Privacy notice · effective 2026
How I handle the names and addresses you send me.
This page is the plain account of what arrives at my reading desk when you subscribe or write, why I keep it, how long it stays, and how you ask me to let it go. I wrote it in the same voice I use for the stories, because the duty is personal: one person, one list, one inbox.
What arrives
What I collect
I collect only what I need to send you a story or to answer a letter. There is no account dashboard, no public profile, and no extra fields I fill in behind your back. If a form does not ask for something, I do not store it.
When you join from the home page I keep your name, your e-mail address, the reading plan you chose (The Sampler, Weekly Reader, or Weekly Reader + Annotated Archive), the time you opened the form, and the record of your consent to receive stories and to this notice. I use the name so a letter can begin properly. I use the address to deliver instalments and service notes. I use the plan so I send the right rhythm and do not charge a sampler reader.
When you write through the contact page I keep your name, e-mail, the subject you picked, the message itself, and again the consent tick. If you add a telephone number I keep that too, only to return a call you have asked for. I do not ask for dates of birth, payment-card numbers on this site, photographs of you, or any government identifier. Payment for a paid plan is handled by the billing link I send; I do not store card details on this server.
Server logs may briefly record an IP address and browser string when a page is fetched or a form is posted. I use those lines only to keep the forms from being flooded and to repair faults. I do not build a browsing history of you, and I do not stitch visits into a marketing file.
Purpose
Why I keep it
A list is a promise of delivery, not a quarry for other uses.
I keep your address so that Sunday’s instalment, or the monthly sampler, actually reaches you. I keep the plan choice so the right files go out — story, plate, endnote, and, where you have paid for it, the archive link. I keep a contact message so I can reply with care rather than from memory, and so I can find the thread if you write again about the same story or the same permission.
Consent is the ground I stand on for sending fiction. The tick on the form is the record that you asked to be written to. I also rely on the obvious need to perform a subscription you have paid for, and on the need to answer a letter you chose to send. I do not use your address to guess what else you might buy. I do not score you, and I do not run experiments on subject lines that pretend to be the story itself.
If you reply to an instalment, that reply lands in the same mailbox as the contact form. I read it as correspondence, not as a data feed. I may quote a line back to you in my answer. I will not publish your name or your private words without asking you first.
Time
How long I keep an address
I do not keep a silent archive of people who have left. When you cancel, the next sending simply does not start, and the address itself is removed on a short clock.
If you cancel a paid plan or leave the sampler, I delete your name and e-mail from the sending list within thirty days of that cancellation. I may keep a bare billing receipt for as long as the payment provider requires me to, because a charge has to be explainable if you query it later. That receipt is not used to write to you again.
Contact messages stay in the mailbox until the matter is closed, then I remove them from active folders within twelve months unless you and I are still in the middle of a rights question. If a message is only a greeting or a short thanks, I do not file it at all once I have answered.
Server logs rotate on a short cycle measured in weeks, not years. Session records used to protect the forms die when the browser session ends. I do not sell old lists, and I do not “park” cancelled addresses for a later campaign. If you join again after leaving, you start as a new reader and I ask for consent again.
Hands
I do not sell your address, and I do not share it with advertisers
There is no advertising network on this site, no retargeting pixel, and no list broker. I do not pass your name or e-mail to anyone for their marketing. The stories go out from my own sending arrangement; the people who keep that pipe running see addresses only as far as is required to deliver mail, and they are not licensed to use the list for anything else.
If a court or a lawful order in Singapore or in the European Union where the site is hosted required me to disclose a record, I would do only what the order named, and I would tell you unless the order forbade it. That has not happened. I mention it because a privacy page that pretends the law cannot knock is not an honest page.
I do not publish a directory of readers. I do not put your address into a public JSON file, a newsletter screenshot, or a social caption. If I ever quote a reader’s sentence in a desk note, I will ask, and I will leave the name off unless you want it there.
Small files
Cookies I actually set
The full table lives on the cookies page. This is the short version, so you are not sent hunting for a second document without a map.
I set wt_consent when you choose Accept or Only essential on the banner. It remembers that choice for twelve months so the bar does not return on every visit. I set PHPSESSID for the life of the browser session so the forms can carry a token and so a flood of posts from one sitting can be slowed. That is the whole list.
There is no analytics cookie, no advertising cookie, and no third-party tracker claimed on this site. If you refuse the banner, nothing in the stories or the plans breaks. The banner may show again, because I have no other way to remember the refusal. You can also delete cookies in your browser; the next visit will look like a first visit.
The banner sits at the bottom of the page and is written to stay clear of the primary buttons on a small screen. Choosing either button writes the same essential cookie. I do not treat “Accept” as permission to add new trackers later without saying so on the cookies page.
Your request
How to see it, correct it, or have it deleted
Write to hello@WondersAndTales.eu from the address you used to subscribe, and tell me what you want done. You may ask what I hold, ask me to correct a name or a plan, or ask me to delete the address. You may also use the contact form on Write to Me and choose “Something else” as the subject.
I answer from the reading desk, Monday to Friday, 10:00–18:00 SGT, usually within two working days. I do not correspond on weekends. If the request is simply to leave the list, the thirty-day deletion clock starts when I confirm the cancellation. If you want a copy of a recent message you sent me, I will return that text to the same address.
I will not demand a passport scan for an ordinary deletion. If a request looks as though someone else is using your address, I may ask a simple confirming question by e-mail before I change or erase the record. That is to protect you, not to slow you down.
Unsubscribing from a story e-mail is always one click, printed in the footer of every instalment. That link stops the sending. It is the fastest way to leave. A separate deletion request is only needed if you want the stored name and address removed sooner than the ordinary thirty days, or if you want confirmation in writing.
Desk
Where to reach me about this notice
This notice is effective in 2026. If I change it, I will date the new version and keep the change in the same first-person voice, without hiding a new use of data in a clause you would not think to read. Hosting is in the European Union; the reading desk is in Singapore.
Wondersandtales
27 Boon Tat Street, #04-02, Telok Ayer
Singapore 069623
Phone: +65 6396 7452
E-mail: hello@WondersAndTales.eu
Reading desk: Monday–Friday, 10:00–18:00 SGT