Privacy notice

Last updated: September 28, 2026

This notice covers facecake.ai. Anyone can read the opening of every post without signing in. This site records information about you only when you sign in to read the rest.

Who is responsible

FaceCake Marketing Technologies, Inc. is the controller of the personal data described here. You can reach us at info@facecake.com.

What we record

When you sign in and read, three kinds of records are kept.

Your sign-in account:

your email address;
your display name, if any, and, if you sign in with Google, your Google profile photo address and Google account ID;
when the account was created and when you last signed in.

Your reader record:

your email address, your name and how you signed in (Google or an email link);
when the record was created and when you were last seen;
how many times you have signed in.

Your reading events:

each sign-in, and the posts you open (once per post per day), with the time;
how far you read in each post (a quarter, half, three quarters or all of it);
a salted one-way hash of your IP address; and
your device type: operating system, browser, and whether it is a phone, tablet or desktop.

Our reading records keep only that one-way hash, never your IP address itself or your browser’s full identification string.

Google Cloud, which runs this site’s sign-in and reading-record services, keeps standard request logs (including your IP address and browser details) for up to 30 days for security and operations. We do not copy these logs into our records.

Why we record it

We record this information to know who reads FaceCake’s writing and to respond to readers. Our legal basis is our legitimate interest in understanding our readership and staying in touch with the people who read us.

Who processes it

Google (Firebase) hosts this site and processes this information on our behalf, as our processor, in the United States.

What stays in your browser

IndexedDB (or localStorage, where IndexedDB is not available): your sign-in session, so you stay signed in between visits. The Firebase library also notes there the days it ran and its version, with no personal information.
localStorage: a small marker of the last sign-in recorded, so it is not recorded twice, and, only until you finish signing in with an emailed link, the email address the link was sent to.
sessionStorage, cleared when you close the tab: which posts and reading depths were already recorded in this session, and temporary state while a Google sign-in redirect is in progress.
No cookies. This site sets none. Signing in with Google happens on Google’s own pages, under Google’s privacy policy.
No third-party analytics and no advertising. The only reading activity this site records is described above.

How long we keep it

Reading events are deleted automatically after 12 months. Your sign-in account and your reader record stay until you ask us to delete them. Google Cloud’s request logs are kept for up to 30 days.

Your rights

You can ask for a copy of your data, an export of it, or its deletion by emailing info@facecake.com from the address you sign in with. We respond within 30 days. Deletion removes your sign-in account, your reader record and your reading events.

Children

This site is not directed at children under 13, and we do not knowingly collect information from them.

We do not sell or share your personal data.

Changes to this notice

If this notice changes, we will update this page and the date at the top.