Privacy Policy
Last updated: May 2026
1. Who we are
Wildscript is an independent natural science content publisher. The data controller is Wildscript (hello@wildscript.org).
2. What data we collect
- User account: name, email address and password (hashed) if you create an account.
- Usage data: pages visited, session time, preferred language — collected anonymously.
- Academy waitlist: email and name if you subscribe voluntarily.
- Contact messages: name, email and message content you send us.
3. How we use your data
| Data | Purpose | Legal basis |
|---|---|---|
| Email and password | Authentication and account recovery | Contract performance |
| Preferences | Language personalisation | Legitimate interest |
| Anonymous analytics | Service improvement | Legitimate interest |
| Email (waitlist) | Academy communications | Consent |
4. Data sharing
We do not sell your data. We share it only with:
- Supabase (database and authentication) — US processor with current SCCs.
- Resend (transactional email) — US processor with current SCCs.
- Cloudflare (CDN, DNS, Turnstile) — US processor with current SCCs.
5. Your rights
You have the right to access, rectify, delete, object to and port your data. Contact us at hello@wildscript.org.
6. Cookies
We use only essential session cookies. We do not use advertising tracking cookies.
7. Security
Your data is always transmitted over HTTPS. Passwords are hashed with bcrypt before storage.
8. Changes
If we make material changes, we will notify you by email if you have an active account.