Privacy Policy

Navigation

Main Text

privacy policy

last updated: August 01, 2026

fanfiction.lol is operated by Brennan Kenneth Brown, a Canadian individual. this policy is designed to comply with Canada's federal Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25).

III.A. applicability

this policy applies to all visitors and registered users of fanfiction.lol. it governs personal information collected through the site, associated email communications, and third-party services used to operate the site.

by using fanfiction.lol you consent, under PIPEDA, to the collection and use of personal information as described here. you may withdraw consent at any time by closing your account.

III.B. scope of personal information we process

the guiding principle is minimal collection: we only collect what is necessary to operate the archive. personal information is used exclusively for:

  • — operating and maintaining your account
  • — sending transactional emails (account confirmation, password reset)
  • — security and abuse prevention
  • — anonymous site analytics to help improve the archive

III.C. types of personal information collected

account information: when you register, you provide a username and email address. your email is stored securely and used only for account-related communications. it is never displayed publicly.

user content: works, comments, bookmarks, and other content you post are stored on our servers. visibility is controlled through your account settings.

server logs: standard web server logs record your IP address, pages visited, timestamps, and basic request metadata. these are retained for up to 30 days for security purposes and then deleted.

analytics: fanfiction.lol uses Umami, a privacy-focused analytics tool, to collect anonymous, aggregated site usage data (page views, referrer, device type). Umami does not use cookies and does not track individual users across sessions. no personal identifiers are collected through Umami.

session cookie: a single session cookie is used to keep you logged in. this is a strictly necessary functional cookie. no advertising or tracking cookies are used.

III.D. aggregate and anonymous data

aggregate site statistics (total works, user counts, fandom counts, etc.) may be displayed publicly on the site. this data contains no personal identifiers.

Umami analytics data is anonymous by design and cannot be linked back to individual accounts or sessions.

III.E. your rights under Canadian privacy law

under PIPEDA and Quebec Law 25, you have the following rights regarding your personal information:

  • — access: you may request a copy of the personal information we hold about you
  • — correction: you may request that inaccurate personal information be corrected
  • — deletion: you may delete your account at any time via Account Settings → Delete My Account. Quebec residents have a specific right to request deletion of personal information under Law 25
  • — portability: you may request an export of your content (works, bookmarks, etc.) in a machine-readable format
  • — withdrawal of consent: you may withdraw consent to data processing at any time by closing your account

to exercise any of these rights, contact [email protected]. requests will be acknowledged and responded to within 30 days, in line with PIPEDA's timelines.

if you believe your privacy rights have not been respected, you may file a complaint with:

III.F. information shared with third parties

fanfiction.lol does not sell personal information. data is shared with third parties only to the minimum extent required to operate the site:

Resend (transactional email): your email address is shared with Resend solely to deliver account confirmation and password reset emails. see Resend privacy policy.

Cloudflare (CDN and security): all traffic passes through Cloudflare's network, which may log request metadata (IP address, path, response codes). Cloudflare's infrastructure is located outside Canada. see Cloudflare privacy policy.

server host: the site runs on a privately managed server. server-level access logs are retained for up to 30 days.

note on cross-border transfers: Resend and Cloudflare are US-based services. your email address and IP address may be processed in the United States. these transfers are subject to each service's privacy policy and applicable data transfer safeguards. by using fanfiction.lol, you acknowledge this.

your content will not be shared with, sold to, or used to train AI or machine learning systems of any kind.

III.G. account deletion

when you delete your account:

  • — your account, email address, and profile data are deleted
  • — your posted works are deleted, unless you orphaned them before deletion
  • — comments you left may remain in anonymised or orphaned form
  • — tags you created (freeform tags, fandoms, etc.) may remain in the tag database — this is standard behaviour across AO3-based archives
  • — database backups may retain your data for up to 30 days, after which they are cycled out

if you wish to request deletion of specific data not automatically removed on account deletion, contact [email protected].

III.H. retention of personal information

  • — account data: retained until you close your account
  • — server logs (IP addresses, access logs): up to 30 days
  • — transactional email records (via Resend): subject to Resend's own retention policy
  • — Umami analytics data: retained in anonymous, aggregated form
  • — database backups: cycled out within 30 days of account deletion

in the event of a privacy breach that creates a real risk of significant harm to users, affected individuals and — where required by PIPEDA's breach notification obligations (s.10.1) — the Office of the Privacy Commissioner of Canada will be notified promptly.

III.I. contact

for privacy questions, access requests, or complaints: [email protected]

effective: August 01, 2026

Navigation