Privacy Policy

✦

Effective date: March 2026

This Privacy Policy describes how A Thousand Nights and One Night (“the Website”), operated by Andrea Malagodi (“we”, “us”, or “our”), collects, uses, and protects your personal information when you visit read1001.com.

✦

Information We Collect

Account information: When you sign in using Google OAuth, we receive and store your name and email address as provided by Google. We do not receive or store your Google password.

Payment information: When you purchase premium access, your payment is processed securely by Stripe. We do not store your credit card number, CVV, or other payment card details on our servers. We retain only a record that payment was completed, your Stripe customer identifier, and the transaction date.

Usage data: We may collect basic usage information such as pages visited and access times for the purpose of maintaining and improving the Website. We do not use third-party analytics or advertising trackers.

✦

How We Use Your Information

We use your personal information for the following purposes:

Account management: To create and maintain your account, authenticate your identity, and provide access to purchased content.
Payment processing: To process your one-time payment and grant premium access to the full story collection.
Communication: To respond to enquiries you submit through our contact form.
Website maintenance: To monitor and improve the performance and security of the Website.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

✦

Third-Party Services

We rely on the following third-party services, each of which has its own privacy policy:

Google OAuth — for authentication. When you sign in with Google, your authentication is handled by Google's identity services. See Google's Privacy Policy.
Stripe — for payment processing. Your payment details are handled securely by Stripe and are never transmitted to our servers. See Stripe's Privacy Policy.
Google Cloud Platform — for hosting and infrastructure. The Website is hosted on Google Cloud Run, and data is stored in Google Cloud SQL and Google Cloud Storage. See Google Cloud's Privacy Notice.

✦

Cookies

The Website uses session cookies strictly for authentication purposes. These cookies allow you to remain signed in as you navigate between pages. They do not track your browsing activity on other websites.

We do not use advertising cookies, third-party tracking cookies, or any form of cross-site tracking.

✦

Data Retention

We retain your account information (name and email) and payment record for as long as your account is active. If you request deletion of your account, we will remove your personal data within 30 days, except where retention is required by law (for example, financial transaction records).

✦

Your Rights

Under the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP), you have the following rights regarding your personal data:

Right of access: You may request a copy of the personal data we hold about you.
Right to rectification: You may request correction of any inaccurate data.
Right to deletion: You may request that we delete your account and associated personal data.
Right to data portability: You may request your data in a structured, commonly used, machine-readable format.
Right to object: You may object to our processing of your data in certain circumstances.

To exercise any of these rights, please contact us. We will respond to your request within 30 days.

✦

Children's Privacy

The Website is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly. If you believe that a child under 16 has provided us with personal data, please contact us.

✦

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date at the top of this page. Your continued use of the Website after changes are posted constitutes your acceptance of the revised policy.

✦

Contact

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please reach out via our contact page.