Privacy Policy

Piasa Commons is operated by Piasa Studios LLC. This policy explains what we collect when you visit this website, why we collect it, how long we keep it, and who else sees it. It covers this website only. This website is intended for visitors in the United States.

• IP address, browser, operating system, referring page, pages viewed, and the time of each request — recorded by our hosting provider to deliver the website. We keep no log of our own. Only a report of suspected abuse shows us an IP address.
• Pages you view, links you click, ads shown to you, and ads you click — measured through Google Analytics. We also count ad views and clicks ourselves; those records identify the ad and the campaign, never you.

• Your email address, and a display name if you provide one — to create and secure your account.

• Your name, billing address, and card details — given to Stripe on its own payment page to take payment for a subscription. We never see or store them.
• A reference to your Stripe customer record, your plan entitlements, and whether a payment has failed — to give you access to what you subscribed to.

• Your email address — to send you a newsletter you asked for. It is the address already on your account; subscribing does not ask for a second one.
• Which newsletters you chose, and when — so we send you those and not others.
• Delivery failures and spam reports — what your mail provider tells us about a letter we sent you, so we know to stop sending.

We use what we collect for these purposes, and to meet legal obligations:

• To operate the website, keep it secure, and diagnose problems
• To measure how the website is used and how advertising performs

• To create and secure your account

• To take payment for a subscription
• To give you access to what you subscribed to

• To send the newsletters you subscribed to
• To stop sending them the moment you unsubscribe, and if your mail provider tells us the address no longer exists

Cookies are small files a website stores on your device. You can block or delete them in your browser settings, though blocking the sign-in cookie will sign you out and keep you from signing back in. This website sets:

• Sign-in session — set by Clerk; keeps you signed in and verifies a request really came from you. Kept for up to 7 days, or until you sign out.
• Appearance — set by us; remembers whether you chose light or dark. Kept for 1 year.
• Analytics — set by Google Analytics; tells one visitor from another so we can count visits and measure how ads perform. Kept up to 2 years.

• Weather station — set by us; remembers which observation station you picked on the conditions page. Kept for 1 year.

We share data with the companies that help us run this website, and only for the purposes listed:

• Google privacy policy — website and advertising analytics. They receive pages viewed, approximate location derived from IP address, device, browser, ad views, and ad clicks.
• Clerk privacy policy — sign-in and account security. They receive email address and sign-in activity, for people who create an account.
• Website hosting — our hosting provider receives the technical details of each request, including IP address.
• Database hosting — our database provider receives anything the website stores, including account records.
• Parts of the page served by other companies — some page assets, such as typefaces and map tiles, come straight from their providers rather than from us. Your browser fetches them, so each provider receives your IP address and browser, and a map provider also sees the area you are viewing. None of them receive your name, your account, or anything you type.
• Email delivery — the alerts this website sends us travel through an email provider. A report of suspected abuse carries an IP address.

We do not sell your personal information. We do not trade or rent it, and we do not hand it to anyone for their own marketing.

The Platform Behind This Website

Piasa Commons runs on One Expression, a publishing platform built and operated by Piasa Studios LLC. One Expression runs the software, stores the data, and keeps this website online.

We say this plainly rather than bury it: using this website means your visit is handled by that platform, and by the companies listed above that it depends on.

Payments

When you subscribe, we also share data with:

• Stripe privacy policy — payment processing. From us they receive an internal reference to your account, and nothing else — you give Stripe your payment details on their page, not on ours.

AI Assistance

We use an AI service in preparing and maintaining what we publish, so we also share data with:

• Anthropic commercial terms — reading material we supply and returning text, records, or drafts we work from. What we send is that material. Nothing we hold about you goes with it: not your account, not your visit, not anything you type. Under our agreement with them, what we send may not be used to train their models.

• Your address is never sold, rented, traded, or shared with another sender. We do not buy or import mailing lists, and there is no way to export ours.
• Amazon Web Services delivers our mail, and your address passes through their systems to reach you.

We keep what we collect only as long as we need it, then delete it or strip anything that identifies you:

• Request logs — held in our hosting provider's logs, under their retention schedule; we keep no log of our own.
• Analytics — the data is kept up to 14 months in Google Analytics, which is separate from how long the cookie on your device lasts.
• Ad measurements — counts of ad views and clicks, deleted after 15 months. They identify the ad, not you.
• Error and abuse alerts — these arrive in our own mailbox. Error alerts are deleted routinely. Alerts about suspected abuse are kept in full, for as long as they stay useful; normal use of this website does not produce one.

• Account information — kept for as long as your account exists. Deleting an account removes the account record, anything under it, and the sign-in credential.

• Payment details — held by Stripe under its own retention schedule, not by us.
• Your subscription and entitlements — kept for as long as you have an account with us.

• Your subscription — kept until you unsubscribe or your account is deleted, then removed outright. Apart from the delivery records below, we keep no record that you were ever subscribed, and no suppression list.
• Delivery failures and spam reports — when your mail provider tells us a letter could not be delivered, or that you reported one as spam, we keep a record of it with your address. If mail to you fails permanently we stop sending; if you report a letter as spam we remove you from that one. Records about your account's address are removed when your account is deleted.

You can ask us to:

• Show you the personal information we hold about you
• Correct anything that is wrong
• Delete it, unless we need to keep it — a record of suspected abuse, for example, or something the law requires us to hold

Contact us using the details below and we will respond within 30 days.

We do not sell your personal information. If you are a California resident, the rights above are the ones the CCPA gives you, and you can exercise them the same way.

We protect your information with industry-standard measures, including encryption in transit. No website can promise perfect security, and we do not.

This website is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

When our practices change, we update this page and the effective date at the top of it.

Questions about this policy, or want to exercise one of the rights above?

Piasa Studios LLC
Alton, IL
hello@piasacommons.com