Last updated May 13, 2026

Privacy Policy

The Asterfall Chronicle stores only the minimum data needed to run a public vote-driven story account, maintain auditability, and manage supporter perks.

Data Stored

• Hashed Bluesky account identifiers for vote deduplication.
• Vote option, turn number, source post URI, and reply URI.
• Suppression or opt-out account hashes.
• Publishing review queue status and audit log entries.
• Minimal supporter records such as display name, platform, tier, active status, and timestamps.
• Supporter portal requests such as display name, optional contact hint, tier claim, request title, request details, moderation status, and moderation notes.
• For opt-in Citizens only: Bluesky DID, latest handle/display metadata, consent status, House state, House history, vote linkage, and privacy/deletion status in local canonical storage.

Data Not Stored

• Bluesky passwords or app passwords in source control.
• Bluesky app passwords from Citizen users.
• Raw OAuth tokens in public exports.
• Payment card details.
• Private messages.
• Unneeded profile metadata.
• Paid vote multipliers.

Retention

Vote and audit data may be retained long enough to explain public outcomes and rebuild the season ledger. Raw social reply text is not retained beyond parsing unless a moderation or audit need is documented.

Supporter Data

Supporter automation uses provider APIs and webhooks only for membership status, tier, entitlement, and perk fulfillment. The supporter portal may collect an optional contact hint and submitted request text so Citizen naming requests and Council Scribe proposals can be moderated. Email or address data will not be requested from Patreon unless a concrete feature requires it and this policy is updated first.

Citizen Houses

Citizen Houses are opt-in and private by default. A casual Bluesky vote does not create a public profile. Citizen Hall uses official Bluesky sign-in to learn your DID; it does not ask for Bluesky app passwords. The public site receives only a salted portal subject hash and sanitized dashboard data. Public profile publishing requires explicit consent and moderation.

Public Site Analytics

The public website records aggregate page and supporter-funnel counts only. It does not store IP addresses, user agents, cookies, or per-visitor identifiers for analytics.

Opt-Out

Opt-out users are represented by a hashed account identifier in the suppression list. Suppressed accounts are ignored during vote parsing.

Contact

Contact the project through the official Bluesky account: @asterfallchronicle.bsky.social.