Privacy Policy

1. Introduction

Mundane Universe ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.

2. Data We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data: Includes first name, last name, username or similar identifier.
• Contact Data: Includes email address and telephone numbers.
• Financial Data: Includes payment card details (processed securely via Stripe).
• Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
• Reading Analytics Data: Instrumented posts and story pages record the page read, active reading time, reading depth, completion, language, coarse device class, referral hostname, campaign source/medium/name and estimated country, subdivision and city where available. Aggregate maps use approximate network-location coordinates rounded to one decimal degree. If you accept analytics, we also store a random reader identifier on your device (in local storage and in a first-party cookie) so that we can count unique and returning readers across visits. If you do not accept, no identifier is stored on your device and we derive a value on the server that changes every day, which lets us estimate anonymous reader identities per UTC day but cannot follow you over time. We never retain your raw IP address or a full referring URL in reading analytics.
• Connected social account data: If you connect a YouTube channel, we store its channel ID and display name, the permissions you granted, token expiry and connection timestamps, and encrypted access and refresh tokens. When you request a report, YouTube returns channel analytics such as views, watch time, average view duration, subscriber changes, likes, comments and shares. If you connect a Facebook Page or professional Instagram account, we store its account ID and display name and an encrypted access token so MTLS can list the connected account and publish content you choose.

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To register you as a new customer/member.
• To process and deliver your subscription including managing payments, fees and charges.
• To manage our relationship with you.
• To use data analytics to improve our website, products/services, marketing, customer relationships and experiences.
• To connect social accounts you choose, show the channels or Pages available to you, retrieve requested YouTube analytics, and publish content you explicitly submit to a connected Facebook Page or professional Instagram account.

4. Reading Analytics and Consent

Google Analytics measures visits to public pages across our sites only after you accept analytics. It receives page paths, page titles, campaign attribution, browser and device information and approximate location, and uses first-party _ga cookies to recognise a browser across visits and linked sites. These cookies expire after one year unless renewed. Our integration excludes account and authentication pages and removes query strings and fragments from reported page and referring URLs. Google advertising features are disabled. You can withdraw consent through Cookie settings on each site; this stops Google measurement on that site and removes its Google Analytics cookies.

On instrumented reading pages, Google also receives public story and chapter or post identifiers and titles, the content language, and reading milestones after at least ten seconds of active, visible reading: 25%, 50%, 75% and reaching 90% of the page. Reaching the end is an indication of reading progress, not proof that every word was read. We do not send account identifiers or private writing to Google.

Reading measurement starts as soon as a page loads, but consent decides whether you can be recognised between visits. Accepting analytics stores a random reader identifier in your browser (local storage plus a first-party cookie, kept for a year) so we can estimate unique and returning readership on this site. A person using another site, browser or device is counted separately. Declining stores nothing on your device: we count those reads anonymously, with a server-side value that changes every day. Declining also deletes any identifier we had stored. You can withdraw consent at any time by clearing the site's stored data and choosing not to accept analytics when asked again.

5. Connected Accounts and Google API Data

When you connect a YouTube account, MTLS uses the YouTube Data API to retrieve the IDs and display names of channels available to that account. When you select a channel and request analytics, MTLS uses the YouTube Analytics API to retrieve daily views, estimated watch minutes, average view duration, subscribers gained and lost, likes, comments and shares for the date range you selected. We use this Google API data only to provide and maintain the connected-channel and analytics features you request. We do not sell it, use it for advertising, or use it to train general-purpose AI models. We share it with Google as needed to make authenticated API requests and with Cloudflare, our hosting and database provider, to operate MTLS. We do not disclose it to other parties for unrelated purposes.

MTLS stores the connected channel ID and display name, granted permissions, token expiry and connection timestamps. Access and refresh tokens are encrypted before they are stored in our database and are used only to maintain the connection and retrieve requested analytics. Analytics reports are returned to your signed-in MTLS session and are not saved in MTLS’s account database.

You can disconnect a YouTube channel in MTLS settings. This deletes the saved channel connection and encrypted tokens from MTLS’s active database. To also revoke MTLS’s authorization in Google, remove it from your Google Account’s third-party connections at https://myaccount.google.com/permissions. Deleting your MTLS account also deletes its connected-account records.

For Facebook Pages and professional Instagram accounts, MTLS stores account IDs, display names and encrypted access tokens to list the connected destinations and publish the Page text or link, or Instagram caption and public image URL that you submit. MTLS sends that post content to Meta to carry out the requested publication. Disconnecting an account in MTLS deletes its saved connection and token from our active database. MTLS does not currently retrieve or store Meta analytics reports.

6. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

Session-level reading analytics are automatically deleted after 400 days.

Connected social account details and encrypted tokens remain in MTLS while the account is connected, and are removed from the active database when you disconnect it or delete your MTLS account.

7. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to request access, correction, erasure, restriction, transfer, to object to processing, to portability of data and (where the lawful ground of processing is consent) to withdraw consent.

8. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us at: legal@mundaneuniverse.com