Privacy policy
Last updated 2026-10-23.
Who we are. This policy covers the fiction archive at kiption.com, run by Hyperion360 Inc. (doing business as Kiption) (hyperion360.com). In this policy "we" means that company, and the policy covers guests and members alike.
What we collect. Personal information means data that can be tied to you as a person, and on this archive the whole of it is the list in this paragraph. Reading as a guest sends us your IP address, which lands in request logs we keep for 30 days and, if you post a guest review, alongside that review; guest reviews are one per IP per story per day, so the IP is how the cap is enforced. Reads are counted by our own first-party beacon into per-story daily totals; the counts carry no account and no identifier. Guests get no cookies at all. Holding an account adds the data membership needs: your penname, email address, and a hashed password; the works, reviews, and comments you post; your reading progress, bookmarks, favorites, follows, notifications, and messages; the theme and language you picked; and the IP recorded with what you post.
Why we collect it. To run the archive: accounts, story storage, reading progress, and the notifications and messages you asked for. To keep it safe: rate limits, the one-guest-review-per-IP-per-day cap, and request logs that help us debug and block abuse. Your email address exists to confirm signup, reset your password, and deliver the notifications you chose; it is not a mailing list, and nothing else goes to it. We collect nothing for advertising, because the archive runs no ads, and nothing for third-party analytics, because there are none.
What other members see. Your penname, the works you post, your reviews and comments, and your favorites shelf are visible to readers, because publishing them is the point of an archive. Your email address, your password, your reading progress, your bookmarks, your notification choices, and your messages stay in your account: no other member sees them, and we never publish them.
The legal grounds we rely on. Where privacy law asks for a lawful reason before data is handled, ours are these. Running the service you signed up for: your account, works, reading state, and the notifications you chose. Keeping the archive and its readers safe: request logs, rate limits, and abuse prevention, our legitimate interest. Your choices: each notification channel runs because you turned it on, and you can turn it off. Legal obligations: keeping records a law or a valid legal demand requires, such as a legal hold. There is no ground for advertising here, because the archive runs no ads.
How we use and share it. We do not sell your data. We share it only with the services that keep the archive running, each named: Brevo, the transactional email provider that delivers signup and notification mail at launch; Cloudflare, which fronts the site at its edge; and Microsoft Azure, whose servers host the archive and whose Blob store holds the nightly backups on a 30-day lifecycle. Each receives only what its job requires, and notification email goes only where you chose to receive it.
Where your data lives, and transfers. The archive runs on Microsoft Azure servers, and the email, edge, and backup services named above sit with their own providers. If you are in a country whose law limits sending personal data abroad, transfers to those providers run under standard contractual clauses where applicable, the published contract the European Commission built for moving personal data across borders, or another lawful basis your law accepts.
How long we keep it. By category: request logs age out after 30 days. Nightly backups are kept 30 days and then replaced, so anything deleted ages out of them within about thirty days. Your account data and everything you posted stay until you delete them. A legal hold can pause deletion for the specific records a demand names.
Cookies. Cookies here keep you logged in (the session cookie) and remember your choices: your theme, your language, your reading typography, whether your chapter list opens first, and that you passed the adult-content gate. Reading as a guest sets no cookies at all. There is no cookie banner because there is nothing to consent to: no tracking cookies exist, and nothing here follows you to other sites. The full list, every name and how long each lasts, is on the cookie policy page. Clearing or blocking cookies is done in your browser settings, and that option is always available. This archive performs no tracking, so there is nothing to switch off, and we do not respond to Do Not Track signals because we never track.
Your rights. You can take a copy of your works at any time through export, as EPUB or HTML from each story's page. You can correct your penname, email, and preferences in account settings. You can delete: there is no self-serve delete button today, so write to help [at] kiption [dot] com and we close the account and remove its data, with backup copies aging out within about thirty days. Spelled out, the rights privacy law gives you are these: access, seeing what we hold about you; rectification, having what is wrong fixed; erasure, having it deleted; restriction, a pause on handling while a dispute is sorted out; portability, taking a machine-readable copy of your data; and objection, telling us to stop where the law lets you. Complaints go to your national data-protection authority if you are in Europe, or to the California Attorney General if you are covered by the CCPA, and you can write to us first; we answer either way. California readers also hold the right to know what is collected, to correct it, and to opt out of its sale, and that last one is already done: we never sell personal information. We extend every right in this section to everyone who uses the archive, wherever you live; you do not need to be in Europe or California to use them.
Children. The archive is not for anyone under 16. Accounts are for people 16 and older, and the restricted-works gate is for people 18 and older. We do not ask for your date of birth; creating an account is your attestation that you meet the minimum age. If we learn that someone under 16 holds an account, we close it and delete its data, with backup copies aging out within about thirty days. A parent or guardian who learns of an under-16 account can write to help [at] kiption [dot] com and we will close it.
Security. Traffic is TLS throughout, and every database query is parameterized SQL. Session identifiers are regenerated at login, and rate limits front the forms. Nightly backups are copied off the server and kept 30 days. No code runs in the reader's browser, so there is no script surface to attack. If a breach ever puts your personal data at risk, we will notify the affected users without undue delay where the law requires notice, and say what happened and what we are doing about it.
Automated decision-making. There is none. No system on this archive makes a decision about you by machine alone: there are no profiles, no recommendations, no ranking to feed, and no automated content moderation; listings are chronological and moderation is human.
Changes to this policy. When this policy changes we post the new date at the top of this page and announce material changes on the site news feed before they take effect.
Contact. Privacy questions and data requests go to help [at] kiption [dot] com. The operator is Hyperion360 Inc. (doing business as Kiption) (hyperion360.com).