Draft, pending legal review
Privacy Policy
Last updated: 19 August 2026. Written to describe what 3types actually does today, following the framework of UK GDPR and PECR.
What we collect
- Account and authentication data: your email address, password credentials held in hashed form by our authentication provider, and sign-in metadata such as timestamps.
- Profile data you choose to provide: username, display name, bio, avatar and banner images, accent colour.
- Onboarding answers: what you say you are here to do and which categories interest you, used to shape your feed.
- Content you create: works, chapters, drafts, tags, content warnings and maturity labels, comments and replies.
- Activity data: likes, saves, follows, My3 picks, reading progress positions, view counts, and reports you submit.
- Product analytics events: page views and in-product actions such as a work being opened or a chapter read, stored with your account identifier where you are signed in.
- Email data: your marketing and notification preferences, plus a log of transactional and digest emails we send and their delivery status.
- Moderation records: reports, blocks and the outcome of moderation decisions.
We do not run advertising trackers, we do not buy personal data, and we do not sell your data. Payment information is not collected at all today because payments are not live; when tipping launches, card and bank details will be handled by a third-party payment provider and not stored by 3types.
Why we collect it, and our legal bases
- Contract: running your account, publishing your work, delivering feeds, reading progress and notifications.
- Legitimate interests: product analytics, keeping the platform secure, preventing spam and abuse, and moderation.
- Consent: marketing email. You can withdraw it at any time in Settings or by using the unsubscribe link in any email.
- Legal obligation: responding to lawful requests and keeping safety records where required.
What is public
Your username, display name, bio, avatar, banner, published works and chapters, comments, My3 picks and follower counts are visible to anyone, signed in or not, and may appear in search engines and link previews. Your email address, drafts, saves, reading progress, blocks and reports are not public.
Cookies and local storage
We use storage that is strictly necessary to keep you signed in and to remember a small number of interface preferences. We do not use advertising or cross-site tracking cookies. See our Cookies page.
Processors we use
We rely on third-party providers for application hosting, our database and authentication, and transactional and digest email delivery. They process personal data on our instructions under their own data-protection commitments, and some are outside the UK, in which case transfers rely on appropriate safeguards. A payment processor will be added when tipping launches.
Founder input still required: whether to publish a named subprocessor list, and confirmation of hosting regions.
Retention
Account data is kept while your account exists. Deleting a work or chapter removes it from public surfaces; deleting your account removes your profile and content, with short-lived copies persisting in routine backups. We keep limited analytics, email logs and moderation records for a reasonable period afterwards for security, abuse-prevention and legal purposes.
Your rights
Under UK GDPR you can access, correct, export, delete and restrict processing of your personal data, and object to processing based on legitimate interests. You can edit your profile, change email preferences and delete your account in Settings. For anything else, email support@3types.app. You also have the right to complain to the Information Commissioner's Office.
Children
3types is for adults aged 18 and over. We do not knowingly collect data from children. If you believe a child is using the platform, tell us at safety@3types.app.
Contact
Privacy questions and rights requests: support@3types.app. This address is being set up and is not confirmed as operational yet. Our legal entity name, company number, registered notice address and any data-protection representative are still to be completed and will be published here once confirmed.