Privacy Policy

This page contains the Privacy Policy, effective October 21, 2025, for sorenkai.com and its related subdomains (collectively the "Site"). Soren Kai, or his designated representative ("we", "us", or "our"), is solely responsible for the Site and its content.

1. Information We Collect

We collect only the information necessary to operate the Site and its limited community features:

• Authentication Data: Email address or basic sign-in credentials from your chosen provider (Google, Microsoft, etc.) used solely through Firebase Authentication to prevent spam and automated abuse. These accounts do not create public profiles or social features.
• Content Data: Comments or discussion posts you choose to submit.
• Operational Data: Timestamps, internal IDs, and minimal technical metadata (e.g., IP address, error logs) needed for security, rate-limiting, and diagnostics.
• Communications: Emails you send to us (support, moderation appeals, or privacy requests).
• Newsletter Data: If you subscribe to updates, we collect your email address and preferences.
• Cookies & Analytics: We may use basic analytics tools (e.g., Firebase Analytics, Google Analytics) to understand traffic patterns and improve the Site. This data is aggregated or anonymized and not used for profiling or advertising. Where required by law, we will ask for your consent before setting non-essential cookies.

2. How We Use Information

We use the information we collect to:

• Authenticate access and prevent spam or automated abuse.
• Display and moderate community content.
• Operate newsletters and optional email updates (with opt-out available).
• Maintain Site performance, reliability, and security.
• Communicate with you when you contact us.
• Analyze aggregate traffic to improve the Site

We do not sell or monetize personal data.

3. Legal Bases for Processing

For visitors in the EEA, UK, or Switzerland, data is processed under one or more of these legal bases:

• Contract: : To provide and maintain the Site and its functions.
• Consent: For newsletters, optional communications, and non-essential cookies
• Legitimate Interests: For moderation, abuse prevention, and Site improvement, balanced against your rights.
• Legal Obligation: When necessary to comply with applicable laws.

4. Your Rights

If you are located in the EEA, UK, or Switzerland, you may have the following rights:

• Access the data we hold about you.
• Correct inaccuracies.
• Request deletion (“right to be forgotten”).
• Restrict or object to certain processing.
• Request a copy of your data (portability).
• File a complaint with your local data protection authority.

To exercise any of these rights, contact privacy@sorenkai.com

5. Sharing

1. We do not sell or rent personal data.
2. Limited information may be processed on our behalf by trusted service providers that help us operate the Site, such as:
   • Firebase (Google) for authentication and basic analytics
   • MongoDB Atlas for database storage.
   • Hosting/CDN providers (for site delivery and caching).
   • Newsletter providers (if subscribed).
3. All such providers act under written agreements and may only process data on our behalf.
4. We may disclose data when legally required or necessary to protect rights, safety, or system integrity.

6. Retention

• Authentication Data: Retained while you maintain an active login
• Content: Retained until deleted or anonymized; removed content may persist briefly in backups.
• Newsletter Data: Retained until you unsubscribe
• Operational Logs: Typically kept 90–180 days, unless needed longer for security or compliance.

We retain personal data only as long as necessary for these purposes or as required by law, after which it is deleted or anonymized.

7. Children

The Site is not directed to children under 13 years of age in the U.S. or under the minimum legal age required in your jurisdiction (up to 16 in parts of the EU). We do not knowingly collect personal data from children. If we learn that we have done so, we will promptly delete it.

8. Security

We use industry-standard safeguards, including:

• HTTPS encryption for all data in transit.
• Firebase authentication and access controls.
• Role-based, least-privilege permissions on backend systems.

While no system can guarantee complete security, we take all reasonable measures to protect your information.

9. International Transfers

Data may be processed in the United States or other locations where our service providers operate. For users in the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) or other approved mechanisms to ensure adequate data protection when transferring data outside your region.

10. External Links

The Site may link to third-party platforms including, but not limited to, Substack, Patreon, GitHub, or TikTok. We are not responsible for the privacy practices of those external services. Your use of those platforms is at your own discretion and subject to their respective policies.

11. Updates to This Policy

We may update this Privacy Policy periodically. Material updates will be announced on the Site, and the “last updated” date will be revised accordingly. Your continued use of the Site after changes take effect constitutes acceptance of the updated Policy.

12. Contact

For privacy questions or data requests, contact: privacy@sorenkai.com