Privacy policy

1. Who we are

Ordo Canonicus is an independently operated fan site: a catalog of published Warhammer 40,000 works, together with community reading lists and optional user accounts. It is not affiliated with, endorsed by, or associated with Games Workshop, Black Library, or any related company.

The independent operator of Ordo Canonicus is the controller of personal data processed on this site.

2. What this notice covers

This notice explains what personal data we process when you visit the site, register an account, or use account features such as reading status, ratings, reviews, comments, and lists.

You can browse the catalog and published reading lists without an account. Creating an account is optional.

3. Information we collect

Account. If you register, we collect your email address, username, and password. Passwords are stored hashed by our authentication provider. We use your email to create the account, let you log in, confirm your email, and send password reset messages. We do not collect a real name, date of birth, phone number, or profile picture.

Profile and preferences. You may add a public bio. In Profile settings you can store preferences such as whether tutorial notes are shown, whether finishing or unfinishing an anthology or omnibus should update the works inside it, and whether a review prompt appears when you rate a work. You can also choose whether your reading history, planned reads, and ratings are private.

Reading activity. If you are logged in, you can mark works as Finished, Reading, or Planned, and we store those statuses and related dates. You can rate works, write reviews, and leave comments on works and on published lists.

Lists.You can create private lists and publish lists (name, description, entries, optional cover image, notes, and order). You can pin other people's published lists and endorse them.

Technical data. We use session cookies to keep you logged in. The hosting and database providers we use typically record standard server logs (such as IP address, browser type, and requested pages) for security and operation of the service. We do not run advertising or analytics scripts on the site.

4. How we use this information

We use this information to:

• operate the catalog, reading lists, and user profiles;
• authenticate you and keep your session;
• send account emails (confirmation and password reset);
• show your reading activity, ratings, reviews, comments, and lists according to the visibility rules below;
• keep the site secure and in working order.

We do not sell your personal data. We do not use it for advertising.

5. What is public

Ordo Canonicus is a community catalog. Much of what you add is meant to be seen by other visitors.

Always public once you post it: your username, bio, reviews, comments, and published lists (including their contents, notes, and cover images). Usernames and public lists can also appear in site search. Catalog pages show community average ratings even when an individual rating is private.

Public by default, with a setting to hide: your reading history (Finished and Reading), planned reads, and ratings. You can change these in Profile settings. If you write a review, the rating attached to that review can still be shown next to it even if your other ratings are private.

Private unless you publish: custom lists you keep as private. Pins of other lists are for your own use.

Hiding a section stops it appearing on your public profile. It does not erase copies that other people may already have made, or cached pages elsewhere on the internet.

6. Cookies

We use strictly necessary cookies to maintain your login session. The site also uses the browser's session storage so that returning from a work page can restore your place in the catalog.

We do not set advertising or analytics cookies. If that changes, this notice will be updated.

7. Processors

We use other companies to run the site. They process data on our instructions:

• Supabase — accounts, database, and file storage (work covers and list covers);
• Vercel — hosting the website and server logs;
• Resend — email correspondence, such as registration confirmation and password reset messages;
• Google Fonts, loaded through the site, for the typefaces used in the interface.

8. Retention and deletion

We keep your account and activity for as long as the account exists. You can delete your account in Profile settings. That removes your comments, reviews, ratings, reading history, lists (including published lists and uploaded list covers), pins, endorsements, profile, and login.

After deletion, operational backups held by our processors may persist for a limited time before they are overwritten.

9. Your choices and rights

You can edit your bio, lists, reviews, comments, and privacy settings while logged in. You can delete individual reviews and comments, unpublish or delete lists, and delete your whole account.

Depending on where you live, you may also have a right to access a copy of your data, to ask for correction, to object to certain processing, or to complain to a data-protection authority. There is no in-app export button yet; if you need a copy of your data, write to contact@ordocanonicus.com.

If you are in the EEA or UK, we process account and list data to provide the service you asked for (a contract with you), public catalog and security logs on the basis of legitimate interests in running a fan catalog, and public posts (bio, reviews, comments, published lists) because you chose to make them public.

10. Children

The site is intended for adults and older teenagers. Public comments, reviews, and profiles are not designed for children. Do not create an account if you are under 16.

11. Changes

If we change how the site handles personal data, we will update this page and the date above.

12. Contact

For privacy settings or account deletion, go to Profile settings. For other privacy requests, please write to contact@ordocanonicus.com.