privacy policy

What we collect

We collect only what is necessary to operate the product and communicate with you. This includes information you provide directly — your email address when you subscribe to The Scarlet Pages or join the waitlist, and your account credentials and reading data when you use Forbidden Folio. It also includes information collected automatically: basic usage data, device and browser type, pages visited, and approximate location at the country or region level. We use Google Analytics for this purpose. We do not collect precise geolocation data.

Within Forbidden Folio specifically, your reading logs, spice ratings, trope tags, content warnings, and personal notes are stored in your account. This data is yours. It is private by default and is never visible to other users.

How we use it

Your data is used to operate the service you signed up for — nothing more. Specifically: to provide and maintain your Forbidden Folio account and reading history, to deliver The Scarlet Pages newsletter to subscribers who have opted in, to send transactional emails related to your account via Resend, to understand how visitors use the site so we can improve it, and to communicate with you about the product when relevant.

We do not use your data to build advertising profiles. We do not sell your data. We do not share your reading history, ratings, or any personally identifying information with third parties for marketing purposes.

Who we share it with

We work with a small number of third-party services to operate the product. Each receives only the data necessary for their specific function.

• Supabase — database and authentication infrastructure. Your account data and reading history are stored here.
• Beehiiv — newsletter delivery for The Scarlet Pages. Subscriber email addresses are stored here.
• Resend — transactional email delivery for account-related communications.
• Vercel — hosting and deployment infrastructure.
• Google Analytics — anonymous site usage analytics. No personally identifying information is shared.

We do not sell, rent, or otherwise share your personal information with any party outside of these operational providers.

Cookies

We use cookies and similar technologies to keep you logged in, remember your preferences, and understand how the site is used via Google Analytics. Analytics cookies collect anonymous, aggregated data only. You can opt out of Google Analytics tracking at any time using the Google Analytics opt-out browser add-on.

Your rights

If you are a Colorado resident, you have rights under the Colorado Privacy Act (CPA), including the right to access the personal data we hold about you, the right to correct inaccurate data, the right to delete your personal data, the right to opt out of the processing of your data for targeted advertising or its sale, and the right to data portability. We do not engage in targeted advertising or the sale of personal data, but your other rights apply in full.

Regardless of where you are located, you may request access to, correction of, or deletion of your personal data at any time by contacting us at the address below. We will respond within 45 days.

Data retention

We retain your account data and reading history for as long as your account is active. If you delete your account, your personal data and reading history will be permanently deleted within 30 days. Newsletter subscriber data is retained until you unsubscribe, at which point it is removed from active lists within 10 business days.

Children

Luxuria Obscura and its products are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page and, where appropriate, notify subscribers via email. Continued use of the product after changes are posted constitutes acceptance of the updated policy.

Contact

Questions, requests, or concerns about this policy or your data can be directed to privacy@luxuriaobscura.com. We take these requests seriously and will respond promptly.