CHAUTAUQUA INK HOUSE / MEMBERS
What’s New

YOUR INFORMATION AT THE HOUSE

Privacy Policy

This policy explains how Chautauqua Ink House, operated by Shawn Newbree (also known as Shawn DiLorenzo), with Shawn and Bria running the House in Chautauqua, New York, handles information when you read, create an account, join the community, or contact us.

Updated October 16, 2026

1. Information we collect and why

  • Accounts and email. We use your email address, account identifier, authentication records, confirmation status, and acceptance of our Terms to create and secure your account, send account emails, and provide access. Password authentication is handled through Supabase.
  • Profiles and uploads. We store the display name or pen name, biography, interests, avatar or profile photo, profile decorations, Artist Home information, and files you choose to provide. These let you present your work and participate in member spaces. Please avoid adding sensitive personal details or information about other people without permission.
  • Community and friends. Posts, replies, reviews, reactions, friend requests, friendship connections, blocks, and shared projects support community features. Shawn and Bria are added as friends when you join; you can remove either. Community book submissions and their files stay private to you and authorized reviewers until approved for the member library. Submission checks help reviewers assess a book; an administrator makes the publication decision.
  • Messages. We store direct and group messages, attachments, conversation membership, read receipts, and activity or presence information needed to deliver messages and notifications. Messages are not end-to-end encrypted. Recipients can retain or share what you send.
  • Reading and saved content. Reading positions, bookmarks, saved books, preferences, interactive story choices, and Story Mode usage support your reading experience and access allowances. Signed-in reading positions, bookmarks and saved books are stored in our Cloudflare database under your Supabase account ID, with a browser copy for offline recovery. They are private to your account and removed from our reading database when you delete your account. Guest reading stays on your device. Story choices and reader settings may remain local. Personal EPUB imports into My Library stay in that browser unless you explicitly choose to save a private copy to your cloud library or separately submit one to the Community Library. Private cloud EPUBs and their titles are stored in Cloudflare R2 and D1 under your account. Reading notebook passages, notes, colors, and locations are stored privately in D1. These are not published on your profile or supplied to AI help. You can download cloud books, export notes, and remove them; account deletion removes their records and files. Ending Plus access does not automatically delete them. Profile goals, favorite passages, and recommendations are separate information you choose to enter and share through Profile Studio.
  • Membership and purchases. We use membership or Founders status, trial eligibility, purchase references, checkout email, payment-provider events, and verification or linking records to recognize access, gifts, refunds, and cancellations. Payment details are collected by the checkout providers; our site does not collect full payment-card numbers.
  • Safety and support. Reports, reported content, moderation decisions, support messages, and relevant technical records help us investigate problems, enforce our Terms, prevent abuse, and respond to requests.
  • Technical information. Hosting and security services process information such as IP address, browser and device details, request times, errors, and security checks. This helps deliver the site, diagnose failures, measure site use, and limit automated abuse.
  • Optional email updates. Where email updates are available, we record your subscription request and confirmation separately from creating an account. You can unsubscribe using the email’s unsubscribe link or contact us for help.

Private member support

When you send a support request or bug report, we store your account ID, account email, title, description, the House page you provide, replies and status history in Cloudflare D1. Only you and authorized House administrators can access your report through the support area. Optional diagnostic details are limited to browser family, device type and screen dimensions. We remove query strings and fragments from the page address. Reports are not published on your profile or sent to AI help. Please do not include passwords, security codes or payment-card details.

Replies are available in Your requests on the support page; we do not send automatic email notifications for them. Your support conversations are removed from this database when you delete your account. Emails you send separately are handled as contact correspondence.

AI help

When you send a question to Ask Ink House, your question and up to four recent conversation turns are sent to Cloudflare Workers AI with relevant public House help information to generate a reply. The assistant does not receive your private messages, account records, or payment details. We do not save help transcripts in our database; the visible conversation is kept in page memory and cleared when the help panel closes or you clear it. Cloudflare processes requests under its own service and privacy terms. Do not include passwords, verification codes, card details, or sensitive personal information.

To limit automated use, we keep short-lived request counters with a daily-changing hash derived from the network address, rather than storing the raw address in those counters. Counters expire after one or two days and are removed on a subsequent AI request. Hosting and security logs may separately process network information. Quick answers are prewritten and can be read without sending a question to AI. AI answers may be inaccurate; the published policies and help pages remain the authoritative guidance.

2. Who can see information

Your chosen display name, profile presentation, and material shared in community spaces can be seen by the members allowed into those spaces. Direct and group messages are delivered to their participants. Authorized administrators may access information needed for support, moderation, security, and service operation. Member-only conversations, private submissions, and account details are not published in public search-engine pages.

We use the following services for their stated functions. They process information needed to provide those functions and have their own privacy policies:

  • Cloudflare: website hosting and delivery, Workers AI help responses, D1 database storage, R2 file storage, operational logs, traffic measurement where enabled, and Turnstile bot protection.
  • Supabase: account authentication and account-related database services, including profiles, access, and associated member records.
  • Resend: account email delivery and optional confirmed email updates where configured.
  • Stripe: secure checkout and billing for new Founders and Plus memberships. See the payment information below and Stripe’s Privacy Policy.
  • KLIPY: GIFs, stickers, clips, and related media in the community picker. When you use the picker, your browser contacts KLIPY and its media or advertising delivery services. Requests can include search terms, a customer identifier, language, media selections, and normal browser/network information. KLIPY can return sponsored results and receive media-view or sharing events.
  • Amazon, Bookshop.org, and IngramSpark: external book and product links, including affiliate links. When you follow them, the destination handles your visit and purchases under its own policies. Affiliate identifiers may allow a purchase to be attributed to Ink House.

Images, media, and linked articles hosted elsewhere can send the hosting provider normal request information when loaded or opened. Email sent to our company contact addresses is forwarded by Porkbun to our Gmail inbox. Porkbun and Google process that correspondence to deliver and store it.

We do not sell your account records or private messages. This does not mean that external services never process advertising data: the KLIPY picker can include sponsored media, and external shops use their own technologies. We may disclose information when reasonably necessary to comply with law, protect people and the service, resolve a dispute, or carry out a service transfer with appropriate privacy safeguards.

Payments through Stripe

When you begin a direct membership checkout, we send Stripe your account email and an account reference to associate the purchase with your Ink House account. Stripe collects the payment details and billing information you enter in its secure payment form. Full card numbers and card security codes are not stored by Ink House.

We receive and retain the billing records needed to manage your membership: Stripe customer, checkout, subscription and invoice references; your plan, payment status, amounts and currency; paid-through and renewal dates; and records of cancellations, refunds and disputes. Stripe sends signed billing notifications to our server so we can update access. Authorized administrators may review relevant records for support and billing issues.

Stripe may process device, browser, network and transaction information, and use cookies or similar technologies for payment functionality, authentication and fraud prevention. Available methods may include third-party wallets or Link, subject to their own terms. Read Stripe’s Privacy Policy for its practices and choices. Our optional visit-measurement choice does not turn off necessary payment security.

Deleting your website account does not erase payment-provider records. We and our payment providers may retain limited financial records where needed for accounting, legal obligations, fraud prevention or resolving disputes. For questions or a privacy request, contact hello@chautauquainkhouse.com.

3. Cookies and browser storage

We use account cookies to maintain sign-in and security, and browser storage for reading progress, saved books, story choices, settings, and dismissed notices. Security providers may use their own storage as part of bot checks. Local reading data is tied to the browser or device where it was saved unless a feature explicitly syncs it with your account.

You can clear cookies and site storage in your browser. Doing so may sign you out and erase local reading information or imported personal books. Blocking necessary storage can prevent features from working. Third-party checkout, media, and shopping services control their own cookies and storage.

Optional visit measurement

If you allow visit measurement, we use a random first-party browser ID for up to 90 days and a random session ID that expires after 30 minutes of inactivity. We count pageviews and visits, generalized page names, broad referring-source groups, and a broad device category derived from the browser request. For the three public free interactive stories, we also count Start clicks and endings reached, using the public story name, action, and time. We do not collect the choices you made in these analytics records. We also measure broad signup steps reported by your browser: opening and submitting the signup form, successful account creation, finishing required profile setup, and opening a reader. Signup problems are recorded only as general categories, such as a verification check or unavailable service. Form entries, passwords, profile pictures, book titles, and the contents of what you read are not included in these signup records. These steps help us find confusing or broken parts of joining; a browser report is not proof of a completed account or of reading every page. We do not fingerprint your device or put names, emails, IP addresses, full browser strings, search terms, full referring URLs, or private page identifiers in these analytics records. Anonymous traffic is not linked to your account or purchases.

Measurement is off until you allow it. We honor Do Not Track and Global Privacy Control. You can change your choice below; turning it off clears the measurement cookies and stops future collection in this browser. Your choice is stored for one year. You can also mark this browser for staff or test exclusion below; this separate yes/no preference lasts up to one year, stops future optional measurement in that browser, and does not change your consent choice or erase earlier activity. Previously collected anonymous traffic expires after 90 days, with cleanup running every eight hours. Clearing your browser storage also resets your choice.

Optional visit measurement is off in this browser.

Use this on each staff or test browser to keep future checks out of visit and signup-journey counts. This does not change your consent choice or remove earlier activity. The separate server account totals still include test accounts.

Separately, we count confirmed account signups and first verified paid memberships from the account and payment records already needed to operate the House. A private account-linked marker prevents duplicate counts and is removed when the account is deleted. Aggregate daily signup and conversion totals remain without account identifiers. These operational totals do not require optional visit measurement. Analytics reports are available only to verified House administrators.

4. How long we keep information

Account and community information is kept while needed to provide the features you use. You can edit or remove content where controls are provided, or request help. Account deletion removes the website account and associated records and files through our deletion process. Cancel paid renewal before deleting your account. Deletion does not erase payment providers’ transaction records.

A hashed record of an email address that has used a Founders trial is retained after account deletion so deleting and re-registering does not restart the trial. Hashing is a protection, not a guarantee of anonymity. Limited records may also need to remain for security, legal obligations, disputes, or backups. We have not set one fixed retention period for every category; contact us about a specific record. Copies saved by other people or external providers are outside our direct control.

Deleting a website account does not automatically remove a separate email-provider subscription. Use the unsubscribe link or contact us to remove that subscription too.

5. Your choices and rights

You can update your profile, manage friends and blocks, change available reading settings, and delete your website account from Account. You may also contact us to request access to, correction of, a copy of, or deletion of your personal information. Depending on where you live, you may have additional rights to object to or restrict processing, withdraw consent, or complain to a privacy regulator.

We may need to verify that a request concerns your account before acting. We will consider requests under applicable law and explain any information we must retain. Please do not send passwords or full payment-card details in a privacy request. Unsubscribing from optional updates does not stop essential account, security, or purchase-related messages.

6. Security and international processing

We use authentication, access controls, encrypted connections, and other safeguards appropriate to operating the site. No website or transmission can be guaranteed completely secure. Keep your password private and report suspected unauthorized access promptly.

Ink House is operated from the United States. Our providers may process or store information in the United States and other countries, whose privacy laws may differ from those where you live. Contact us if you need more information about a particular provider or processing arrangement.

7. Young readers and community accounts

You must be at least 13 to create an account or use community features. If you are under 18, you must have permission from a parent or guardian. Children’s books on the site do not make the member community a service for children under 13. A parent or guardian can help a younger reader enjoy public books and previews without creating an account for that child.

We do not knowingly collect account or community information from children under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and arrange deletion as appropriate. Parents and guardians should help young readers decide what to share and understand that other members may see their profile and posts.

8. Contact and policy changes

For privacy questions or requests, email hello@chautauquainkhouse.com with “Ink House privacy” in the subject. This contact is available without an account.

We will update the effective date when this policy changes. Material changes may also be announced on the site or through an appropriate account notice.

Terms & community standards