Privacy Policy

Draft, last updated October 16, 2026, not legal advice. This page is a plain-English draft and should be reviewed by a lawyer before Nibhollow launches publicly.

This policy explains what Nibhollow collects, why, and what control you have over it. Short version: we collect only what we need to run the site, we never sell your data, and you can delete your account at any time.

What we collect

• Account details: your username, email address, and password. We store only a secure one-way hash of your password, never the password itself.
• Profile: display name, bio and avatar link, if you add them.
• Content and activity: stories, chapters, cover images, ratings, reviews, comments, likes, follows, favorites, bookmarks, reports you file, reading progress, and notifications.
• Security and technical data: your IP address and standard server logs (such as pages requested, time and browser type), used to keep the site running and to prevent abuse like spam and password-guessing. View counts are stored as a salted, daily-rotated code, not your IP.
• One cookie: a single session cookie that keeps you logged in, protects forms against forgery, and remembers if you confirmed you're 18+ for Mature stories. We don't use advertising or tracking cookies.
• Reader preferences: settings like font size or theme are saved in your browser's localStorage, on your device only. They aren't sent to us.

Why we collect it

• To create and run your account and show your content and activity on the site.
• To send account emails, like password resets.
• To keep the site safe: stop spam, abuse and attacks, enforce our Terms, and respond to legal requests such as copyright notices.
• To understand which stories are popular (for example trending lists), using aggregated, de-identified view counts.

For visitors in the EU/UK, our legal bases are: performing our agreement with you (running your account), our legitimate interests (security, site improvement), and legal obligations.

What's public

Your username, display name, bio, avatar, published stories and chapters, reviews, ratings summaries and comments are public. Your email address, password hash, IP address, bookmarks and reading history are private.

Who we share it with

We do not sell or rent your personal information, and we don't share it for advertising. We share data only with:

• Hosting: the site runs on Render, with servers and the database located in the United States. If you're outside the US, your data is transferred to and stored in the US.
• Email delivery providers, only to send account emails.
• Authorities when the law requires it, including reports of child sexual abuse material to NCMEC, or to protect people's safety.

How long we keep it

We keep your data while your account exists. Security logs are kept for a limited time. When you delete your account we delete your account and content from the live database right away. Backups age out on the host's normal schedule.

Your choices and rights

• Delete your account: go to Settings → Delete account. This deletes your account and everything you posted.
• Access and correct: you can edit your profile and content at any time, or email us for a copy of your data.
• EU/UK (GDPR): you have the right to access, correct, delete, restrict or object to processing, and to get your data in a portable format. You can also complain to your local data protection authority.
• California (CCPA/CPRA): you have the right to know what we collect, to delete it, to correct it, and to not be discriminated against for using these rights. We don't sell or "share" personal information for cross-context advertising.

To make a request, email socksttv@gmail.com. We may need to verify it's you.

Children

Nibhollow is not for children under 13, and we don't knowingly collect personal information from them. If we learn an account belongs to someone under 13, we'll delete it. Parents who believe their child has signed up can contact us at socksttv@gmail.com.

Security

We use password hashing, HTTPS, and protections against forged requests and password guessing. No system is perfect, so please use a unique password.

Changes and contact

We'll post changes to this policy here and note significant ones on the site. Questions or requests: socksttv@gmail.com.