Privacy & Cookies
How information is handled when you read, sign in or contact The Spiral Accord.
Updated 5 November 2026
Membership and billing
Stripe processes subscription payments and manages payment methods, invoices and cancellation. Card details are entered on Stripe’s hosted pages and are not stored by this website. We link your reader account to Stripe customer and subscription identifiers and keep subscription status, paid-period dates and verified payment events in Supabase to control member access. Your email address is shared with Stripe when you start checkout. Complimentary access is recorded against your account without creating a payment.
Member collection and billing pages do not load Google Analytics. Subscription records are used for access, billing support and required business recordkeeping. Contact us using the details above about your account or personal information. Stripe’s own privacy notice applies to its hosted payment and billing services.
Who to contact
This policy covers www.thespiralaccord.com and its associated reading pages. Regan Andrews is the contact for this website and privacy requests. Email regan@thespiralaccord.com or call/text +61 495 010 006 (Call/TXT). The copyright and trademark ownership notice appears below; a trademark owner’s identity does not by itself describe which service provider processes your account data.
Information used by the site
- Reading without an account: you can read available chapters without registering. Hosting, security and media services receive technical requests that can include your IP address, browser details, requested resource and request time.
- Reader accounts: where enabled, account functions use your email, authentication information, optional display name and service identifiers. Passwords are handled by the authentication service; do not email us a password.
- Saved places: selecting “Save my place” while signed in records the book, chapter and update time against your account. The current feature keeps one saved chapter per book. Scrolling alone does not update it.
- Bookmarks, private notes and wishlist: saved chapters, note text and Shop favourites are stored with your account using Supabase. They are not shown to other readers. You can edit or delete notes and remove saved items in My account. Notes are not end-to-end encrypted; site administrators and service providers may access stored information to operate the service. Saving a wishlist item does not place an order or subscribe you to email notifications.
- Correspondence: messages and licensing enquiries contain the contact details and other information you choose to supply. Avoid including sensitive information that is unnecessary for your enquiry.
- Usage measurements: Google Analytics measures visits and engagement across public, account and member pages. This includes page views, scroll depth, chapters viewed, focused reading-time milestones, audio/video playback progress, navigation, outbound links, downloads and form interactions. It also receives device/browser information, referral information and identifiers used by Google Analytics. Our custom events do not include your email, account ID, password, private notes, form values or search text. Page addresses sent by our shared tracking code omit query strings and fragments; authentication callbacks wait until credential parameters have been cleared.
Why information is used
Information supports account access, saved reading places, responses to enquiries, site operation, security, troubleshooting and understanding how the site is used. Licensing correspondence is used to assess and discuss the proposed project. Sending a rights enquiry does not subscribe you to a newsletter.
Cookies, local storage and external media
The site uses Google Analytics (G-BBBWM9ZLHN) and Contentsquare for page visits, focused engagement and reading time, navigation, media use, heatmaps and session replay. These services can use cookies to distinguish visits. Focused time is an estimate of attention, not proof that every word was read. Contentsquare masks account details, form entries and private notes; selected publisher-controlled page content may be visible in replays. Account sign-in uses browser storage to maintain a session. Clearing that storage may sign you out. Original soundtracks use embedded Spotify players; loading or interacting with a player can send technical information to Spotify, whose own privacy and storage practices apply. External links may lead to services with separate policies.
At the date of this policy the site does not provide a separate cookie-preference panel. You can restrict cookies and site storage through your browser, block third-party content, or use Google’s available analytics controls. Browser restrictions can affect sign-in and embedded players. Clearing cookies does not delete an account or information already held by a provider. No claim is made that a browser’s Do Not Track signal is automatically honoured.
Service providers and international processing
The current site uses ChatGPT Sites for hosting, Cloudflare delivery and object storage for static media, Supabase for reader authentication and account records, Google Analytics for usage measurement and Spotify for embedded music. Email correspondence is handled through email services. These providers receive information needed to deliver their functions and may also process information under their own policies.
These services operate internationally. Information may be processed or accessed outside Australia and New Zealand. We do not promise that all data remains in either country. The deployment’s complete processing-country and subprocessor list has not been verified for this page; contact us for information about a particular transfer before providing sensitive information.
Provider information: OpenAI · Cloudflare · Supabase · Google · Spotify.
Keeping information and security
Reader profiles and saved places are held in the account service. Correspondence may be kept to respond to an enquiry, maintain a licensing record or resolve a dispute. Technical records and backups are also subject to provider retention arrangements. This page does not promise a fixed deletion period that has not been confirmed. Information no longer needed should be deleted or de-identified where practicable, subject to legal, security and recordkeeping needs.
No online service can promise absolute security. Protect your password, sign out on shared devices and report suspected unauthorised access without sending passwords or authentication codes.
Access, correction and deletion
You can edit the display name and remove saved places through the available account controls. To request access, correction, account deletion or an explanation of processing, email the address above and identify the account or enquiry concerned. We may need proportionate identity verification before disclosing or changing account information. Deletion requests may require manual handling; backups, transaction records and information required for legal or security purposes may need to be retained. We will explain relevant limits rather than promising instant erasure.
Concerns and complaints
Contact us first with the issue and the outcome you seek. We will review the concern and explain our response. Depending on your location and the laws that apply, you may also have rights to complain to a privacy regulator, including the Australian Information Commissioner or the New Zealand Privacy Commissioner. This policy does not restrict rights available under applicable law.
Changes
This page will be updated when features or data practices change. The date above identifies the current text. New registration and recovery features may be temporarily unavailable while email setup is completed; check the account page for current availability.