Privacy

This notice covers nova-nevedoma.com. It was last updated on 12 September 2026.

We do not sell personal information, run ad networks, or set tracking cookies. Most of what follows exists because you ordered a book, wrote to us, or because your browser fetched a page.

Our · Contact · Details

Name: nova·nevédoma, a one-person literary press run by Ivan Bagaev, who is the data controller.

Country: United Kingdom.

E-mail: [email protected]

Postal address: available on request — email us and we will provide one for any formal request.

The · Type · Of · Personal · Information · We · Collect

We currently collect and process the following information:

  • Order details — your name, email address, postal address, and the edition you chose, when you order a book.
  • Correspondence — your email address and the content of your message, when you write to us.
  • Public replies — your name, avatar and the text of your reply, if you respond to a post from your own website, Mastodon or Bluesky.
  • IP address — when you submit the order form, and as part of routing and protecting the site.
  • Device and browsing information — your browser, operating system, language, screen width, country, the pages you visit and the site that referred you.

How · We · Get · Your · Personal · Information · And · Why · We · Collect · It

Most of the personal information we process is provided to us directly by you for one of the following reasons:

  • You placed an order for a book.
  • You sent us an email.
  • You published a reply to one of our posts, which reached us as a webmention.

We also receive personal information indirectly when your browser loads a page, which supplies your IP address and basic device information as described below.

We use the information you have given us in order to send you the book you ordered and correspond with you about it, keep the business records HMRC requires, answer your emails, display public replies beneath the posts they respond to, prevent the order form being abused, and understand which pages people read.

We share this information with Resend, which delivers the email telling us about your order, and Cloudflare, which routes traffic to the site and blocks attacks. Orders are stored in our own database, PocketBase, running on our Railway account. Payment is handled by a payment provider; card details never reach us.

Under the UK GDPR, the lawful bases we rely on for processing this information are:

  • (b) We have a contractual obligation — for your order details. We cannot send you a book without them.
  • (c) We have a legal obligation — for keeping order records as business records for tax purposes.
  • (f) We have a legitimate interest — for correspondence, for displaying public replies, for limiting abuse of the order form, and for visitor statistics. You can object to processing based on legitimate interests; see your rights below.

Other · Companies · Your · Browser · Contacts

Loading a page makes your browser fetch things from other servers, and each request carries your IP address to them. We list them so you do not have to find out from a network tab.

  • Cloudflare sits in front of the site and sees every visitor’s IP address. It passes us a two-letter country code, which is how a book page shows a shop that ships to you.
  • webmention.io is queried by your browser at the foot of every post to fetch replies, so it sees your IP address and which post you are reading.
  • Wikimedia Commons (upload.wikimedia.org) serves many of the illustrations on posts and wiki pages, which are linked from where they live rather than copied here.
  • YouTube (www.youtube-nocookie.com) on the handful of pages that embed a video. We use the youtube-nocookie domain, which switches off ad personalisation, but the player contacts Google when the page loads and can write to your browser’s storage.
  • Substack on the newsletter page, which embeds its signup box. The newsletter itself is run on Substack and is not covered by this notice.

Typefaces are served from this site. They previously came from Google Fonts, which meant Google received the IP address of every reader of every page; that is no longer the case.

Cookies and analytics

Visitor statistics come from GoatCounter, which we host ourselves at stats.nova-nevedoma.com and publish openly. It sets no cookies and writes no IP addresses to its database. To avoid counting one visit twice it holds your address and browser string in memory for up to eight hours.

You can switch it off for this browser, here, and we will not load the counter on any page you visit:

That setting lives in your browser, so it applies per device and is cleared if you clear your browsing data. Blocking stats.nova-nevedoma.com in an extension works too, and so does emailing us. Nothing else on the site depends on the counter.

If you use the dark-mode toggle, your browser stores that choice in localStorage. It stays on your device and we never receive it.

How · We · Store · Your · Personal · Information

Your information is securely stored in our PocketBase database on Railway, and in our email inbox. Connections to the site are encrypted.

  • We keep order records until five years after the 31 January tax-return deadline for the year of the order, which is HMRC’s requirement for business records. We then delete them.
  • We keep correspondence for as long as it is useful for answering you, and review it every couple of years. We will then delete it.
  • We keep public replies beneath a post for as long as the post is published.
  • We keep your IP address from the order form in memory for one hour, to limit abuse. It is never written to a database. It is cleared the next time anyone submits the form after that hour is up, and whenever the server restarts.
  • Visitor statistics are kept as counts and daily totals, not as records about you.

Transfers · Outside · The · UK

Where we send personal information abroad, there is a contract behind it. Order details reach Resend in the United States under its data processing agreement, which includes the Standard Contractual Clauses and the UK Addendum. Railway, which hosts the site and the order database, and Cloudflare, which sits in front of it, each operate under their own data processing addendum containing the same clauses. Email us for a copy of any of them.

The other companies listed above are contacted directly by your browser, so we have no contract standing between you and them.

Your · Data · Protection · Rights

Under data protection law, you have rights including:

Your right of access — You have the right to ask us for copies of your personal information.

Your right to rectification — You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure — You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing — You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing — You have the right to object to the processing of your personal information in certain circumstances.

Your right to data portability — You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at [email protected] if you wish to make a request.

How · To · Complain

If you have any concerns about our use of your personal information, you can make a complaint to us at [email protected]. This is your right under section 164A of the Data Protection Act 2018. We will acknowledge your complaint within 30 days, investigate it, and tell you the outcome.

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

Adapted from the Information Commissioner’s Office privacy notice template, © Crown copyright, licensed under the Open Government Licence v3.0.