✦

Privacy Policy

Effective: 7 June 2026

Marginalia Club (“we”, “us”) operates marginaliaclub.in and related services. This policy describes what data we collect, why, and how we protect it. We collect only what we need. We do not sell your data.

1. What we collect

Account data

When you register, we collect your email address, display name, and username. If you sign in with Google, we receive your name, email, and profile photo from Google. Phone OTP sign-in collects your phone number.

Content you publish

Stories, drafts, author notes, profile bios, and comments you create on the platform are stored and, if published, made publicly accessible.

Reading behaviour

We record which stories you have read, time spent reading, and bookmarks, so we can personalise your feed and restore your reading history across devices.

Reactions and follows

When you react to or follow an author, we store that association to notify the author and to shape your discovery feed.

Device and usage data

Standard server logs capture your IP address, browser type, and pages visited. We use this only for security and to diagnose errors.

Payment information

If you subscribe to premium, payments are processed by Stripe (web) or Apple / Google (mobile in-app purchase). We receive confirmation of your subscription status but do not store your card numbers or full payment details.

2. How we use your data

  • Authenticate you and keep your account secure.
  • Display your published content and personalise your feed.
  • Send notifications about authors and stories you follow (within our notification budget).
  • Detect and prevent spam and policy violations.
  • Generate reading and writing statistics visible on your profile.
  • Improve the platform and diagnose technical issues.

We do not use your data for advertising targeting or sell it to third parties.

3. Third-party services

We use the following services. Each has its own privacy policy.

  • Supabase — authentication and database hosting. Your account credentials are managed by Supabase.
  • Cloudinary — media storage for images you upload (profile photo, cover images).
  • Stripe — payment processing for web premium subscriptions. Stripe handles card data; we only see subscription status.
  • Apple and Google — in-app purchases for mobile premium subscriptions, governed by their respective privacy policies.
  • Google AI (Gemini Flash) — used to suggest story tags and assist with comment moderation. Content sent to Gemini is not stored by Google for model training under our API agreement.
  • Groq — used as an AI fallback when Gemini is unavailable. The same data-handling principles apply.
  • Vercel — web hosting. Vercel processes request logs on our behalf.

4. Cookies and storage

We use essential cookies only — for session management (keeping you signed in) and your theme preference (light / dark / sepia). We do not use advertising trackers or third-party analytics cookies. Theme preference stored in local storage never leaves your device.

5. Data retention

Your account data is retained while your account is active. If you request deletion of your account, we will delete your personal data within 90 days. Deleted stories are permanently removed within 30 days. Anonymised or aggregated analytics (e.g. total read counts) may be retained longer as they cannot be linked back to you.

6. Your rights under India's DPDP Act 2023

Under the Digital Personal Data Protection Act 2023, you have the right to:

  • Access your personal data that we hold.
  • Correct inaccurate or incomplete personal data.
  • Erase your personal data (subject to legal retention obligations).
  • Withdraw consent for processing where consent is the legal basis.
  • Nominate a representative to exercise these rights on your behalf in the event of your death or incapacity.

To exercise these rights, email privacy@marginaliaclub.in. We will respond within the timeframes required by law.

7. Children

Marginalia Club is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has registered, contact us and we will delete the account promptly.

8. Changes to this policy

If we make material changes, we will update the “Effective” date above and, for significant changes, notify registered users by email. Continued use after a change constitutes acceptance of the revised policy.

9. Contact

Questions about this policy: privacy@marginaliaclub.in