Privacy Policy

1. Who is responsible

The entity responsible for operating the platform and for the processing described here is [To be completed before launch], with a registered address at [To be completed before launch], in [To be completed before launch].

For privacy matters specifically: [To be completed before launch].

2. What we collect

This section is limited to what the platform genuinely collects today, plus what specific named functions would collect once they are switched on — described conditionally below.

Information you provide: the current version asks for none. Once accounts exist, we may collect an email address, a display name and a hashed password.

Reading progress and preferences: the page you have reached, the lamp and candle state, your font size, Comfortable Reading Mode, and audio levels. These are kept in your browser's local storage and are not sent to us.

Device and browser information: technical details such as browser type, operating system, screen size and IP address may be recorded when pages are requested, as a normal consequence of how the web works and of our hosting providers' operation.

Operational and security logs: infrastructure may retain request and error logs for diagnostics and to protect the service from abuse.

Analytics: no analytics or measurement tool is loaded on the platform today. If one is added, this policy and the Cookie Policy will be updated before it is enabled.

Payment information: there is no payment processing today. Once there is, the appointed payment provider captures and handles card details directly.

3. Card details

Malath should never store a full card number or a card security code (CVV/CVC).

Once payments are enabled, card details are entered with the payment provider directly. We receive only the limited identifying data needed to evidence a transaction, such as the last four digits, the card type, the result, the transaction reference and the amount.

4. Storage in your browser

The platform uses browser storage rather than cookies to preserve your reading experience. The detail is set out in the Cookie and Local Storage Policy.

Clearing site data in your browser will lose your saved reading position and preferences. It will not stop you using the platform.

5. Why we process it

We process the data above only for these purposes:

• Running the service and rendering content correctly on your device.
• Preserving your reading position and preferences, and synchronising them between your devices once accounts exist.
• Protecting the platform against abuse, fraud and unauthorised access.
• Responding to support requests and complaints.
• Measuring and improving performance, if measurement tools are enabled in future.
• Meeting legal and accounting obligations.

6. Service providers and processors

We rely on external providers to run the platform, including hosting and content delivery, and a payment provider once payments are enabled.

These providers process data on our behalf and only as far as their service requires.

7. International transfers

Data may be processed or stored on servers outside your country of residence, depending on where the infrastructure providers in use operate.

The international transfer arrangements for this platform have not yet been settled, and this section will be updated once they are. We do not claim contractual safeguards that are not yet in place.

8. Retention

We keep data for as long as the purpose it was collected for requires, or for as long as a legal or accounting obligation requires, whichever is longer.

Reading data held locally stays on your device until you delete it.

9. Security

We take reasonable technical and organisational measures to protect data, including encrypting the connection to the site and restricting access to systems.

No method of electronic transmission or storage is completely secure, and we do not claim that ours is.

10. Your rights

Depending on the law that applies to you, you may have the right to:

• Access the data we hold about you.
• Have inaccurate data corrected.
• Ask for your data to be deleted, where the law allows.
• Object to or restrict particular processing.
• Withdraw consent where processing rests on consent.

To exercise any of these, write to [To be completed before launch]. We will respond as the applicable law requires.

11. Marketing

The platform sends no marketing messages today. If that changes, messages will be sent only with your prior consent and you will be able to unsubscribe at any time.

12. Children's privacy

The service is not directed at anyone below the minimum age stated in the Terms of Use, and we do not knowingly collect data from them.

If we learn otherwise, we take reasonable steps to delete it. If you are a parent or guardian and believe your child has given us information, write to [To be completed before launch].

13. Changes to this policy

We may update this policy to reflect changes in the service or in legal requirements. The last-updated date appears at the top of the page, and significant changes will be published a reasonable time before they take effect.

14. Contact

Privacy questions: [To be completed before launch]. General support: [To be completed before launch]. Or use the Contact and Complaints page.