Who holds this site: Tale Vault is operated by Junwei as a personal writing project. There is no corporate entity behind the domain. Contact details on Side Door identify the responsible individual.
What data appears in server logs: Like most websites, the hosting stack may record IP addresses, browser type, request timestamps, and referring URLs in server logs for security and troubleshooting. I do not use those logs to profile visitors or build marketing lists.
Email correspondence: If you email [email protected], I receive your address, message body, and any headers your provider sends. I keep replies only as long as the conversation needs unless you ask me to delete them.
Cookies and local storage: This site stores a consent record in a cookie named sg_reader_consent and may mirror it in localStorage key reader_consent_v1. Values include essential, functional, and analytics flags plus a version number and timestamp. See the Cookies page for detail.
Maps and third parties: Embedded Google Maps iframes may set or read cookies according to Google policies when loaded. Maps here are classified as strictly functional and remain visible even if you reject optional categories; local consent flags still persist via the banner for consistency and disclosure.
Analytics stance: Analytics toggles exist in the consent panel but default off. I do not run separate tracker scripts in this build. If that changes, this page will update before new scripts deploy.
Retention windows: Server logs rotate on the host schedule, typically weeks not years. Consent cookies expire after roughly one hundred eighty days unless cleared earlier. Email threads persist until deleted manually.
Your choices: Use the cookie banner or footer link to reopen settings. Clear site data in your browser to reset consent. Email me to request deletion of correspondence you sent.
Children: This site addresses general adult readers. I do not knowingly collect information from children. If a minor contacted me, I would delete the thread upon notice.
Security: No transmission over the internet is perfectly secure. I use HTTPS where the host provides it and keep software reasonably updated. Do not send sensitive identifiers unnecessarily.
Cross-border processing: Email and map providers may process data outside Singapore. I choose widely used services with published policies and minimal data sharing on my side.
Changes: This privacy notice last changed on 11 August 2026. Material updates will appear here with a revised date line.
PDPA alignment: Singapore Personal Data Protection Act principles inform this notice: consent, purpose limitation, access, and correction. Email me to exercise access or correction regarding messages you sent.
No sale of data: I do not sell personal data. I do not broker lists. The site exists to publish writing, not to extract value from visitor records.
Complaints: If you believe I mishandled personal data, email first so we can resolve directly. You may also contact the Personal Data Protection Commission Singapore for guidance.
Definitions: "I" means Junwei operating this personal site. "Site" means talevault.pro and its subpaths. "Personal data" means information that identifies or could identify you when combined with other data.
Legal basis for processing correspondence is legitimate interest in answering messages you initiate. Consent governs optional cookies beyond essentials.
Automated decision-making does not occur here. No algorithms score visitors. No price discrimination applies because nothing is sold on these pages.
Backups may briefly duplicate server logs or mail archives. Backups inherit the same retention limits and are not mined for secondary purposes.
If the site transfers to another personal operator in future, this notice would update before transfer completes. That scenario is unlikely but documented for completeness.
Links to external sites carry their own policies. I link sparingly — primarily map embeds and font CDNs required for typography.
Font files loaded from Google Fonts may log IP addresses per Google documentation. Self-hosting may replace CDN delivery in a later build to reduce third-party calls.
Device storage beyond cookies is limited to consent mirroring in localStorage. Clearing site data removes it.
Questions about this notice belong on email with subject "privacy question" so I can filter quickly.
Accessibility data: I do not collect disability-related data. If you request accessible formats, email describes preference and I respond in plain text or HTML as feasible.
Newsletter absence: there is no mailing list signup, therefore no list data to breach or unsubscribe. If I ever add optional letters, opt-in will precede storage.
Public Wi-Fi reading: browsing on café networks exposes traffic to café operators separately from this site. Use VPN judgement if concerned.
Error pages: 404 requests may still hit server logs with mistyped URLs. Logs do not publish those URLs publicly.
Deletion confirmation: after deleting email threads I do not retain shadow copies unless backups overlap before rotation. I note backup overlap honestly when asked.
Contact phone voicemail: messages left on +65 6483 7261 are not transcribed automatically. I listen manually and delete after handling.
Hosting location: the static files may be served from infrastructure outside Singapore depending on provider choice; logs follow provider policy.
Incident response: if a breach affected visitor data in my control, I would email affected correspondents when feasible and update this page with timeline and scope.
Data minimisation: I ask for no account registration, no profile fields, no checkout. Minimal collection by design reduces risk.
Third-party fonts: Google Fonts CDN requests are network calls, not cookies, but still disclose IP to Google per their documentation.
Embedded media: only Google Maps iframes load third-party interactive content in this build.
Retention of corrections: when you ask me to fix factual errors in prose, I keep your email only as long as needed to confirm the fix unless you request deletion.
Research use: I do not supply visitor data to researchers or journalists. Aggregate server stats from the host, if any, stay with the host.
Cookies from reject-all: rejecting optional categories does not remove maps; see Cookies page for the functional-always policy explanation.
Your responsibility: do not paste sensitive identifiers into email unless necessary; I cannot secure your device or inbox.
Updates notification: material privacy changes will not shrink your choices silently; check this page date after major edits.
Plain language commitment: if a section reads like jargon, email me and I will rewrite it.
Scope limit: this notice covers talevault.pro only, not other domains or social profiles I may maintain separately.
Contact for access requests: [email protected] with subject "data access request" and enough detail to locate your thread.
Timeline for access: I aim to respond within thirty days for access or correction requests, sooner when volume is low.
Verification: I may ask a reasonable verification question before releasing correspondence copies to prevent disclosure to wrong parties.
No profiling: I do not build interest profiles from browsing patterns because I do not collect browsing patterns beyond standard server logs.
Open web philosophy: publishing statically reduces moving parts and therefore reduces data surfaces compared with dynamic platforms.
Final note: this page is long on purpose — transparency scales with verbosity when lawyers are absent and trust is the currency.
Controller identity: Junwei, reachable at the Side Door coordinates. No data protection officer is appointed because scale does not require one.
Purpose limitation reminder: data you send is used only to answer you or maintain the site, never to train models or resell lists.
Maps and cookies are explained further on Cookies.