Privacy Policy

This site is Captain Cave Publishing (cave.satumaja.fi), a personal fiction publishing platform run by Captain Cave, a private individual based in Finland. This site is a hobby project, not a commercial service.

If you create an account, we store:

• Your chosen username
• Your email address
• A hashed (encrypted) version of your password — your actual password is never stored
• Your reading positions (which chapter you last read in each story)
• Stories you have marked as favorites
• Tags you have voted on
• Comments you have posted
• Your notification preference (whether you want email updates about new stories)

If you read stories without an account, no personal data is collected or stored.

This site uses a single session cookie to keep you logged in. This is a strictly necessary cookie — it is required for the login feature to function and does not track you across other sites. No advertising cookies or third-party tracking cookies are used.

Your data is used solely to provide the features of this site:

• Your email and password are used to authenticate your account
• Reading positions allow the site to remember where you left off
• Favorites and tag votes personalise your experience
• Your email is used to send story update notifications only if you have opted in

Your data is never sold, shared with third parties, or used for advertising.

Your data is kept for as long as your account exists. You can delete your account at any time from your profile page, which permanently removes your personal data. You can choose whether your comments are kept (shown as "Deleted user") or removed entirely when you delete your account.

Under the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data (you can update your email and password from your profile page)
• Delete your data (via the delete account option on your profile page)
• Withdraw consent for email notifications at any time (via your profile page)

To exercise any of these rights or ask questions about your data, contact the site owner directly.

Passwords are hashed using industry-standard methods and are never stored in plain text. The site is served over HTTPS. This is a self-hosted personal project and reasonable security measures are in place, though no system can guarantee absolute security.

If you have any questions about this privacy policy or your data, you can reach the site owner via the Owncast stream at owncast.satumaja.fi.