Privacy

Who runs it

Loreign is an independent, non-commercial project. There are no accounts and no logins. To get in touch about anything on this page, use the contact form.

What’s collected

• Technical logs. Like any website, the providers that host and route Loreign (Vercel and Cloudflare) record standard request data, including IP addresses, for security and to keep things running. Loreign doesn’t keep these itself or use them to build any profile of you.
• Analytics. Loreign uses Cloudflare Web Analytics. It’s cookieless and privacy-first, and it keeps only anonymous aggregate counts like page views and where visitors arrive from. It doesn’t identify you, doesn’t follow you across other sites, and isn’t shared with advertisers.
• The contact form. When you send a report, Loreign stores what you write (the reason and message) in its database so it can be acted on. The email field is optional and only used to reply to you. No IP is stored with a report.
• Abuse prevention. So the contact form can’t be flooded, Loreign briefly checks your IP against a rate limit (run by Upstash). The IP is used only for that check and isn’t stored with your message.
• Cover images. The cover images on AU pages are fetched by Loreign’s own server and served from this domain, so your browser doesn’t make requests to the third-party hosts they come from.
• One functional cookie. If you choose to show mature (non-sexual) AUs, Loreign remembers it on your browser with a single, strictly functional cookie. It holds no personal data and isn’t used to track you, so there’s no consent banner.

What it never does

Loreign doesn’t run ads, and it never sells or shares your data. It doesn’t track your behaviour, and it isn’t tied to any advertising network.

Creators’ data

Loreign catalogues fan creations that are already public, and credits each creator by the handle they post under, never a legal name. If a card is about your work and you’d like it changed or removed, ask through the contact form and it’ll be handled quickly.

Who processes data, where, and for how long

The database runs on EU infrastructure (Neon, in Frankfurt), and that’s where the catalogue and any reports are stored. Hosting and content delivery (Vercel), along with analytics and DNS (Cloudflare), are run by US companies on global infrastructure, so some request data is processed outside the EU under standard contractual clauses. Technical logs are kept only briefly by these providers. A report stays until it’s dealt with, and it can be removed on request after that.

Legal basis & your rights

Technical logs, abuse prevention and the cataloguing of already-public fan works rest on legitimate interest. The optional email rests on your consent. You can ask what’s held about you, or have it corrected or deleted, through the contact form. You can also complain to your local data protection authority.