Privacy Notice
The short version: we keep what signs you in and remembers your place. Analytics are off until you say yes. We do not sell anything about you to anyone, we do not run advertising, and there is no tracking pixel on this site. The long version is below, and it is the one that binds us.
1. Who is responsible for your data
These editions are sold by KWIKL INC, Denver, CO 80202, United States, referred to below as "we" or "us". You can reach a person at support@salssky.com.
For the purposes of the UK and EU General Data Protection Regulation we are the controller of the personal data described here. Under India's Digital Personal Data Protection Act 2023 we are the Data Fiduciary. Write to support@salssky.com about anything on this page and a person will answer.
2. What we collect, and why
| What | Why | Lawful basis | Kept for |
|---|---|---|---|
| Email address and the name you choose | To create your account, sign you in, and reply to you | Performance of our contract with you | Until you delete the account |
| A one-way hash of your password | To sign you in without ever storing the password itself | Contract | Until you delete the account |
| Your reading position, kept passages and notes | So the book follows you between devices | Contract | Until you delete them or the account |
| Your settings — type size, theme, notification choices | So the site is the way you left it | Contract | Until you delete the account |
| What you post in the community, and messages you send | To show them to the people you sent them to | Contract | Until you delete them or the account |
| Your edition and its dates | To give you what you paid for | Contract and our legal obligations | Account life, then 6–7 years for tax records |
| Session records and a one-way hash of your IP address | To keep the account secure and to limit abuse | Our legitimate interest in a secure service | 90 days |
| Support messages you send us | To answer them | Contract, and our legitimate interest in supporting readers | 2 years |
| Anonymous, aggregated reading statistics | To see which scenes readers stop at, so the writing can improve | Your consent | Until consent is withdrawn |
What we never collect: your card number — Stripe holds that and we never see it; your precise location; your contacts; anything from other sites you visit.
3. What the author can and cannot see
This one matters and is easy to get wrong, so it is written plainly. The author sees aggregate figures: how many readers reached a scene, where readers stop, how long a scene takes on average. No screen anywhere shows one named reader's highlights, notes, or reading time. Private messages are not visible to the author at all, unless one of the participants reports one.
4. Who else sees anything
Only the suppliers who make the service work, each doing one job under contract, none of them permitted to use your data for their own purposes:
- Stripe — payments. They receive your email and payment details directly; we receive back only a confirmation and the last four digits of the card.
- Our hosting and database provider — stores the site and its data.
- Our email provider — delivers account and receipt emails.
We do not sell personal data, and we do not share it for advertising. Under California law, we do not sell or share personal information as those terms are defined in the CCPA, and we have not done so in the preceding twelve months. We disclose data only if the law requires it, and we will tell you if we are permitted to.
5. Where your data goes
Our suppliers may process data outside your country, including in the United States. Where data leaves the UK, the European Economic Area or India, it is transferred under the appropriate safeguards — Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision, as applicable. Ask us at support@salssky.com for a copy of the safeguards that apply to you.
6. Your rights
Wherever you live, you can ask us to show you what we hold, correct it, delete it, give you a copy in a portable format, stop a particular use, or withdraw consent you previously gave. You may also object to processing we carry out on the basis of legitimate interests.
Two of these do not require you to ask: export everything and delete your account are buttons in your account settings. Everything else, write to support@salssky.com and we will answer within 30 days, free of charge.
We will never make the service worse for you because you exercised a right.
If you think we have got it wrong you can complain to your data protection authority — the Information Commissioner's Office in the UK, your national authority in the EEA, or the Data Protection Board of India — but we would rather you told us first, so we can fix it.
7. Keeping it safe
Everything travels over an encrypted connection. Passwords are stored only as a one-way hash and cannot be read back, by us or anyone else. Access to the database is restricted, and the part of the system that serves pages has no permission to read the book's text or to grant anyone access to it. If a breach ever puts your rights at risk we will tell you and the relevant authority without undue delay, and within 72 hours where the law requires it.
8. Children
This service is not directed at children under 16 and we do not knowingly collect their data. The free scenes can be read with no account and no data at all. If you believe a child has created an account, tell us and we will delete it.
9. Automated decisions
We do not make decisions about you by automated means that produce legal or similarly significant effects, and we do not profile you.
10. Changes
If we change this notice materially we will email account holders before it takes effect. The date at the foot of this page shows when it last changed.