The Monk & The Witch A fantasy saga by Fred Potvin

Privacy policy

Last updated: 12 November 2026

Fred Potvin, individual entrepreneur and registered artiste-auteur, is the data controller for this website’s accounts, library and purchase administration. Contact: [email protected], or 3B rue Carolus Chrétien Choqueuse, 60380, France.

Accounts and purchases

The website stores your internal account ID, Google’s account identifier, sign-in/session records, library access, and the date and wording version of your mature-content acknowledgement. For purchases, it also keeps Stripe transaction references, the purchased Book, access dates and refund or revocation status.

Ordinary Google sign-in does not collect your name, email address or profile photo. Account identifiers are still personal data. No reading or listening history is saved to your account. Optional email updates require separate authorization to obtain and store your Google email address.

Stripe Managed Payments, provided by Sold through Link, LLC, handles checkout. The website sends Stripe the order details and references needed to connect the purchase to your library: your internal account ID, Book, acknowledgement and purchase-confirmation versions, price reference and website return information. It does not send your Google account identifier.

Stripe/Link collects payment, contact, billing, tax and security information for checkout, receipts, refunds, fraud prevention and support. It also acts independently for purposes such as regulatory compliance. See Stripe’s privacy notice, Sold through Link data sharing and Link’s privacy notice.

I receive payment/refund notifications and can access order details through Stripe for purchase administration. The website’s purchase records do not store checkout names, email addresses or billing addresses. The website does not collect full card numbers or card security codes.

Purchase-confirmation emails use the checkout address retrieved from Stripe and are sent through Cloudflare Email Sending. Cloudflare processes the recipient, message and delivery information. The website retains the confirmation text version, purchase references, delivery status, timestamps and provider message reference, rather than the recipient address. Stripe/Link sends its own transaction emails. Buying a Book does not subscribe you to marketing.

Why the data is used

  • Providing the service you request: accounts, checkout, library access and purchase support — performance of a contract, GDPR Article 6(1)(b). An account is required for purchased access; required checkout details are needed to complete payment.
  • Legal obligations: necessary purchase confirmations, tax records and consumer-rights administration — Article 6(1)(c).
  • Security and disputes: preventing abuse and fraud, troubleshooting and establishing or defending claims — legitimate interests, Article 6(1)(f).
  • Optional email updates: your separate consent — Article 6(1)(a), withdrawable at any time.

Support messages and relevant purchase information are used to answer your request under these bases. Necessary records may be shared with Stripe/Link, the consumer mediator, advisers or competent authorities to resolve the matter or meet a legal obligation. Personal data is not sold or used to build advertising profiles.

Cookies, browser storage and providers

Necessary cookies support sign-in. Browser storage remembers reading position, playback preferences and access changes between tabs. Reading bookmarks remain locally until replaced or cleared; audio/navigation positions and autoplay settings last for the tab’s session. Clearing browser storage does not cancel a purchase. Stripe’s hosted checkout has its own privacy and storage information.

Google provides sign-in. Cloudflare hosts the website and database, delivers interface resources through cdnjs, sends emails, and provides security including Turnstile verification. These providers process connection information such as IP addresses, requested URLs and browser details. The website uses IP addresses temporarily to limit sign-in abuse, stores temporary verification digests to prevent checkout-token reuse, and may log payment-event references when errors occur. IP addresses, browser details and raw Turnstile tokens are not stored in account records.

Google, Cloudflare and Stripe/Link may process data outside the European Economic Area, including in the United States. Applicable safeguards include adequacy decisions or standard contractual clauses. Details and ways to obtain the safeguards are provided in Cloudflare’s data processing terms, Google’s transfer information and Stripe’s privacy notice. You may also contact me about transfers connected with this website.

Retention and deletion

Account and library records, including purchase-access and refund status, remain while your account is open. Request deletion by email. Deletion removes local library access; contact me about purchased Books first, because recovery requires verification and is not automatic.

Account deletion does not erase separate purchase-confirmation evidence, necessary transaction documents, support correspondence or Stripe/Link’s records. Support messages are kept while handling the request and, where necessary, for the applicable legal retention or claim period, including ongoing proceedings. Documents required for French tax checks are generally kept for six years from creation or the last recorded operation; longer periods apply where another legal obligation requires them. These periods concern necessary evidence, not all account or browsing data.

Session cookies normally expire after seven days and may be renewed. Expired session records can remain until cleanup. Checkout verification digests expire after ten minutes and are removed on a subsequent checkout request. Deleted database records may remain in Cloudflare recovery copies for up to 30 days.

Stripe/Link retains records under its legal, financial, security and claims requirements. Cloudflare retains email delivery and suppression information under its service rules. Deletion here does not erase delivered emails or records controlled independently by those providers; their privacy channels handle requests concerning their own processing.

Your rights

Email [email protected] to request access, correction, deletion, restriction, or, where applicable, portability or to object to processing. Account ownership may need verification. You may withdraw optional email consent at any time without affecting earlier lawful processing. You can complain to France’s CNIL or your local data protection authority.