Privacy policy

1. Controller and contact

The data controller is Sebastian Nord, Chile. For questions or rights requests, email privacy@marvinprotocol.com.

2. Data we collect

We collect your email address, selected language, consent date and source, subscription status, confirmation or withdrawal dates, and minimal technical records used to prevent abuse.

If you apply to the ARC program, we also collect your full name, optional Instagram handle, application status, and related editorial decisions.

We store a strictly necessary, signed, limited-duration cookie to recognize access to exclusive content. The cookie does not contain your email in readable form.

Vercel Web Analytics provides aggregated statistics without third-party cookies or persistent cross-site identifiers. We do not send your email to analytics tools.

3. Purposes and consent

We use the data to verify addresses, send book updates, deliver access links, administer exclusive content, answer requests, and protect the service.

ARC data is used to assess applications, select advance readers, deliver copies, and administer advance-reading communications.

Subscription requires express acceptance followed by email confirmation. You may withdraw consent at any time through any message or by contacting us.

We do not sell personal data or use it for third-party advertising.

4. Providers and transfers

MongoDB stores the primary subscriber record. Resend processes addresses and messages for email delivery. Vercel hosts the site and processes aggregated analytics.

These providers may process data outside Chile. Applicable contractual safeguards, security measures, and data-processing terms are used. Review the providers' own policies for details.

5. Retention

Unconfirmed requests expire automatically. Active subscription data is retained while the subscription remains active.

Unconfirmed ARC applications expire. Confirmed applications are retained throughout the editorial process and afterward only as needed to administer the relationship or meet legal duties.

After unsubscribing, we may temporarily retain a minimal suppression record to respect your choice, meet legal duties, or resolve disputes. It will later be deleted or anonymized.

6. Your rights

You may request access, correction, deletion, objection, restriction, or portability, and withdraw consent by emailing privacy@marvinprotocol.com. We may verify your identity before responding.

7. Security and children

We use one-time links, signed tokens, HttpOnly cookies, request limits, and restricted database access. No system can guarantee absolute security.

The newsletter is not directed to children under 16. If we identify data submitted without appropriate authorization, we will delete it.

8. Changes

We may update this policy for legal, technical, or service changes. We will publish the new date and notify subscribers if a change is material.