James E Ventures
Privacy notice
Last updated: 23 July 2026
Duck Universe membership
When you choose to join the Duck Universe, we collect your email address, an optional preferred name, your consent record, the book and format you requested, membership status and necessary security/download events. If you choose Google or Apple sign-in, Supabase Auth receives the identity response and we retain the provider name and its account identifier so we can recognise your verified membership.
Why we use it
We use this information to verify your email, provide member-only book downloads, send occasional new-story, book-release and archive-news emails, prevent abuse, and honour unsubscribe or deletion requests. Consent is the basis for newsletter email. Essential verification, access and security processing is necessary to deliver the service you requested.
Processors
Vercel hosts the website and serverless functions. Supabase stores the protected membership register and processes Google or Apple authentication when you choose those options. Resend delivers verification and archive emails and holds verified newsletter contacts. Google or Apple processes the sign-in you initiate under its own privacy terms. Provider details must be kept current if these services change.
Retention
Pending verification records and expired security tokens should be deleted after 30 days. Download-security events should normally be retained for no more than 12 months. Verified membership records are retained while membership is active and for up to 24 months after unsubscribe where needed to preserve suppression and consent evidence, unless law requires a different period.
Your choices
Every archive email must include an unsubscribe link. You may also use the unsubscribe page. To request access, correction or deletion, email [email protected]. We may retain a minimal suppression record so an unsubscribed address is not accidentally re-added.
Data minimisation
We do not require passwords, postal addresses or payment information. Network identifiers are irreversibly keyed-hashed for short anti-abuse windows rather than stored as raw IP addresses.