Legal
Privacy Policy
Last updated: 26 September 2026
Morgana Bevan runs this site and is responsible for the personal information described here. I’m based in South Wales. If you have a question or want to use your privacy rights, send me a message.
When you visit
SiteGround hosts the site and handles server logs, including IP addresses, to deliver pages and keep the site secure. Cloudflare Web Analytics counts visits and popular pages without setting cookies or building individual visitor profiles. I use this information to run and improve the site.
To send a “Buy” link to a suitable store, your browser may ask GeoJS for your approximate country. GeoJS receives the IP address needed to answer that request. Your browser saves the country code for one day. I don’t receive your precise location.
Advertising
The Meta pixel helps me measure ads. It can share page views, book-page visits and retailer clicks with Meta, and Meta may set cookies. It loads only if you choose Allow in the cookie banner. You can change that choice through Cookie settings in the footer. I rely on your consent for this tracking. Meta handles the information it receives under its own policy.
Things saved in your browser
Your browser can remember your display and motion settings, reader position and text settings, Vault progress, selected music, country code and cookie choice. These are saved on your device. Reader votes also use a random browser token to help prevent repeat voting; that token is sent with a vote. See the Cookie Policy for the full list.
Newsletter and bonus books
If you join my VIP list, the details you enter go to Flodesk so I can email book news and bonuses. You can unsubscribe from any email. Some bonus links take you to BookFunnel, which may ask for the details needed to deliver a book. I use your signup choice as the basis for marketing emails.
Contact form
If you contact me, I use your name, email, subject and message to answer you. A short-lived session cookie and security token help the form work. The form also uses rate limits and a one-way hash of your IP address to reduce spam. Messages flagged as suspicious go to a private review queue. Those records are removed within 30 days. I keep genuine correspondence for as long as needed to handle your enquiry and normal business records. My basis for this is responding to your request and keeping the site secure.
Reader contributions
Where polls or reader contributions are available, votes and submissions are handled by Supabase. A vote uses a random browser token to limit repeat voting. If you submit a theory or tip, I receive the name you choose and the text you write. I review submissions before they appear publicly; approved contributions may appear on the site. Please don’t include private information about yourself or anyone else. I use these details to run the feature you chose to use and moderate it.
Book links and purchases
Some book links go through my redirect service, which uses Supabase to count clicks by book, retailer and country. The link then takes you to Payhip or another retailer. They handle your purchase and any data you give them under their own policies. Some links may earn me a commission at no extra cost to you.
Who handles the data
SiteGround, Cloudflare, Flodesk and Supabase handle the parts described above. GeoJS receives your IP address when your browser checks your country. Meta receives activity only if you allow the pixel. BookFunnel and retailers handle information you give them after you follow a link to their sites. I do not sell your personal information.
Data handled outside the UK
Some providers work outside the UK. Their published agreements say how they protect data sent to places without a UK adequacy decision: SiteGround uses a UK International Data Transfer Agreement, while Flodesk, Cloudflare and Supabase use standard contract terms with a UK addition. You can read the agreements at those links or ask me about them. GeoJS explains its handling in its privacy policy. Meta, BookFunnel and retailers explain their own handling when you use their services.
Your choices and rights
You can unsubscribe from emails, change your cookie choice, and clear this site’s saved browser data. Depending on where you live and the data involved, you can ask to see, correct or delete your information, object to or restrict its use, or ask for a copy you can take elsewhere. You can withdraw consent at any time. Contact me and I’ll help. You can also complain to the UK Information Commissioner’s Office or your local data protection authority.
Children and changes
My books are for adults. This site is not intended for children under 16. I’ll update this page and the date above when the way the site handles data changes.