Legal
Privacy policy
Last updated 27 September 2026
This policy explains how State of the Realm ("we", "us") handles personal data when you read, join or take part in the publication. We are the data controller and follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What we collect
- Account details: your email address, a display name and, if you sign in with Google, your name and profile photo from Google.
- Profile details you choose to add: username, bio, location and interests. These are public.
- What you post: comments, community posts, replies, likes, follows and paper signatures. These are public and show your display name.
- Newsletter: your email address and when you subscribed.
- Security: if you turn on two-step verification, a record that it is enabled. We never see your authenticator codes.
- Usage (only with your consent): anonymous page visits, including the page, the referring website, and device, browser and operating-system type. We do not record your IP address or link visits to your account.
Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Running your membership, sign-in and security | Contract |
| Showing your comments, posts and signatures | Contract |
| Sending the weekly newsletter | Consent. You can unsubscribe at any time |
| Account emails (password resets, sign-in codes) | Contract |
| Anonymous visitor statistics | Consent, via the cookie banner |
| Moderating content and preventing abuse | Legitimate interests |
Who we share it with
We do not sell your data or use it for advertising. We use trusted processors to host the site, store data, send email and provide Google sign-in. They act only on our instructions. Some may process data outside the UK; where they do, we rely on UK adequacy regulations or the International Data Transfer Agreement.
How long we keep it
- Account and profile data: until you delete your account.
- Public contributions: until you delete them or your account.
- Newsletter records: until you unsubscribe, plus a suppression record so we don't email you again.
- Visitor statistics: up to 24 months, and never linked to you.
Your rights
You have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent at any time. Email privacy@stateoftherealm.org and we will respond within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Children
Membership is for people aged 13 and over. We do not knowingly collect data from younger children.
Changes
If we change this policy in a meaningful way, we will update the date above and tell members by email.