Privacy Policy

Main Character (the Register) is operated by [LEGAL ENTITY]. Contact the controller at removals.outclean@noumenon-ai.com. The same application serves mc.noumenon-ai.com, themaincharacter.lol and zoyabody.lol; zoyabody.lol is also the domain used for tracked outbound links from entries. This policy applies to all three.

What we collect

The name, optional handle, optional link and optional line you submit for an entry.
A keyed hash of your IP address (HMAC-SHA256 with a server-held secret), used to rate limit submissions and clicks. We never store your raw IP address; the hash cannot be reversed back to it without the secret, which never leaves our server.
Timestamps: when your entry was created and when it was paid or activated.
Click events on entry links: each click is recorded against the entry, again keyed by the hashed requester, so we can report how many clicks an entry sent.
Payment is handled by Stripe; we store the Stripe checkout session identifier and its status, never card numbers or other card data.
When you submit a product link for a preview scan, we record a keyed hash of your requester address and a timestamp, solely to limit how often that endpoint can be used. This record holds no entry content and no link.

Legal bases

We process entry content and payment identifiers to perform the contract you enter into by buying or claiming an entry. We process the hashed requester identifier and click events under our legitimate interest in preventing abuse and measuring whether the Register sends real traffic. Where required, we rely on your consent for optional fields you choose to submit.

Card details never reach this site

Checkout runs entirely on Stripe's hosted payment page. Your card number, expiry and security code are entered on Stripe's page and go straight to Stripe. This site never receives, transmits or stores that data. We store only the Stripe checkout session identifier, its payment status, and a statement descriptor.

Sub-processors

Stripe, Inc.: payment processing for paid entries.
Supabase, Inc.: the database that stores entries, click events, and hashed requester identifiers.
Vercel, Inc.: hosting and delivery of the site.
Telegram: when a paid entry activates, the owner receives a Telegram message containing the entry number, the submitted name, and the handle when one was given, so the owner knows an entry went live. No other field is sent to Telegram.

The daily story feature calls the Wikimedia and Wikidata public APIs to find a subject for the day. Those calls send no visitor data, no entry data and no identifiers about you; they only fetch public reference information.

The daily record

Once a day the Register writes one entry itself: the person who was most read about on English Wikipedia the day before, taken from Wikipedia's own public pageview statistics. That entry names the Wikipedia article title, states the day's view count, gives the date, and links to the article. It is public information about a public figure, drawn entirely from a public data source, and involves no data about any visitor to this site. These entries are labelled on the page as written by the Register, not submitted by anyone. If you are the subject of one and want it removed, write to removals.outclean@noumenon-ai.com.

Cookies

We do not set tracking or advertising cookies. The site uses no cookies beyond what the hosting platform requires to serve the page.

Retention

Entries and their metadata are kept indefinitely because the Register is a permanent, numbered public record. Click events and hashed requester identifiers used for rate limiting are kept for a reasonable period for abuse prevention and then may be pruned. Stripe checkout identifiers are kept as long as the related entry is kept, for billing records.

Your rights

You may request access to, deletion of, export of, or correction of the data tied to your entry by writing to removals.outclean@noumenon-ai.com; we may ask you to verify control of the handle or link before acting. Because the Register is a public record by design, deletion removes your entry and its number from the live site, but it does not rewrite history: copies made by others before deletion, such as screenshots, caches or archives, are outside our control and cannot be recalled.

International transfers

Our sub-processors operate infrastructure in the United States and other countries. Where data crosses borders, we rely on the safeguards those processors provide, such as standard contractual clauses.

Children

The Register is not directed to children under 16, and we do not knowingly collect their data. If you believe a child submitted an entry, contact us and we will remove it.

Exercising your rights

Email removals.outclean@noumenon-ai.com with the entry number or the handle and link involved. We respond to verified requests within a reasonable time.

This is a strong template, not certified legal advice, and should be reviewed by a lawyer before being relied on.