Privacy Policy

What we collect

When you submit a story, we collect:

• Your name, only if you choose to include it (you can submit anonymously)
• The story text you submit

We also keep a hashed (scrambled, one-way) version of your IP address for a short time, purely to stop spam and abuse of the submission and "like" buttons. This hashed value can't be turned back into your real IP address, and it isn't linked to your name or story.

We don't collect your email address, don't require an account to submit, don't take payment information, and don't knowingly collect information from children.

How we use your information

• To publish approved stories to the public feed
• To automatically and, sometimes, manually review submissions before publishing
• To prevent spam and abuse of the site

We never sell your information, and we never use it for advertising.

Automated moderation

Every submission is checked by an automated review system (Anthropic's Claude API) before publishing, to filter spam and flag anything that needs a human to look at it first. Your story text is sent to Anthropic for this purpose, which may process it outside New Zealand. See our Community Guidelines for what this review looks for.

Where your information is stored

Data is stored with Supabase (our database provider) and the site is hosted with Vercel. Depending on their infrastructure, your information may be stored and processed outside New Zealand.

Analytics

We use Vercel Analytics to understand how many people visit the site and which pages they look at. It doesn't use cookies and doesn't collect anything that identifies you personally - just aggregate, anonymous data like page views, referring site, approximate location (country/region level), and device type. Visit data isn't kept longer than 24 hours in identifiable form.

How long we keep information

Published stories are kept indefinitely as part of the public archive, unless you ask us to remove yours.

Submissions that are rejected or flagged as spam are permanently deleted within 90 days.

Your rights

Under New Zealand's Privacy Act 2020, you have the right to:

• Ask what personal information we hold about you
• Ask us to correct information that's wrong
• Ask us to delete your information, including removing a story you've submitted

To make any of these requests, contact us at onemillionsmallthings@gmail.com.

If you're located outside New Zealand (for example, in the EU or UK), you may have additional rights under your local law, such as the GDPR. We'll honour reasonable requests consistent with those rights.

Changes to this policy

We may update this policy from time to time. Significant changes will be noted on this page with an updated date.

Contact

Questions about this policy? Email us at onemillionsmallthings@gmail.com.