Last updated: April 2026
1. Introduction
This Privacy Policy explains how Nebula Novels (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit nebulanovels.art. We are committed to protecting your privacy and handling your data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection law.
Data Controller: Kochenov Artem, Borkholderstraße 2A Ansbach, Bavaria, Germany Email: pr***********@**********ls.art
This website is a personal, non-commercial hobby project. No goods or services are sold directly through this website.
2. What data we collect and why
2.1 Website visits — server logs
When you visit our website, our hosting provider automatically collects:
- Your IP address
- Browser type and version
- Operating system
- Referring URL
- Date and time of visit
This data is collected on the basis of Article 6(1)(f) GDPR (legitimate interest) for the purpose of ensuring website security and stability. It is stored in server logs for a maximum of 30 days and then deleted. This data is not linked to any individual person.
Our website is hosted on servers located in the United States by Namecheap.com. Data transfers to the USA are carried out on the basis of Standard Contractual Clauses pursuant to Article 46(2)(c) GDPR.
2.2 Contact form
When you use our contact form, we collect:
- Your name
- Your email address
- The content of your message
This data is collected on the basis of Article 6(1)(b) GDPR (processing necessary for the performance of a contract or pre-contractual measures) and Article 6(1)(f) GDPR (legitimate interest in responding to your enquiry). We use this data solely to respond to your message. We do not share this data with third parties. Messages are retained for as long as necessary to process your enquiry and then deleted.
Contact form submissions are processed via WPForms and delivered via GoSMTP.
2.3 User registration and accounts
If you create an account on our website, we collect:
- Username
- Email address
- Password (stored in encrypted form)
- Optional profile information you choose to provide (first name, last name, biographical information)
This data is collected on the basis of Article 6(1)(b) GDPR (contract performance — providing access to registered user features). Account data is retained for as long as your account exists. You may delete your account at any time by contacting us.
User accounts are managed via Profile Builder by Cozmoslabs.
2.4 Cookies and tracking
We use cookies on our website. Please refer to our Cookie Policy for full details of which cookies we use and why. In summary:
- Functional cookies — necessary for the website to work correctly (login sessions, language preferences, cookie consent storage). These do not require your consent.
- Statistics cookies — we use Google Analytics (via MonsterInsights) to understand how visitors use our site. This requires your consent.
2.5 Google Analytics
With your consent we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to analyse website usage. The data generated (including your anonymised IP address) is transmitted to Google servers, which may be located in the United States.
Google acts as a data processor on our behalf under a Data Processing Agreement. Data transfers to the USA are covered by Standard Contractual Clauses. You can opt out of Google Analytics by withholding consent via our cookie banner, or by installing the Google Analytics Opt-out Browser Add-on.
Google’s Privacy Policy: https://policies.google.com/privacy
2.6 Anti-spam protection
We use CleanTalk to protect our forms from spam. CleanTalk may process your IP address and email address to check whether a submission is spam. CleanTalk’s Privacy Policy: https://cleantalk.org/privacy-policy
2.7 Language detection
We use Polylang to manage multiple language versions of our website. Polylang stores a cookie to remember your language preference. No personal data is transmitted to third parties.
3. Data sharing and third parties
We do not sell, rent, or trade your personal data. We may share data with the following categories of service providers who process data on our behalf:
- Hosting provider — to serve the website
- Google — for analytics (with your consent)
- CleanTalk — for spam protection
- GoSMTP — for email delivery
All third-party processors are bound by data processing agreements and are required to handle your data in accordance with GDPR.
4. External links to online stores
Our website contains links to third-party online stores (such as Amazon) where our books are available for purchase. When you click these links you leave our website. We have no control over the data practices of these external platforms. Please refer to their respective privacy policies for information on how they handle your data.
5. Data retention
We retain personal data only for as long as necessary for the purposes described in this policy:
| Data type | Retention period |
|---|---|
| Server logs | 30 days |
| Contact form messages | Until enquiry is resolved |
| User account data | Until account deletion |
| Cookie consent records | 1 year |
| Analytics data | 26 months (Google Analytics default) |
6. Your rights under GDPR
As a data subject you have the following rights:
- Right of access (Art. 15) — you may request a copy of the personal data we hold about you
- Right to rectification (Art. 16) — you may request correction of inaccurate data
- Right to erasure (Art. 17) — you may request deletion of your personal data
- Right to restriction (Art. 18) — you may request that we restrict processing of your data
- Right to data portability (Art. 20) — you may request your data in a machine-readable format
- Right to object (Art. 21) — you may object to processing based on legitimate interest
To exercise any of these rights, please contact us at: pr***********@**********ls.art
We will respond to your request within 30 days.
7. Right to lodge a complaint
If you believe we are handling your data unlawfully, you have the right to lodge a complaint with the supervisory authority. The competent authority for Bavaria is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 27 91522 Ansbach Germany https://www.lda.bayern.de
8. Data security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses SSL/TLS encryption (HTTPS) for all data transmissions. However no internet transmission can be guaranteed 100% secure.
9. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The current version is always available at this page. We will notify registered users of significant changes by email where possible.
10. Contact
For any questions, requests, or concerns regarding your personal data:
Nebula Novels Kochenov Artem, Borkholderstraße 2A Ansbach, Bavaria, Germany Email: pr***********@**********ls.art