Effective Date: May 15, 2025
Last Revised: May 15, 2025
Website: https://wtchronicles.com
Data Controller: Worldtailor’s Chronicles, blog operated by an individual Paweł Bacławski
Mailing Address: Kołobrzeska 48c, P.O. Box 55, FUP 53, 80-325 Gdańsk, Poland
Contact Email: [email protected]
The site is operated from Poland by the blog’s administrator, who acts as the data controller.
Introduction
Welcome to Worldtailor’s Chronicles. This Privacy & Cookie Policy explains how we collect, use, share and protect your personal data when you visit or interact with our website. We comply with worldwide privacy laws, including:
- EU GDPR
- California CCPA
- Brazilian LGPD
- Canadian PIPEDA
- Singapore PDPA
By accesing or using our site, you consent to the practices described in this policy. Your continued use of the site after any update constitutes acceptance of the revised policy. If you disagree, please refrain from visiting or providing any personal data.
Definitions
- Service/Site – Worldtailor’s Chronicles website at https://wtchronicles.com.
- Personal Data – Any information that identifies or relates to you, including email address, IP address, geolocation, preferences, submitted content and cookies identifiers.)
- Usage Data – Technical data collected automatically, including browser type, device type, pages visited, session duration, operating system, click data.)
- Cookies – Small text files placed on your device to store preferences or track usage.
- You – Any visitor, reader, or user of our service, including natural persons, institutions or organizations using the site, as defined by Polish and EU data protection law.
- We/Us/Our – Worldtailor’s Chronicles (blog identity.)
- Service Providers – Third‐party companies that process data on our behalf including cloud hosting, analytics platforms, security systems and form handlers.
What Data We Collect
Personal Data
- Email address (if you sign up for newsletter or contact form in future)
- Name or pseudonym (if provided in any form)
- Cookie consent status (accepted/declined, with timestamp)
Usage & Technical Data
- IP address and geolocation (may be anonymized for analytics)
- Browser type and version
- Operating system
- Device type (desktop, mobile, tablet)
- Screen resolution and language
- Pages visited, session duration, referral source
- Click and scroll events
- Page load times and JavaScript errors
Security & Diagnostic Data
- CAPTCHA results (Cloudflare Turnstile)
- Firewall logs (Wordfence)
- Login attempts and blocked IPs (Limit Login Attempts Reloaded)
- User agent details
- Security rule logs (Limit Login Attempts Reloaded)
Consent Data
- Cookie identifiers
- User preferences stored by CookieYes
Optional Future Data
- Form submissions (contact form, comments, newsletter sign-up)
- User‐generated content (any feedback or creative submissions)
We do not collect sensitive categories of data such as: racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, health information, or data concerning sexual orientation.
We do not collect data from individuals under 13.
Why We Collect & Process Data
We collect and use information about you for various purposes, including:
- Analytics & Improvement: We measure traffic, time spent and navigation paths to understand how you interact with our site so we can enhance its content and performance.
- Security & Fraud Prevention: We detect and block fraud, bots and malicious behavior to protect both you and our site.
- Consent Management: We track and store your cookies and tracking preferences to respect your privacy choices and ehnance your experience of Service.
- Communication: We respond to inquiries, contact messages and, with your consent, send newsletters or updates (planned feature, currently inactive.)
- User Support and Interaction: We use your data to manage site features like comments or forms, to moderate content, and to provide user support (planned feature, currently inactive)
- Legal & Contractual: We use and maintain data and records to enforce our terms of use and fulfill legal obligations under applicable data protection and security laws. We also maintain data to perform services you request, such as newsletter (planned feature, currently inactive.)
Legal Bases (EU GDPR)
We process your data on these legal grounds:
- Art. 6(1)(a) Consent – for non-essential cookies, marketing, analytics, newsletters.
- Art. 6(1)(b) Contract – to provide services you request (e.g. newsletter delivery).
- Art. 6(1)(f) Legitimate Interest – to secure our site, run analytics, prevent abuse.
For other jurisdictions, such as CCPA, LGPD and others we rely on equivalent lawful bases such as user opt-in and legitimate business purposes.
If we wish to use your data for any other purpose not listed above, we will obtain your consent first.
Cookies & Tracking
We use both first-party and third-party cookies. These cookies serve the following functions:
| Type | Purpose | Examples | Duration |
|---|---|---|---|
| Necessary | Core functionality, session autentification & security | Session cookies, login authentication (WordFence, Cloudflare) | Session |
| Functional | Store user interface settings, theme, language | CookieYes preference cookie | 1 year |
| Analytics | Aggregate usage and performance metrics | Google Analytics (via Site Kit, MonsterInsights) | Up to 14 months |
| Consent | Track your choices (accept/decline cookies) | CookieYes consent record | Until withdrawn |
You can manage or withdraw cookie consent at any time via our cookie banner (“Cookie Settings”) or your browser preferences. All non-essential cookies require your explicit consent (EU ePrivacy Directive, GDPR Art. 6(1)(a)).
Security cookies may store your IP address, login attempt counts, username (if relevant), and browser fingerprint.
Newsletter (planned feature, currently inactive): To subscribe, you’ll provide an email address. In return, you may receive:
- Updates on new blog entries
- Creative development logs (devlog entries)
- Resource links (e.g., tools, maps, illustrations)
- Optional surveys or feedback requests
No tracking pixels will be embedded unless user has provided consent.
Third-Party Processors & International Transfers
We share data only with trusted service providers under contractual obligations:
- Google LLC (Analytics, Fonts, reCAPTCHA) – USA
- Cloudflare Inc. (CDN, DDoS protection) – Global CND locations (dynamic node assignment)
- Hostinger International (Hosting provider) – EU/Lithuania
- Defiant Inc. (Wordfence) – Firewall & malware scanning – USA
- Mozilor Ltd. (CookieYes) – Cookie consent management – EU/India
- Other plugins (WP Activity Log, WPForms) – Technical metadata
Because some providers are outside the European Economic Area, your data may be transferred to or processed in countries with different data protection laws (e.g. USA, India). When we do so, we put in place appropriate safeguards, such as European Commission Standard Contractual Clauses or similar safeguards to ensure adequate protection. In all cases, we take steps to ensure a level of protection equivalent to the EU.
We do not sell or trade your personal information to third parties.
Data Retention
| Data Type | Retention Period |
|---|---|
| Analytics | Up to 14 months |
| Security & Logs | Up to 12 months |
| Cookie Consent Records | Until you withdraw consent |
| Form Submissions(planned feature, currently inactive) | Up to 6 months (future) |
After these periods, data is either securely deleted or irreversibly anonymized.
Your Privacy Rights
EU / EEA (GDPR)
EU/EEA residents have right to:
- Access, Rectification & Erasure of personal data (including “right to be forgotten”)
- Restriction & Objection to processing
- Data Portability
- Withdraw Consent at any time
- Complaint to your supervisory authority (eg. https://uodo.gov.pl)
California (CCPA)
California residents have right to:
- Know what data is collected and shared
- Delete your personal data
- Opt-Out of data sale (we do not sell data)
- Non-Discrimination for exercising your rights
Brazil (LGPD), Canada (PIPEDA), Singapore (PDPA)
Brazil, Canada and Singapore residents have:
- Similar rights to access, correction, deletion, consent withdrawal, and complaint filling, with specific mechanisms detailed in regional data authority documentation.
To exercise any of these rights, please contact us at [email protected]. We will respond within applicable legal timeframes.
Data Security
We employ robust technical and organizational safeguards, including:
- SSL/TLS encryption for all data transmission
- Two-factor authentication for admin areas
- Role-based access controls on hosting and WP admin
- Regular updates & secure backups (UpdraftPlus)
- Firewall & malware scanning (Wordfence)
While we strive to protect your data, please note that no system is 100% secure. In the unlikely event of a data breach, we will promptly investigate and notify you and relevant authorities as required by law.
Children’s Privacy
This site is not intended for children under 13. We do not knowingly collect data from minors. If you believe a child has provided us personal data, which we have inadvertently collected, please contact us immediately to request its deletion.
Business Transfers
In the event of a sale, merger, or restructuring, we may transfer your data under confidentiality obligations and continued compliance with this policy.
External Links
Our site may contain links to external websites. We are not responsible for their content or privacy practices. Please review their privacy policies separately.
Policy Updates
We may revise this policy at any time. Changes will be shown:
- On a dedicated Policy Updates page
- Via site banner or modal notice
- Through email if you are subscribed
Please review periodically to stay informed.
Contact Us
If you have questions, concerns or requests regarding this Privacy Policy or your personal data, you can contact us at:
- Email: [email protected]
- Mail: Kołobrzeska 48c, P.O. Box 55, 80-325 Gdańsk, Poland
We will respond to your inquiries or requests in accordance with applicable law.
Last Updated: May 15, 2025