PRIVACY POLICY (DRAFT — PENDING LEGAL REVIEW)
This page explains what personal data the Revelation! (R!) site collects, why, and what you can do about it. We only collect what each form needs. We do not sell your data.
Last updated: [TBD].
Who we are
Revelation! is owned by R3V.WORLD, which is the data controller for this site.
- Contact: revelation@r3v.world
- Legal entity name and registered address: [TBD]
Newsletter + “notify me”
- Required: name and email.
- Optional: phone, social media links, website.
- Consent record: when you signed up and which version of the consent wording you agreed to.
We use double opt-in: you are only added after you confirm from the email we send you. Every email has an unsubscribe link, and you can unsubscribe at any time.
Get Involved forms
Guest edit, collaborate, join the collective, partner and general interest forms collect:
- The same contact fields as the newsletter (name and email, plus optional phone, social links and website).
- City and country.
- The answers each form asks for, such as expertise, disciplines, organisation, availability and pay expectations.
We use this to review your interest and get back to you.
Mixer RSVP
- Contact fields (as above).
- Number of plus-ones.
- What you do.
We use this to plan the event and contact you about it.
Contact form
- Name, email, topic and message.
We use this to reply to you.
Submissions + your account
Submitting needs a lightweight account: your name and email. You sign in with a one-time code sent to your email. The account is a CR8 account; CR8 is the R3V.WORLD platform that hosts this site. [TBD: link to the CR8 privacy policy]
With a submission we collect:
- Your work: text, links and uploaded files (up to 500 MB each).
- Contributor details: credit name, pronouns, location, bio and links.
- Container, format and language of the work.
- A record that you accepted the submission agreement (what you agreed to and when) and that you confirmed you are 18+.
Submissions are reviewed by the R! editorial team, including guest editors. If your work is published, the contributor details you provide for credit appear with it, as set out in your agreement.
Security + technical data
To deliver the site and protect the forms from spam and abuse, our providers process your IP address and basic request data. Forms use a bot check (Cloudflare Turnstile) and rate limiting.
We only use essential cookies, to keep you signed in. There are no analytics, advertising or tracking cookies.
Legal basis
- Newsletter and “notify me”: your consent.
- Submissions, your account, RSVPs and Get Involved forms: taking the steps you ask us to take.
- Replying to messages, security and spam prevention: our legitimate interest in running the site safely.
[TBD: confirm in legal review]
Who processes your data
The site runs on CR8 (R3V.WORLD) infrastructure, using these providers:
- Vercel: hosting.
- Supabase: database and sign-in, EU region (Ireland, eu-west-1).
- Cloudflare: file storage (R2) and bot protection (Turnstile).
- Resend: email delivery.
- Upstash: rate limiting.
Some of these providers may process data outside the EU/EEA. Transfer safeguards: [TBD].
How long we keep it
- Newsletter: until you unsubscribe. The consent record is kept for [TBD] afterwards as proof of consent.
- Get Involved, RSVP and contact messages: [TBD].
- Account: until you ask us to delete it.
- Submissions not selected: [TBD].
- Published work and credits: as agreed in your submission agreement.
Your rights
You can ask to:
- access the data we hold about you
- correct it
- delete it
- object to how we use it
- receive it in a portable format
- withdraw consent at any time (this does not affect anything done before)
Email revelation@r3v.world. You can also complain to your data protection supervisory authority.
Changes
If this policy changes, we will update this page and the date above.