Vaults of the ODD is a small, non-commercial site run from the United Kingdom. This page sets out what data is collected, how it is used, and the rights you have over it under UK GDPR and the Data Protection Act 2018.
What is collected
If you post a comment, the site stores the name and email address you provide along with the comment itself, and an automatically-derived piece of information called an anonymised string (a hash) of your email, which is used only to fetch your Gravatar profile image if you have one. Your email address is never displayed publicly on the site. If you tick the comment cookies opt-in box, a small cookie stores your name and email on your own device so you do not have to re-enter them on later visits.
The site uses Google Analytics via MonsterInsights to understand general patterns of readership. This collects technical information about your visit: the pages you view, approximately where in the world you are, what kind of device you use, and how you found the site. It does not identify you personally. Google Analytics cookies are only set if you consent to them through the cookie banner that appears on your first visit.
What is not collected
No newsletter sign-ups, no accounts, no purchases, no tracking pixels, no third-party advertising networks. Your reading here is not a product being sold to anyone.
How it is used
Comments are moderated for spam and published if genuine. Analytics data informs future writing but is not shared with third parties. Your email address is used only to identify you as a returning commenter and to notify you if someone replies to your comment, if you have opted in to that.
Legal basis for processing
Comment data is processed on the basis of your consent, given at the point of submission. Analytics data is processed on the basis of your consent, given through the cookie banner. You can withdraw consent at any time by revisiting the cookie banner settings or by contacting the site owner for comment-data removal.
Your rights
Under UK GDPR you have the right to request a copy of the personal data held about you, to have it corrected if inaccurate, and to have it deleted. To make such a request, contact via buymeacoffee.com/drewgriffiths or leave a comment on any page asking for your data to be removed, and it will be done within a reasonable period.
If you believe your data has been mishandled, you have the right to complain to the Information Commissioner’s Office at ico.org.uk.
Changes
This policy may change over time. The current version is the one published on this page.