Legal document
PRIVACY
POLICY.
Last updated: August 15, 2026
1 · Who I am
Carlos Donoso. Individual, independent author. This site (https://www.carlos-donoso.com/memory-of-iron) is my personal editorial project. Contact email: autor@carlos-donoso.com.
2 · What data I collect
If you subscribe to the newsletter, I store:
- Your email.
- Your name (if you provide it — optional).
- Your phone (if you provide it — optional).
- The IP and user-agent at the moment of subscription (security against abuse).
- The signup source (Instagram, TikTok, organic search, etc.).
- The date and time of your explicit consent.
3 · What I use it for
Only for three things:
- Send you the short story and wallpapers you asked for.
- Send you editorial communications about the Iron and Void Saga and launch alerts.
- Send you the weekly bulletin with exclusive news and images — only if you opted in for that.
- Comply with my legal obligations (GDPR, CCPA, equivalents).
I don't sell your data. I don't share it. I don't use it for any other purpose.
4 · Where it lives
In the MySQL database of my hosting (carlos-donoso.com). Restricted access by username and password, encrypted connection, daily backups.
If in the future I sync the list with Mailchimp, ConvertKit, or a similar provider to improve email delivery, you'll receive notice in advance and can object. Until then, everything is under my direct control.
5 · Your rights
You can exercise at any time:
- Access — ask me for a copy of your data.
- Rectification — correct it if it's wrong.
- Erasure — delete it permanently.
- Objection — ask me to stop processing it.
- Portability — receive it in a structured format.
To exercise any right, write to autor@carlos-donoso.com. I have 30 days to respond.
6 · Unsubscribing
Every email has a one-click unsubscribe link. You can also go directly to https://www.carlos-donoso.com/memory-of-iron/unsubscribe.php. Unsubscription is immediate and final.
7 · Cookies
This site uses no advertising cookies. It sets the PHP session cookie (necessary for the form and CSRF token, deleted when you close the browser) and the language-notice cookie.
To understand which parts of the site readers care about, I use Plausible Analytics (privacy-friendly, no cookies, no individual tracking).
I also use Google Analytics 4, which sets first-party cookies (_ga, _ga_*) with IP anonymization to measure visits in aggregate. You can block these cookies in your browser and the site will keep working.
8 · Changes to this policy
If I change anything important, I'll email you before it takes effect. Minor changes are reflected here with the updated date at the top of the document.
9 · Supervisory authorities
If you believe I'm not handling your rights properly, you may file a complaint with the relevant authority:
- European Union (GDPR): your local Data Protection Authority.
- United States (CCPA): California Attorney General's Office.
- United Kingdom: ICO (ico.org.uk).
- Canada (PIPEDA): Office of the Privacy Commissioner.