Privacy Policy
1. Introduction and Identity of the Controller
Welcome to Laenethy Writers Magazine, a digital magazine for writers and publishing professionals operated by Harbinger Bros. LLC, a limited liability company incorporated under the laws of the State of Wyoming, United States, with its principal place of business at 1309 Coffeen Avenue, Sheridan, WY 82801, United States (“we,” “us,” “our,” or “the Company”).
As explained in the Intended Audience section of our Terms and Conditions, Laenethy Writers Magazine is not specifically directed at, or marketed to, residents of the European Union, the European Economic Area (“EEA”), or the United Kingdom, and we do not consider ourselves subject to the General Data Protection Regulation (EU) 2016/679 (“GDPR”) or the UK General Data Protection Regulation (“UK GDPR”) on a targeting basis. Notwithstanding that position, and consistent with the practice followed by many international publishers, we have chosen to apply a single, globally consistent set of privacy protections — modelled on the GDPR, one of the most comprehensive data protection frameworks in the world — to every visitor of this website, regardless of location. Harbinger Bros. LLC acts as the data controller (or functional equivalent) for personal data processed through this website, and this Policy is drafted accordingly.
We can be reached by email at support@laenethylabs.com. We do not maintain a dedicated Data Protection Officer, as we do not engage in large-scale systematic processing of special categories of personal data and do not consider the GDPR’s DPO-appointment thresholds to be met; however, all data protection enquiries are handled directly by our compliance team at the address above.
2. Scope and Territorial Application
This Privacy Policy, including the rights described in Section 6, applies equally to every visitor and user of laenethy.com, wherever located. We do not vary the privacy protections we offer based on a visitor’s location.
As explained in the Intended Audience section of our Terms and Conditions, Laenethy Writers Magazine’s primary intended audience consists of readers in the United States and an international community of writers and publishing professionals; the publication is not specifically directed at, or marketed to, residents of any Member State of the European Union. Applying a single global privacy standard to all visitors, as described throughout this Policy, is a voluntary policy choice made for consistency and simplicity — a practice also followed by many international publishers — and should not be read as an acknowledgment that the GDPR, UK GDPR, or similar frameworks apply to us on a targeting basis.
Depending on your location, certain additional legal regimes may separately grant you further, or differently structured, rights alongside the global baseline described in Section 6 — see Section 7 (California) and Section 11 (other jurisdictions). These operate in addition to, not instead of, the rights described in Section 6.
3. What Personal Data We Collect
We collect and process only the minimum personal data necessary to operate our publication. We do not require user registration, maintain user accounts, run advertising networks, or deploy behavioural profiling technologies. We do use two cookie-less, anonymous analytics tools to measure aggregate visitor numbers — see “Anonymous Web Analytics” below.
Anonymous Web Analytics
To measure aggregate visitor numbers, we use Vercel Web Analytics, a service provided by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). This tool collects only aggregated, non-personal metrics such as page views, referrers, and approximate country-level location. It does not set cookies, does not permanently store IP addresses, and does not re-identify or track visitors across sessions or websites. The legal basis for this processing is our legitimate interest in understanding how our website is used (Art. 6(1)(f) GDPR). No consent is required for this processing, as no information is stored on or read from your device within the meaning of § 25 TDDDG / Art. 5(3) ePrivacy Directive. Further information: Vercel Web Analytics privacy documentation.
We additionally use Cloudflare Web Analytics, a cookie-less, anonymous analytics service provided by Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). Like the tool above, it collects only aggregated, non-personal metrics (e.g. page views, referrers, approximate country-level location) using your browser’s Performance API, sets no cookies, and does not store a persistent identifier or re-identify visitors across sessions or websites. The legal basis for this processing is our legitimate interest in understanding how our website is used (Art. 6(1)(f) GDPR); no consent is required for this processing, as no information is stored on or read from your device within the meaning of § 25 TDDDG / Art. 5(3) ePrivacy Directive. Further information: Cloudflare's privacy policy.
3.1 Data Collected Automatically by Our Infrastructure
When you access laenethy.com, certain technical data is automatically processed by our infrastructure providers as part of the delivery of our web service. This includes:
- IP address: Your Internet Protocol (IP) address is processed by Vercel Inc. (“Vercel”), our hosting provider, for the purpose of routing network requests, detecting abuse, and maintaining service security. Vercel may retain server access logs for a limited period in accordance with its own data retention policies.
- HTTP request metadata: This includes your browser type and version (User-Agent string), referring URL, requested URL path, timestamp of the request, and HTTP response codes.
- TLS/SSL connection data: Technical data required to establish a secure encrypted connection to our servers.
We do not independently store these server logs beyond the retention periods set by Vercel's standard infrastructure logging. We do not use IP addresses to identify individual users or to build profiles.
3.2 Data You Voluntarily Provide
Laenethy Writers Magazine offers a contact form at /contact. If you use it, we collect and store your name, email address, and message content in our application database in order to respond to your inquiry. This data is stored via our database provider, Supabase Inc., and is accessible only to authorised personnel who handle correspondence. Legal basis: Art. 6(1)(b) GDPR (necessary to respond to your request) or, where no contractual relationship is established, Art. 6(1)(f) GDPR (legitimate interest in handling incoming communications). We retain contact form submissions for as long as necessary to address your inquiry and for a reasonable period thereafter for documentation purposes, typically no longer than 12 months, unless a longer retention period is required by law. You may request earlier deletion of your message at any time by contacting us. We do not offer comment sections or newsletter subscriptions.
3.3 Data Stored in Your Browser (localStorage)
We store one (1) item in your browser's localStorage:
| Key | Purpose | Data stored | Duration |
|---|---|---|---|
hpm_cookie_consent | Records your cookie consent decision so we do not repeatedly prompt you | A string value indicating consent status (e.g., “accepted” or “declined”) | Persistent until manually cleared |
This localStorage entry is technically necessary for the operation of our consent management system. It does not contain any unique identifier, does not transmit data to any server, and is not used for tracking or advertising purposes.
4. Legal Bases for Processing
As part of the global approach to privacy described in Section 1 and Section 2, we apply the following legal bases, modelled on Article 6 GDPR, as a matter of policy to all processing of personal data through this website, regardless of the location of the individual concerned:
- Article 6(1)(f) GDPR — Legitimate Interests: The automatic processing of your IP address and HTTP request metadata by our hosting infrastructure is necessary for our legitimate interests in maintaining a secure, functional, and reliable website, and in detecting and preventing abuse.
- Article 6(1)(c) GDPR — Legal Obligation: We may process personal data where necessary to comply with applicable legal obligations, including responding to lawfully issued court orders or regulatory demands.
- Article 6(1)(a) GDPR — Consent: Where we ask for your consent (for example, in relation to optional features not yet deployed), processing will only occur upon your freely given, specific, informed, and unambiguous consent. You may withdraw any consent given at any time without detriment.
5. International Data Transfers
As a US-based company using US and international cloud infrastructure, some processing of personal data occurs outside your home jurisdiction.
5.1 Transfers to the United States
Our primary hosting provider, Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA), processes server-side request data in the United States. Vercel participates in the EU-US Data Privacy Framework as established by Commission Implementing Decision (EU) 2023/1795 of 10 July 2023, which provides an adequacy decision for transfers to certified US organisations. We also rely on Standard Contractual Clauses pursuant to Article 46(2)(c) GDPR as a supplementary transfer mechanism.
5.2 Database Services
We use Supabase Inc. as our database provider. Supabase processes data under a Data Processing Agreement compliant with GDPR requirements. Data is stored in geographically distributed data centres and protected by industry-standard encryption at rest and in transit.
5.3 Image Delivery (Unsplash and Wikimedia Commons)
Article images may be hosted on and served directly from Unsplash (Unsplash Inc., Montreal, QC, Canada). When your browser loads an image from Unsplash servers, Unsplash may receive your IP address and standard browser request headers as part of the HTTP connection. We have no control over Unsplash’s data processing. Unsplash’s privacy policy: unsplash.com/privacy
Article images may also be hosted on and served directly from Wikimedia Commons (Wikimedia Foundation, Inc., 1 Montgomery Street, Suite 1600, San Francisco, CA 94104, USA). When your browser loads an image from Wikimedia Commons servers, the Wikimedia Foundation may receive your IP address and standard browser request headers as part of the HTTP connection. We have no control over the Wikimedia Foundation’s data processing. Wikimedia Foundation’s privacy policy: foundation.wikimedia.org/wiki/Policy:Privacy_policy
Email Correspondence
If you contact us by email at support@laenethylabs.com, your message and any attachments are received, stored, and managed through GoDaddy Workspace Email (GoDaddy.com, LLC, 100 S. Mill Ave, Suite 1600, Tempe, AZ 85281, USA), our email hosting provider. GoDaddy processes this correspondence as our data processor, acting on our instructions; we have no control over its underlying infrastructure. GoDaddy's privacy policy: godaddy.com/legal/agreements/privacy-policy
6. Your Privacy Rights
As part of our global approach to privacy (see Section 1), we extend the following rights, modelled on the GDPR / UK GDPR, to every visitor of this website, regardless of location:
- Right of access (Art. 15 GDPR): You have the right to obtain confirmation of whether we process your personal data and, if so, to receive a copy of that data and information about how it is used.
- Right to rectification (Art. 16 GDPR): You have the right to have inaccurate personal data corrected without undue delay.
- Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data where one of the grounds set out in Article 17 applies.
- Right to restriction of processing (Art. 18 GDPR): You have the right to request that we restrict the processing of your personal data in certain circumstances.
- Right to data portability (Art. 20 GDPR): Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to object (Art. 21 GDPR): You have the right to object to processing based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds which override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.
- Right not to be subject to automated decision-making (Art. 22 GDPR): We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.
- Raising concerns with a data protection authority: If you are located in the EU/EEA, a list of supervisory authorities is available at edpb.europa.eu. In the UK, the relevant authority is the Information Commissioner's Office (ICO) at ico.org.uk. If you are located elsewhere, we encourage you to raise any concern directly with us first, using the contact details below; we handle all such requests under the same standards described in this Section, regardless of where you are located.
To exercise any of these rights, please contact us at support@laenethylabs.com. We will respond to your request within 30 days.
7. Rights of California Residents (CCPA/CPRA)
California residents have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:
- Right to Know: The right to know what personal information we collect, use, disclose, and sell.
- Right to Delete: The right to request deletion of personal information we have collected, subject to certain exceptions.
- Right to Correct: The right to request correction of inaccurate personal information.
- Right to Opt-Out: The right to opt out of the sale or sharing of personal information. We do not sell or share personal information as defined by the CCPA/CPRA.
- Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined by the CCPA/CPRA.
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To submit a California privacy request, contact us at support@laenethylabs.com with the subject line “California Privacy Request.”
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Server-side infrastructure logs maintained by Vercel are subject to Vercel's own retention policies (typically 30 days for standard logs). LocalStorage data remains in your browser until you manually clear your browser data or site data.
9. Security
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. All data transmitted between your browser and our servers is encrypted using industry-standard TLS encryption. Our database is protected by row-level security policies and access controls.
10. Children's Privacy
Our Website is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us immediately at support@laenethylabs.com.
11. Additional Jurisdictions (Australia, India, South Korea, Brazil, South Africa)
Australia
If you are located in Australia, the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) apply to our processing of your personal information. You have the right to access and seek correction of your personal information, and to lodge a complaint about a potential breach of the APPs. Complaints may be directed to us at support@laenethylabs.com and, if unresolved, to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
India
If you are located in India, the Digital Personal Data Protection Act, 2023 (“DPDP Act”) applies to our processing of your personal data. As a Data Principal, you have the right to obtain a summary of the personal data we process about you, the right to correction and erasure of your personal data, and the right to grievance redressal. To exercise these rights or raise a grievance, contact support@laenethylabs.com. Unresolved grievances may be escalated to the Data Protection Board of India.
South Korea
If you are located in South Korea, the Personal Information Protection Act (“PIPA”) applies to our processing of your personal information. You have the right to access, correct, delete, and suspend the processing of your personal information. To exercise these rights, contact support@laenethylabs.com. Complaints may also be directed to the Personal Information Protection Commission (PIPC) of the Republic of Korea.
Brazil
If you are located in Brazil, the Lei Geral de Proteção de Dados Pessoais (“LGPD”, Law No. 13,709/2018) applies to our processing of your personal data. You have the right to confirmation of the existence of processing, access, correction, anonymisation, portability, and deletion of your personal data, and to information about the public and private entities with which we have shared it. To exercise these rights, contact support@laenethylabs.com. Complaints may also be directed to the Autoridade Nacional de Proteção de Dados (ANPD).
South Africa
If you are located in South Africa, the Protection of Personal Information Act 4 of 2013 (“POPIA”) applies to our processing of your personal information. You have the right to access, correct, and request deletion of your personal information, and to object to its processing. To exercise these rights, contact support@laenethylabs.com. Complaints may also be directed to the Information Regulator of South Africa.
12. Notification of Personal Data Breaches
As part of our global approach to privacy, we apply breach-notification practices modelled on Articles 33–34 GDPR to any personal data breach, regardless of the location of the individuals affected: in the event of a personal data breach likely to result in a risk to your rights and freedoms, we aim to notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it. Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay, describing the nature of the breach and the measures taken or proposed.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The date of the most recent revision appears at the top of this page. We encourage you to review this Policy periodically. Where changes are material, we will take reasonable steps to notify you.
14. Contact
For any questions, concerns, or requests relating to this Privacy Policy or our data practices:
Harbinger Bros. LLC
1309 Coffeen Avenue
Sheridan, WY 82801
United States
Email: support@laenethylabs.com