Privacy Notice

This notice explains what personal information The Servatory (“we”, “us”) collects, why, and what choices you have. The site is operated by [OPERATOR / LEGAL ENTITY]. Questions: [privacy@theservatory.com].

What we collect

• Account data you provide: email address, an optional display name, and a securely hashed password.
• Authentication data: a session cookie that keeps you signed in (see the Cookie Policy).
• Technical data: IP address, browser/device information, and server logs, generated when you use the site and held by our hosting provider.
• Email delivery data: handled by our email provider to send verification and password-reset messages.
• Payment data (when paid memberships launch): processed by a third-party payment provider. We do not see or store full card details.

Why we use it

• To create and operate your account and keep you signed in.
• To send transactional email (verification, password resets, account notices).
• To secure the site, prevent abuse, and meet legal obligations.
• To run optional analytics — only if you consent (none are active by default).

Where the law requires a legal basis (for example under [GDPR / UK GDPR]), we rely on performance of a contract, our legitimate interests in running and securing the site, your consent (for optional cookies), and compliance with legal obligations.

Who we share it with

We do not sell your personal data. We use trusted service providers who process data on our behalf: hosting [Hetzner / Coolify], email delivery [Resend], DNS and inbound email [Spaceship / Spacemail], and, in future, payments [Stripe]. Some providers may process data outside [your country / the EEA], with appropriate safeguards where required.

How long we keep it

We keep account data for as long as your account is active and for [retention period] afterward, and technical logs for [log retention period], unless a longer period is required by law.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your data, to object to or restrict certain processing, and to withdraw consent. To exercise these, contact [privacy@theservatory.com]. You may also complain to your local data-protection authority [supervisory authority].

Children

The Servatory is not directed to children under [16 / 13], and we do not knowingly collect their data.

Changes & contact

We may update this notice; the date above reflects the latest version. Contact: [privacy@theservatory.com], [postal address].