Privacy Policy
Last updated: [PLACEHOLDER: date]
This page explains what personal data Martialis (martial.is) collects, why, and what rights you have over it. It applies to the private, account-related parts of the site (sign-in, settings, the monthly updates newsletter). The public lineage database itself contains no personal data about site visitors.
Who is responsible for your data
Martialis is operated by [PLACEHOLDER: operator/legal name], contactable at [PLACEHOLDER: contact email]. This is the "controller" for the purposes of data protection law.
What we collect
- Account email address. Whether you sign in with Google, GitHub, or a direct email link, we receive and store your email address.
- Name and profile picture, if you sign in with Google or GitHub - these providers share what you've made available on your account there.
- Your saved preferences: interface language, and, if set, your default lineage focus person.
- Whether you've opted in to monthly updates, and when.
- Your free self-profile, if you create one: a display name, short bio, and an optional claimed lineage link ("student of ..."), which you provide yourself; the photo shown is the same one from your sign-in provider (Google/GitHub, see above), kept in sync automatically - there is no separate profile photo to provide or store. This is off by default - your profile is a private draft until you explicitly publish it. A published profile is reachable by anyone who has its link, but is never listed, indexed, or made searchable. You can unpublish it at any time, which immediately makes it private again.
- Minimal server request logs (the kind any web server keeps briefly for security and troubleshooting), kept for a short, limited period.
We do not collect payment information, browsing history across other sites, or any special category of data (health, religion, etc.).
Cookies
Martialis uses a small number of cookies, all of them strictly necessary to make the site work:
| Cookie | Purpose | Lifetime |
|---|---|---|
martialis_session | Keeps you signed in | Tied to your session |
martialis_pkce | Secures the sign-in handshake | 30 minutes |
martialis_pending_consent | Carries your newsletter choice through sign-in | 30 minutes |
lang | Remembers your language choice | 1 year |
focus | Remembers your default lineage focus person | 1 year |
None of these are used for advertising or cross-site tracking, so no cookie consent banner is shown - none is required for strictly necessary, functional cookies under EU law.
Why we process this data (lawful basis)
- Signing you in and running your account: necessary to provide the service you asked for (performance of a contract).
- Security and abuse prevention: our legitimate interest in keeping the site working for everyone.
- The monthly updates newsletter: only with your explicit, freely-given consent, requested separately from anything else and never pre-ticked.
Who else processes this data
We use a small number of specialist providers ("processors") to run the site, each bound by their own data processing agreement:
- Supabase - authentication and database hosting.
- Brevo - delivery of sign-in and (if you opt in) newsletter emails.
We do not sell your data, and we do not share it with anyone for their own marketing purposes.
How long we keep your data
We keep your account data for as long as your account exists. If you delete your account (Settings → Delete my account), your account and its associated preferences are deleted immediately and permanently, without undue delay.
Your rights
You have the right to:
- Access the personal data we hold about you.
- Correct it if it's wrong.
- Erase it at any time, immediately and without needing to ask us: Settings → Delete my account.
- Take it with you (data portability).
- Withdraw consent to the monthly newsletter at any time, as easily as you gave it: Settings → Monthly updates, or the unsubscribe link in any such email.
- Object to processing based on our legitimate interest.
- Complain to your data protection supervisory authority. If you're in the EU, this is normally the authority in your country of residence; ours is [PLACEHOLDER: supervisory authority / jurisdiction].
To exercise any of these rights beyond the self-service options above, contact us at [PLACEHOLDER: contact email].
Children
Martialis is not directed at children, and we do not knowingly collect data from anyone under 16.
Changes to this policy
We may update this policy as the site evolves. Material changes will be reflected here with an updated date, and, where they affect the newsletter, may prompt us to ask for your consent again.
Contact
Questions about this policy or your data: [PLACEHOLDER: contact email].