1. Who We Are
This Privacy Policy describes how nayada.org ("the Site," "we," "us," or "our"), operated by author Tom Cavanaugh, collects, uses, and shares information when you visit the Site or interact with services we make available, including The Chronicles of Evereska book series, newsletter, contact form, premium content offerings, and any AI-assisted features.
Contact for privacy questions: info@nayada.org
2. Information We Collect
Information You Provide Directly
- Newsletter signup: your email address.
- Contact form: your name, email address, and the contents of your message.
- Premium content purchases: billing details required to complete the transaction. We do not store your full payment card number; this is handled by our payment processor.
- AI feature interactions: the prompts or messages you submit to any AI-powered chat or assistance feature available on the Site.
Information Collected Automatically
- Server logs: IP address, browser type and version, referring URL, requested pages, and timestamps.
- Cookies: small files used to remember your preferences (e.g. dismissed banners, accepted notices). See Section 5 for details.
3. How We Use Your Information
We use the information we collect to:
- Send you newsletter content and updates you have opted into.
- Respond to your inquiries submitted through the contact form.
- Process and fulfill premium content purchases.
- Provide and improve AI-assisted features (where offered).
- Maintain Site security, prevent abuse, and detect fraud.
- Comply with legal obligations.
4. How We Share Your Information
We share information only with the following categories of third parties, and only as needed to operate the Site:
- Web hosting: The Site is hosted by gridghost.dev, which runs on DigitalOcean infrastructure. These providers store Site files, process incoming requests, and may briefly log technical metadata (IP address, user agent, request URLs) for security and operational purposes under their own privacy policies.
- Analytics: Google Analytics (provided by Google LLC) - measures aggregate Site usage to help us understand traffic patterns and improve the Site. See Section 5 for cookie details and opt-out options.
- Newsletter platform: [NEWSLETTER PROVIDER, e.g. Mailchimp / ConvertKit / Substack] - receives email addresses you submit through the newsletter form.
- Payment processor: [PAYMENT PROCESSOR, e.g. Stripe / PayPal] - handles all credit card and payment data for premium content purchases under their own privacy policy.
- AI provider: Groq - receives the prompts you submit to AI features and returns generated responses. Groq processes your inputs under its own privacy policy and terms of service. Do not share confidential or third-party personal information through the AI feature.
- Legal authorities: when required by valid legal process or to protect our rights.
We do not sell your personal information.
5. Cookies & Tracking
The Site uses cookies and similar storage technologies (localStorage, sessionStorage) for the categories described below. We do not currently use behavioral advertising trackers, fingerprinting, or cross-site tracking.
Strictly Necessary
Required for the Site to function - e.g. session tokens for premium content access, and security tokens to protect form submissions. Cannot be disabled without breaking core functionality.
Preferences
Remembers choices you have made - e.g. that you have dismissed a notice or accepted a cookie banner. Optional; the Site will still function if disabled.
Analytics
The Site uses Google Analytics 4 (provided by Google LLC) to measure aggregate usage and help us improve the Site. Google Analytics sets first-party cookies (typically named _ga, _ga_*, and _gid) that record information about your interaction with the Site, such as pages viewed, session duration, approximate geographic location, device type, and referring source.
Data is processed by Google under Google's Privacy Policy and the Google Ads Data Processing Terms. We have enabled IP anonymization where supported. Standard Google Analytics retention is 14 months from a user's last interaction.
You can opt out of Google Analytics at any time by:
- Installing the official Google Analytics Opt-Out Browser Add-on;
- Disabling cookies in your browser settings;
- Sending a Global Privacy Control (GPC) signal, which we honor as an opt-out.
For visitors in regions that require opt-in for non-essential analytics cookies (such as the EU, EEA, and UK), a cookie consent notice will be displayed before Google Analytics cookies are set.
Managing Cookies
You can disable cookies through your browser settings. Disabling Strictly Necessary cookies will prevent some features from working. Most browsers also offer a "clear cookies" option to delete previously stored values.
Do Not Track
Some browsers send a "Do Not Track" (DNT) or "Global Privacy Control" (GPC) signal. We honor a recognized GPC signal as an opt-out of any sale or sharing of personal information (note: we do not currently sell or share personal information). We do not currently respond to legacy DNT headers because there is no industry standard for how to do so.
6. Your Rights
Depending on where you live, you may have rights to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Request deletion of your personal information.
- Opt out of marketing communications (every newsletter contains an unsubscribe link).
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at info@nayada.org. We will respond within the time required by applicable law.
EU/EEA & UK Visitors (GDPR)
We process personal data under the following lawful bases: consent (newsletter subscription, optional features), contract (premium purchases), and legitimate interests (Site operation, security, fraud prevention).
California Residents (CCPA / CPRA)
You have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under California law. We do not engage in profiling or automated decision-making with legal effects.
Other US State Residents
Residents of states with comprehensive privacy laws - including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Oregon (OCPA), Texas (TDPSA), and others that have come into effect - have rights similar to those described above, subject to the specifics of each state's law. To exercise any state-specific right, contact info@nayada.org and identify your state of residence so we can apply the appropriate process. We will not discriminate against you for exercising your rights.
7. Data Retention
We retain personal information only as long as needed for the purposes described in this Policy:
- Newsletter email addresses: until you unsubscribe.
- Contact form messages: up to 24 months after the conversation ends.
- Premium purchase records: as required by tax, accounting, and consumer protection laws (typically up to 7 years).
- Server logs: typically 30–90 days unless retained longer for security investigation.
- AI interaction logs: as long as needed for safety, abuse prevention, and quality improvement, then deleted or anonymized.
8. Children Under 13
The Site is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact info@nayada.org and we will delete it promptly.
9. International Visitors
The Site is operated from the United States. By using it, you understand that your information may be transferred to, processed in, and stored in the United States, which may have different data protection laws than your home country. Where required by law (such as for EU/UK visitors), we use appropriate safeguards for international transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last Updated" date at the top of this page. Where required by law, we will provide additional notice (for example, an email to active newsletter subscribers). Your continued use of the Site after changes take effect means you accept the revised Policy.
11. Contact Us
Questions, requests, or concerns about this Policy or your personal information:
Last updated: April 27, 2026