tracking).

I also use Google Analytics 4, which sets first-party cookies (_ga, _ga_*) with IP anonymization to measure visits in aggregate. You can block these cookies in your browser and the site will keep working.

8 · Changes to this policy

If I change anything important, I'll email you before it takes effect. Minor changes are reflected here with the updated date at the top of the document.

9 · Supervisory authorities

If you believe I'm not handling your rights properly, you may file a complaint with the relevant authority:

  • European Union (GDPR): your local Data Protection Authority.
  • United States (CCPA): California Attorney General's Office.
  • United Kingdom: ICO (ico.org.uk).
  • Canada (PIPEDA): Office of the Privacy Commissioner.