Macroverse

Introduction

In plain terms: This policy explains what information Macroverse collects about you, why, who else ever sees it, how long we keep it, and the controls you have. We wrote it to be read. We are not trying to hide anything. If something in here surprises you, we would rather you find out here than anywhere else.

This Privacy Policy is issued by Macroverse Media, Inc. ("Macroverse," "we," "us," or "our").

It applies to everything we operate:

the Macroverse platform at macroverse.com;
the Macroverse mobile applications, where distributed;
Macroverse Studio at studio.macroverse.com, used by Producers, the operators of channels on Macroverse;
the Universal Player, our embeddable comic reader, including when it appears on third-party websites; and
our communications with you (email, support, notifications).

It applies to all users: readers, collectors, fans, Producers, and Makers (the writers, artists, and other credited people who make the published content and claim a profile on the platform).

The shorter summaries we publish (including the "In plain terms" boxes in this document) are there to help you understand; the detailed language in this policy controls. We commit to keeping the summaries accurate, and if a summary and the detail ever conflict, tell us and we will fix the summary.

Questions at any point: privacy@macroverse.com.

1. Privacy at a Glance

In plain terms: One table. Everything else in this policy is detail on these rows.

What we collect	Why we collect it	Who else gets it	How long we keep it	Your controls
Account and profile (email, username, avatar, bio, preferences)	To run your account and show your public profile	Auth0 (login service); your username, avatar, and collection activity are visible to other users	Life of your account; deleted or anonymized when you delete your account	Edit in settings; deactivate or delete your account
Payment information (card details)	To process purchases and subscriptions	Collected directly by Stripe (or by Apple or Google for an in-app purchase). We never store full card or bank numbers.	Transaction records: 7 years (tax and financial law)	Manage payment methods at checkout; cancel subscriptions any time
Producer channel and payout data (channel details, content metadata, payout records)	To run your channel and pay you (Producers only)	Business identity, tax, and bank details are collected by Stripe, not Macroverse; tax authorities as legally required, through Stripe	Payout records: 7 years	Channel and content via Studio; tax and bank details via Stripe
Reading and engagement data (reading progress, time spent on pages, quests, experience points (XP), collection activity)	To sync your progress across devices, run quests and rewards, recommend content, and give Producers channel analytics	Producers see engagement with their own channel; our analytics providers process it on our behalf	Individual-level: up to 3 years, then aggregated	Unsubscribe in every email; notification settings; account deletion
Device and technical data (browser, operating system, device type, IP address, approximate location)	Security, fraud prevention, keeping the platform working	Our analytics and infrastructure providers	Security logs: up to 24 months	Browser cookie controls; see Section 7
Embed context (when you read through our player on another site: that site's domain and your reading session)	So the player works on third-party sites and Producers can see where their readers come from	The host site never receives your Macroverse account data from us	Same as reading data above	Same as reading data above
Pre-signup activity (browsing before you sign up, which we may associate with your account)	So your progress is not lost if you sign up	No one; internal only	Same as reading data above	Delete your account
Communications (support emails, notification preferences)	To help you and to respect your choices	Postmark (email delivery)	Support threads: up to 3 years after resolution; opt-out (suppression) lists: kept so we never email you again	Unsubscribe links; notification settings
Your email → Producers you subscribe to or follow	So Producers can communicate with their own audience	Shared data: the Producer of that channel can see and export your email address and your engagement with their channel, and can keep that export if they leave the platform; Macroverse retains the same data	While you are subscribed/following, plus their obligation to honor your unsubscribe	Unsubscribe in every email (honored via suppression lists); see Section 4.2
User-generated content (comments, profile content, fan content where offered)	To display it, because you posted it	Visible to other users per the feature	Deleted or anonymized on account deletion	Delete your posts; delete your account
Ownership records (what collectibles you own, purchase provenance)	To maintain your collection, and as an input to quests, rewards, and engagement features	Some records are written pseudonymously to a blockchain ledger we operate (no name or email on-chain)	Chain-of-title records are retained permanently as ownership evidence	See Sections 6 and 9

Three commitments up front:

We do not sell your personal information. Not to advertisers, not to data brokers, not to anyone.
We do not run third-party advertising networks on Macroverse today. If that ever changes, this policy changes first, before any such data flows begin.
Payment card and bank details never touch our servers. Stripe, Apple, and Google handle them.

2. Information We Collect

In plain terms: We collect what you give us (account, profile, posts), what your purchases generate (through Stripe, or Apple or Google for an in-app purchase; card numbers never touch our servers), and what your reading activity generates (progress, time spent, quests, collection activity, including when you read through our player on someone else's website). If you browse before signing up, we may associate that activity with your new account so your progress carries over, though today that carry-over is limited (see 2.7).

2.1 Account and Profile Information

When you create an account we collect your email address, username, and authentication details. You may add profile information such as an avatar, display name, bio, and preferences. Your username, avatar, and certain collection activity are visible to other users through public platform features. Macroverse is partly a social, collector-facing product, and public collections are part of that.

Authentication is handled by Auth0, our identity provider. Where we offer third-party sign-in options, the sign-in provider shares basic profile data (such as your email address) with us to create or match your account.

2.2 Payment Information

Most purchases, including ones you start inside a Macroverse app, are handled by Stripe through a secure web-hosted checkout. If and where a purchase is made through Apple or Google in-app purchase, billing is handled by Apple or Google. In every case, your full card or bank account numbers are collected by the payment provider, not by us, and we never store them on our servers. We receive and keep transaction records: what you bought, when, the amount, the payment method type (for example, "Visa ending 4242"), and the payment provider's transaction identifiers.

2.3 Producer and Channel Information (Macroverse Studio)

If you operate a channel as a Producer, Macroverse collects the information needed to run your channel and content: your channel details (name, description, branding), content metadata (titles, descriptions, pricing, release schedules), and records of your payouts (amounts and dates). We do not collect your business identity, tax, or banking information through Macroverse Studio; that information goes to Stripe, as described next.

Payout onboarding, including identity verification and tax-form collection (for example, a W-9 or international equivalent), happens through Stripe Connect's hosted onboarding. Your bank account details and government identifiers go to Stripe directly, not to Macroverse. Any tax reporting to authorities that the law requires (for example, United States 1099 reporting) is handled through Stripe as the payment processor. Macroverse does not separately collect your taxes, withhold on your behalf, or issue you tax statements.

Producer-uploaded contact lists. Producers can upload their existing mailing or customer lists to Macroverse Studio to connect their audience to their channel. If a Producer uploads a list that includes your email address, we receive it from the Producer, and it becomes shared channel data under the model described in Section 4.2: held by both the Producer and Macroverse. Suppression lists are honored: if you have opted out, you will not be contacted, and every message includes an unsubscribe.

2.4 Reading and Engagement Data

Macroverse is a reading platform, and reading generates data. We collect:

Reading progress: which issues and pages you have read, so your place syncs across devices;
Engagement signals: time spent on pages, zoom and navigation actions within the reader;
Quest, badge, and experience points (XP) activity: quests started and completed, badges claimed, XP earned and spent;
Collection activity: purchases, claims, follows, subscriptions, items secured in your collection;
Sharing activity: clips and shares you create from the player.

We use this to run the product (progress sync, quests, XP, recommendations). Your activity and your collection (what you read, what you collect, the channels you subscribe to, and the collectibles you own) may also be used as inputs to quests, badges, rewards, and other engagement features, both for the channels whose content you engage with and across Macroverse as a whole. We provide Producers with analytics about engagement with their own channel, and a Producer may use engagement tied to their channel to build rewards or incentives for their audience (see Section 4.2).

2.5 Device and Technical Data

Like nearly every online service, we automatically collect device and connection data: browser type, operating system, device type, IP address, approximate (city-level) location derived from IP address, and performance and error data. We use this for security, fraud prevention, debugging, and keeping the platform stable. We do not collect precise (GPS-level) location.

2.6 Embed Context (Reading on Other Websites)

The Universal Player can be embedded on third-party websites: a producer's storefront, a crowdfunding page, a partner site. When you read through an embedded player, we receive the domain of the host website along with your reading session data, the same way a video platform knows which site an embedded video was played on. We use this so the player works correctly in context and so Producers can see where their readers come from. The player runs in a sandboxed frame; the host website does not receive your Macroverse account data from us through the embed.

2.7 Pre-Signup Activity

You can browse and read some of Macroverse without an account. If you later create an account, we may associate activity from before you signed up with your new account so that things like reading progress carry over instead of being lost. Today this is limited: most personalized activity, such as experience points and items in your collection, requires an account in the first place, and pre-signup reading progress is not currently carried into a new account. Where we are able to link pre-signup activity to your account, it is internal only: we do not buy outside data to identify anonymous visitors, and we do not share the linked history. If we expand this linking in the future, this policy continues to govern it, and deleting your account severs and deletes any such link along with the rest of your personal data (Section 9).

2.8 Communications Data

When you contact support, reply to an email, or set notification preferences, we keep those communications and choices. Opt-outs are recorded on suppression lists that we retain specifically so that we never contact you again after you have said no.

2.9 User-Generated Content

Content you post on the platform (comments, profile content, and fan content where those features are offered) is collected and displayed according to the feature you used. Content you post publicly is visible to other users. Handling of user-generated content, including our moderation rules, is governed by the Terms of Service; the privacy treatment (retention and deletion) is covered here in Sections 8 and 9.

2.10 What We Do Not Collect

To be explicit about a few things people often assume:

We do not collect your date of birth today. (See Section 12 on children and age.)
We do not collect precise (GPS-level) location. We do log your IP address, from which an approximate (city-level) location can be derived (see Section 2.5).
We do not access your device contacts, photos, or microphone.
We do not collect biometric data.

3. How We Use Your Information

In plain terms: We use your data to run the platform you signed up for, pay Producers, keep the lights on and the fraudsters out, and, with your consent where required, tell you about things you might care about. Each use is listed below, and Section 10 maps each one to its legal basis for readers in the European Union and United Kingdom.

Purpose	What this means concretely
Providing the service	Operating your account, your collection, the reader, progress sync, quests, badges, and XP
Engagement, quests, and rewards	Using your reading, collection, subscription, and ownership activity as inputs to quests, badges, rewards, and other engagement features, both for the channels you engage with and across Macroverse
Processing transactions	Purchases, subscriptions, refunds where applicable, and Producer payouts
Producer analytics and payouts	Giving Producers revenue reporting and engagement analytics for their own channel, and running the payout system
Personalization and recommendations	Suggesting content based on your reading and collection activity
Communications you asked for	Account, transaction, and platform notices; support responses
Marketing communications	Promotional emails about content and features; you can opt out at any time, and every such email has an unsubscribe link
Safety, security, and fraud prevention	Detecting abuse, protecting accounts, preventing payment fraud
Legal compliance	Tax reporting on Producer payouts, responding to lawful requests, keeping legally required records
Platform improvement	Analyzing usage; individual-level data is aggregated or de-identified for this after the retention period in Section 8
Ownership recordkeeping	Maintaining the record of who owns which collectible, including the custodial ledger described in Section 6

We do not use your personal information for purposes materially different from these without updating this policy first.

In plain terms: Three kinds of sharing happen: (1) service providers who process data for us under contract, listed by name below; (2) Producers, who can see and export the email addresses and channel engagement of their own subscribers and followers (this is the one to read carefully); and (3) the boring-but-necessary categories: legal compliance, tax authorities, and a successor company if Macroverse is ever acquired. We never sell your personal information.

4.1 Service Providers (Sub-Processors)

These companies process personal data on our behalf, under contracts that limit what they can do with it. We require that every third party receiving user data protects it to a standard equal to or greater than our own commitments in this policy.

Provider	What they do	What they receive
Stripe (including Stripe Connect and Stripe Tax)	Payment processing, subscription billing, Producer payouts, Producer identity verification and tax-form collection, tax calculation	Payment details (collected directly by Stripe), transaction data, Producer identity and tax data
Auth0	Login and identity	Email address, authentication credentials, sign-in metadata
Google Analytics 4	Usage analytics	Device/technical data and usage events (see Section 7 on cookies and consent)
Macroverse Event Store (self-hosted)	Our own analytics warehouse; first-party, on our infrastructure	Reading, engagement, and platform events
Postmark	Transactional and notification email delivery	Email address and message content
Aptos blockchain infrastructure	Custodial ledger for ownership provenance records (see Section 6)	Pseudonymous ownership records only, never your name or email
Bulu / Extensiv	Warehousing and shipping for physical orders (such as Authentic Editions)	Shipping name, address, and order contents, only when you order a physical product
Apple App Store / Google Play	App distribution and, where applicable, in-app billing	Purchase and billing data for app-store transactions, under their own privacy policies

If we add a service provider that processes personal data in a new way, we update this table.

4.2 Channel Data Is Shared Between the Producer and Macroverse

In plain terms: this is the single most important data flow to understand on Macroverse. When you subscribe to a Producer's channel (including holding a Collectible Ticket, the collectible that represents an active channel subscription) or follow a channel, your relationship with that channel is shared data, held by both the Producer and Macroverse. The Producer has full, transparent access to their channel's data and analytics, including your email address and what you did with their channel, and can export it to communicate with their audience off-platform, including adding you to their own mailing list. Macroverse keeps the same data. Producers on Macroverse own their relationship with their readers. That is deliberate, and it is part of why producers choose the platform. But it means your email address is not private from the Producers you choose to subscribe to or follow.

The details:

What the Producer sees: your email address, and your engagement with their channel only: subscription status, follows, reading activity on their content, and purchases of their content. Producers never see your activity on other channels, your payment details, or your full platform history.
It is shared, not handed off. Channel data is held by both sides: the Producer has full access and can obtain an export (on request today, with direct self-serve export coming); Macroverse collects and retains the same data as platform data. If a Producer leaves Macroverse, they may take their exported channel data with them (including their customer list and each customer's activity with their channel), and Macroverse also keeps it. Both sides remain bound by their obligations to you (the Producer's commitments below; ours under this policy).
Producer-uploaded lists flow the other way too. Producers can upload their own existing mailing or customer lists into Studio; once uploaded, those lists become shared channel data on the same terms: held by both the Producer and Macroverse and integrated into the Macroverse system. If you were on a list a Producer uploaded, suppression is honored (opted-out addresses are never contacted) and every message includes an unsubscribe.
What Producers must do: under the Terms of Service, Producers commit to using this data lawfully, only for communications related to their channel, and to honoring unsubscribe requests, obligations that survive their departure from the platform. Producers are responsible for having the right to upload any list they bring in. A Producer who abuses subscriber data faces removal from the platform.
Your controls:
Unsubscribe links: every message sent through Macroverse includes one, and unsubscribes are recorded on suppression lists that both we and Producers must honor, including for uploaded lists;
Notification settings: where we offer notification controls, you can manage what you receive. We are expanding these controls, with the goal of letting you mute an individual Producer or all Producer communications;
Unsubscribing from the channel: ending your subscription or unfollowing stops the ongoing data flow, though a Producer may retain the list they lawfully exported while you were subscribed (their obligation to honor your unsubscribe survives).

4.3 Legal Compliance and Protection

We disclose personal data when required by law (subpoena, court order, or lawful government request) and when necessary to protect the rights, safety, or property of Macroverse, our users, or the public. Where the law allows, we will tell you before disclosing your data in response to legal process.

4.4 Tax Authorities

Where the law requires tax reporting for Producer payouts (for example, Internal Revenue Service 1099 reporting for United States Producers), that reporting is handled through Stripe as the payment processor. Macroverse does not itself file those tax forms or issue tax statements to Producers.

4.5 Business Transfers

If Macroverse is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal data may be transferred to the successor entity as part of that transaction. The successor takes the data subject to this policy's commitments, and your collection and entitlements travel with the platform (see the Terms of Service for how ownership is handled in a business transition). We will notify you of any transfer that changes who is responsible for your data.

4.6 Public Features

Your username, avatar, public profile content, and certain collection activity are visible to other users by design. Producer channel pages and public channel information are visible to everyone. What you post publicly is public.

4.7 Aggregated and De-Identified Data

We use and may share aggregated or de-identified data that does not identify you, such as platform-wide reading statistics in an investor update or a public report. We do not attempt to re-identify de-identified data, and we require the same of anyone we share it with.

5. We Do Not Sell Your Personal Information

In plain terms: We make money when you buy comics and collectibles and when Producers succeed, not by selling data about you.

We do not sell personal information, and we have not sold it in the preceding 12 months.
We do not share personal information for cross-context behavioral advertising (the CCPA/CPRA definition of "sharing").
We do not run third-party advertising networks on the platform today. No ad-tech trackers follow you around Macroverse.
If any of this ever changes, this policy will be updated first, before any new data flow begins, with clear notice and the opt-outs the law requires, and the ones we would want ourselves.

The Producer data flow described in Section 4.2 is a disclosed feature of the service you sign up for when you subscribe to a channel; it is not a sale of data, and Producers are contractually barred from selling it onward.

6. Blockchain Ownership Records

In plain terms: When you buy or secure a collectible, we may record its provenance on a blockchain ledger that we operate for you. There is no name, email, or personal detail on that ledger, just pseudonymous ownership records. The catch with any blockchain is permanence: those records cannot be erased. What we can and do delete, when you delete your account, is the private link between you and those records.

Some ownership records for collectibles are written to a blockchain ledger (currently Aptos) that Macroverse operates custodially, meaning we manage the infrastructure and the keys on your behalf. You do not hold private keys, you do not need a crypto wallet, and nothing about this requires you to interact with a blockchain. It is provenance plumbing, not a crypto product. The Terms of Service describe the ownership model in full.

What this means for your privacy:

On-chain records are pseudonymous. They contain item and transaction identifiers, never your name, email address, or other personal details.
On-chain records are technically immutable. Once written, they cannot be modified or deleted by anyone, including us. This is inherent to the technology.
The identity mapping is ours to delete, and we do. The connection between you and your pseudonymous on-chain records lives in our private systems. When you delete your account, we delete that mapping, severing the link between your identity and the on-chain records. What remains on the ledger is an ownership history that no longer points to you as a person.

7. Cookies and Tracking

In plain terms: We use cookies to keep you logged in, remember your preferences, and understand how the platform is used, including inside the embedded player on other people's websites. We do not use third-party advertising cookies. You can control cookies through your browser, and we honor recognized browser privacy signals.

We use these categories of cookies and similar technologies:

Session and security cookies (essential): keep you logged in and protect your account. The platform does not work without these.
Preference cookies: remember settings like your reader preferences.
Analytics cookies: help us understand usage via Google Analytics 4 and our own first-party event store. These are not used for third-party advertising.

Inside embedded players: when you read through the Universal Player on a third-party website, Macroverse sets its own (first-party to Macroverse) cookies within the player frame to maintain your session and reading state. The embed also records the host site's domain, as described in Section 2.6. The host website cannot read Macroverse's cookies, and we do not set cookies for the host site's benefit.

Your cookie controls. You can control cookies through your browser settings, though disabling essential cookies will break login and reading. Where applicable law requires your consent before non-essential (analytics) cookies are set (for example, for visitors in the European Union and United Kingdom), we ask for that consent or otherwise limit non-essential cookies for those visitors, and you can change your choice. We are continuing to expand these controls.

Global Privacy Control: because we do not sell or share personal information for cross-context behavioral advertising, there is nothing for a Global Privacy Control signal to opt you out of. We still recognize the signal and will honor it if our practices ever change.

8. How Long We Keep Information

In plain terms: We keep your data while your account exists. When you delete your account, we delete or anonymize your personal data, except for a short list of things we are legally required to keep (tax and transaction records), things that protect everyone (fraud and security records), and the permanent record of collectible ownership history, which survives as evidence of chain of title but stops pointing at you as a person.

8.1 Retention Schedule

Data category	Retention period	Why
Account and profile data	Life of your account, plus the deletion-processing window after you request deletion	Running your account
Transaction, payout, and tax records	7 years	Financial reporting, tax law, dispute resolution
Producer tax forms and identifiers	Held by Stripe, not on Macroverse servers	Collected and retained by Stripe under tax law
Chain-of-title and surrender ledger (records of collectible ownership transfers, including assets assigned to Macroverse on account deletion)	Retained permanently	Evidence of ownership history and lawful transfer of title; protects every current and future owner of the item
Reading and engagement analytics	Individual-level: up to 3 years, then aggregated or de-identified	Product analytics without a permanent personal dossier
Device/technical and security logs	Up to 24 months	Security, fraud prevention, debugging
Support communications	Up to 3 years after the matter is resolved	Quality, dispute resolution
Suppression lists (email opt-outs)	Kept indefinitely (email address only)	So we never contact you again after you opt out; deleting this would risk re-contacting you
Blockchain provenance records	Technically permanent (see Section 6)	Immutable by design; identity mapping deleted on account deletion
Terms-acceptance records (which Terms version you accepted, when)	Retained permanently	Legal proof of agreement

8.2 What We Keep After Account Deletion, and Why

When your account is deleted, we retain only the following, and only for the purposes stated:

Legally required records: transaction, tax, and financial records for their statutory periods;
Fraud and security records: kept where needed to prevent abuse (for example, evidence tied to a chargeback or a banned account);
Legal claims: records reasonably necessary for actual or anticipated legal proceedings;
Ownership evidence: the chain-of-title ledger described above, including the record that collectibles remaining in a deleted account were assigned to Macroverse as part of deletion (this consequence is set out in the Terms of Service and confirmed with you before deletion is processed; see Section 9.4);
Suppression lists: your opt-out record, so deletion does not accidentally re-subscribe you to anything;
Terms-acceptance records: the record of which Terms version you accepted and when, retained permanently as legal proof of agreement (see the schedule in Section 8.1).

None of this leaves behind a usable, discoverable, or active personal account. Retained records are access-controlled and used for no other purpose.

9. Your Rights and Controls

In plain terms: You can see your data, fix it, export it, and delete it. Deleting or deactivating your account is available today by emailing support@macroverse.com, and deletion is genuinely deletion, not a hidden deactivation. Before you delete, know two things: deactivation is a separate, reversible option if you just want to step away; and permanently closing your account surrenders any collectibles left in it, which is spelled out in the Terms of Service and confirmed with you before we process anything (we show you a summary of what will transfer, including how many collectibles). Exercising your legal right to have your personal data deleted does not by itself require you to give up your collection. See 9.4.

9.1 Rights Available to Everyone

Regardless of where you live, we offer every Macroverse user:

Access: ask what personal data we hold about you and get a copy;
Correction: fix inaccurate data (most profile data you can edit yourself in settings);
Deletion: delete your account and personal data (Section 9.4);
Portability / export: receive a machine-readable export of your data, including your collection inventory;
Opt-outs: unsubscribe from any email through the link it contains; unsubscribes are honored via suppression lists. We are adding finer notification controls, including muting an individual Producer or all Producer communications;
Consent withdrawal: where processing is based on your consent (such as analytics cookies in the European Union and United Kingdom, or marketing), you can withdraw it as easily as you gave it, at any time, without affecting the rest of your service.

To exercise any right: use your account settings where the control exists, or email privacy@macroverse.com. We verify requests (normally by confirming control of the account email), we do not charge for them, and we respond within the timeframe applicable law requires. You will not be penalized or receive degraded service for exercising a privacy right. If you separately choose to permanently close your account, that voluntary action carries the disclosed collectible-surrender consequence described in Section 9.4 and the Terms of Service. Exercising your statutory right to have your personal data deleted does not, by itself, require you to surrender your collection (see Section 9.4).

9.2 Producer-Specific Rights

Producers can obtain a complete copy of the data associated with their Macroverse Studio account (revenue records, content metadata, customer lists and per-customer channel activity, subscriber engagement analytics, and payout history), including when leaving the platform. Today this is provided on request; direct self-serve export is planned. Channel data is shared: the Producer's export is theirs to keep, and Macroverse retains the same data (see Section 4.2 and Terms of Service §11.9). Tax and identity information held by Stripe is managed through Stripe's own tools, reachable from Studio.

9.3 Deactivation Is Not Deletion

We offer two distinct options, and we will never treat one as the other:

Deactivate account: reversible. Removes your public-facing presence (profile hidden, social activity paused) while preserving everything privately: your login, profile, collection, ownership, history, and preferences become invisible on the platform but remain on our servers so the account can be reclaimed. Come back whenever you like and pick up where you left off. To deactivate, or to reactivate later, email support@macroverse.com; there is no self-serve toggle yet. One carve-out: if a Maker (credited contributor) profile is connected to your account, your creative credits on published works (the credit list, the works themselves, and items in other users' collections) are public data about published works and remain visible; deactivation removes you from public view, not your published work's history. Deactivation does not delete any data, and this policy continues to apply while you are deactivated. Deactivation is always available as the alternative to deletion if you want to disappear from public view without deletion's permanent consequences (including the collectible transfer described in the Terms of Service).
Delete account: permanent. Described next.

9.4 Deleting Your Account

You can delete your Macroverse account by emailing support@macroverse.com from your account email address; there is no self-serve deletion button today. (You can also make a privacy-rights request to delete your personal data at privacy@macroverse.com; see "Deleting your personal data without surrendering your collection" below.) We verify that the request comes from you and, for a full account deletion, we confirm with you what deletion affects (including a summary of any Collectibles that would transfer, with a full list on request) and obtain your separate, explicit consent before we process anything.

What full account deletion does:

Permanently removes your login identity and revokes all active sessions;
Deletes or anonymizes your profile, public presence, social connections, devices, notification settings, reading history, and other personal activity records that have no required retention basis (Section 8.2 lists exactly what is retained and why);
Cancels your paid subscriptions, either immediately or at the end of the current billing period, according to the choice we confirm with you (subscriptions billed by Apple or Google must be canceled through that store; we will remind you, because deleting your Macroverse account does not stop app-store billing on its own);
Deletes the private mapping between you and any pseudonymous blockchain records (Section 6);
Surrenders remaining collectibles: as set out in the Terms of Service, permanently closing your account permanently and irrevocably assigns any eligible collectibles still in your account to Macroverse, without compensation. Before we process it, we show you a summary of what will transfer (including how many collectibles), give you the opportunity to transfer or export eligible items first where the platform supports it, and obtain your separate, affirmative acknowledgment. You can ask for a full list. This consequence lives in the Terms of Service; this policy discloses it here so nothing about deletion surprises you.

Deleting your personal data without surrendering your collection. If you want to exercise your legal right to have your personal data deleted (for example, under the CCPA/CPRA or GDPR) but do not want to give up your Collectibles, tell us that when you contact us. We will delete or anonymize your personal data while retaining a pseudonymized ownership record, so your collection is not forfeited. The collectible surrender described above applies only when you elect to permanently close your account.

Timeline and confirmation: deletion requests are processed within 30 days, including a short window during which you can cancel the request. We confirm completion to your email address.

9.5 Region-Specific Rights

If you are in the European Economic Area or United Kingdom, Section 10 adds detail on your GDPR rights. If you are a California resident, Section 11 covers your CCPA/CPRA rights. Residents of other states or countries with privacy laws granting similar rights (such as Virginia, Colorado, or Connecticut) may exercise the equivalent rights through the same channels. In practice, we extend the Section 9.1 rights to everyone.

In plain terms: European law requires us to name a legal justification for every use of your data, tell you how data leaves Europe, and remind you that you can complain to a regulator. Here is all of that.

10.1 Controller

Macroverse Media, Inc. is the data controller for personal data described in this policy. Producers who export subscriber lists under Section 4.2 act as independent controllers of that exported data for their own communications, subject to their obligations under our Terms of Service and applicable law.

10.2 Legal Bases for Processing

Under the General Data Protection Regulation (GDPR), each processing purpose from Section 3 rests on one of the following legal bases:

Processing purpose	Legal basis
Providing the service (account, collection, reader, progress sync, quests, XP)	Contract (Article 6(1)(b)); this is the service you signed up for
Processing transactions and Producer payouts	Contract (Article 6(1)(b))
Producer analytics for their own channel; sharing your email with Producers you subscribe to or follow	Contract (Article 6(1)(b)), as a disclosed part of the subscription/follow feature, supported by legitimate interests (Article 6(1)(f)) in enabling the producer-audience relationship; your ability to unsubscribe applies in all cases
Processing contact lists uploaded by Producers (which may include people who are not Macroverse users)	Legitimate interests (Article 6(1)(f)) in connecting a Producer's existing audience to their channel, with suppression honored and unsubscribe in every message
Personalization and recommendations	Legitimate interests (Article 6(1)(f)) in making the catalog navigable; you may object at any time
Transactional and account communications	Contract (Article 6(1)(b))
Marketing communications	Consent (Article 6(1)(a)), withdrawable at any time via unsubscribe
Analytics cookies and similar non-essential tracking	Consent (Article 6(1)(a)) (see Section 7)
Security, fraud prevention, platform integrity	Legitimate interests (Article 6(1)(f)) in protecting the platform and its users
Tax reporting and legally required records	Legal obligation (Article 6(1)(c))
Ownership recordkeeping, including the chain-of-title ledger and surrender records	Contract (Article 6(1)(b)) and legitimate interests (Article 6(1)(f)) in maintaining reliable evidence of title for all owners

Where we rely on legitimate interests, we have balanced those interests against your rights and will provide our balancing assessment on request. You have the right to object to any legitimate-interests processing (Article 21), including an absolute right to object to direct marketing.

10.3 Your GDPR Rights

In addition to everything in Section 9, you have the right to: access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), objection (Article 21), and the right not to be subject to solely automated decisions with legal or similarly significant effects (Article 22; we do not make such decisions about you). Exercise any of these via privacy@macroverse.com. We respond within one month, extendable by two further months for complex requests, and we will tell you if we extend.

Erasure and the blockchain: as Section 6 explains, pseudonymous on-chain records cannot be technically erased; our erasure of the identity mapping is how we give effect to Article 17 for those records. Retention carve-outs in Section 8.2 rest on Article 17(3) (legal obligations and legal claims).

10.4 International Transfers

Macroverse is operated from the United States, and your data is processed there. Where personal data is transferred from the European Economic Area, United Kingdom, or Switzerland to countries without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (and the United Kingdom's International Data Transfer Addendum) with our service providers, alongside each provider's own certified mechanisms where available.

10.5 European Union / United Kingdom Representative

Where the appointment of a representative in the European Union or United Kingdom is required under Article 27 of the GDPR (or its United Kingdom equivalent), we will appoint one and publish the representative's name and contact details here. In the meantime, you can reach us about any European or United Kingdom data-protection matter at privacy@macroverse.com.

10.6 Complaints

You have the right to lodge a complaint with your local supervisory authority (in the United Kingdom, the Information Commissioner's Office). We would appreciate the chance to resolve your concern first (privacy@macroverse.com), but you do not have to give us one.

11. For California Residents (CCPA/CPRA)

In plain terms: California law gives you specific rights and requires disclosures in specific categories. The substance is the same story as the rest of this policy: we collect what it takes to run a comics platform, we do not sell or share your data for advertising, and you can know, correct, delete, and export.

This section supplements the rest of the policy for California residents under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).

11.1 Categories of Personal Information Collected

In the preceding 12 months we have collected the following statutory categories:

CCPA/CPRA category	Collected?	Examples on Macroverse	Disclosed to (service providers/contractors)
A. Identifiers	Yes	Email address, username, IP address, account identifiers	Auth0, Stripe, Postmark, analytics providers
B. Customer records (Civil Code §1798.80(e))	Yes	Name (if provided), payment method type; full payment credentials go to Stripe, not us	Stripe
C. Protected classifications	No	None	None
D. Commercial information	Yes	Purchases, subscriptions, collectibles owned, transaction history	Stripe, analytics providers
E. Biometric information	No	None	None
F. Internet or other electronic network activity	Yes	Reading progress, engagement, pages visited, embed host domain, device data	Analytics providers
G. Geolocation data	Yes (approximate only)	City-level location derived from IP address; no precise location	Analytics providers
H. Sensory data (audio, visual)	No	None	None
I. Professional or employment-related information	Yes (Producers only)	Business name, channel business information	Stripe
J. Education information	No	None	None
K. Inferences	Yes	Content recommendations derived from reading activity	Internal only
L. Sensitive personal information	Limited	Account login credentials (held by Auth0); Producer government identifiers and financial account details (collected by Stripe through hosted onboarding)	Auth0, Stripe

Sources: directly from you; automatically from your use of the platform (including embedded players); and from payment providers and app stores in connection with your purchases.

Purposes: as described in Section 3. Retention: as described in Section 8, per category.

11.2 No Sale, No Sharing

We do not sell personal information and do not share it for cross-context behavioral advertising, and we have not done either in the preceding 12 months. We have no actual knowledge of selling or sharing the personal information of consumers under 16. Because we neither sell nor share, no "Do Not Sell or Share My Personal Information" link is required; we honor Global Privacy Control signals as described in Section 7 should our practices ever change.

11.3 Sensitive Personal Information

We collect the limited sensitive personal information listed in row L above solely to provide the service (login) and to meet legal obligations (Producer identity and tax verification, handled through Stripe). We do not use or disclose sensitive personal information for purposes that require the right to limit under the CCPA/CPRA, so no "Limit the Use of My Sensitive Personal Information" link is required.

11.4 Your California Rights

You have the right to:

Know / access the personal information we have collected about you, including the categories, sources, purposes, and specific pieces;
Delete your personal information (Section 9.4), subject to the statutory exceptions mirrored in Section 8.2;
Correct inaccurate personal information;
Portability: obtain a copy in a usable format;
Non-discrimination: we will not deny service, charge different prices, or degrade quality because you exercised a privacy right. Exercising your right to have your personal data deleted does not require you to surrender your collection (Section 9.4). Only the separate, voluntary act of permanently closing your account carries the disclosed collectible-surrender consequence described in Section 9.4 and the Terms of Service.

How to exercise: account settings, or privacy@macroverse.com. We verify requests by confirming control of the account email (plus re-authentication for deletion). We respond to access/deletion/correction requests within 45 days, extendable once by 45 days with notice.

Authorized agents: you may designate an authorized agent to submit requests on your behalf. We will ask the agent for proof of your written authorization and may ask you to verify your identity directly, as the regulations permit.

12. Children

In plain terms: Macroverse is not for children under 13, and we do not knowingly collect their data. Some comics on the platform are for adults. If we learn we hold a child's data, we delete it.

Macroverse is not directed to children under 13, and our Terms of Service require users to be at least 13 (higher where local law requires; see the Terms).
We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it promptly. If you believe a child under 13 has an account, contact privacy@macroverse.com and we will investigate and delete.
Users aged 13 to 17: the platform hosts content across a range of ratings, including mature-rated content intended for adults. Content ratings are displayed as described in the Terms of Service. Parents and guardians are responsible for supervising minors' use of the platform.
Producer accounts require users to be at least 18.

13. Mobile Applications

In plain terms: Where we offer a Macroverse app, it collects the same account and reading data as the website: nothing extra and nothing hidden. Purchases from the app happen either in your device's secure browser through Stripe or through the app store's own billing, depending on how you buy. The privacy labels shown in the app stores are kept consistent with this policy.

The Macroverse mobile applications, where distributed, collect the same categories of data described in Section 2: account, reading and engagement, device/technical. The app does not collect additional categories beyond those in this policy, and does not access contacts, photos, precise location, or the microphone.
Purchases: depending on the platform and storefront rules, purchases are completed either (a) through a secure checkout page hosted by Stripe, opened in your device's browser, or (b) through Apple's or Google's in-app billing. In case (a), Stripe collects your payment details under Stripe's privacy policy; in case (b), the app store collects them under its policy. In both cases, we receive transaction records but never your full payment credentials.
Store privacy declarations: where our apps are distributed, the Apple privacy "nutrition label" and the Google Play Data safety form for our apps are maintained to be consistent with this policy, including the data-deletion disclosures. If you ever spot a discrepancy between a store label and this policy, tell us at privacy@macroverse.com and we will fix whichever one is wrong.
Account deletion is available as described in Section 9.4, including for users who have uninstalled the app.

14. Security

In plain terms: Data is encrypted in transit, access inside Macroverse is restricted to people who need it, and the most sensitive data, your payment credentials, is built so it never reaches us at all.

We protect personal data with measures including:

Encryption in transit: all connections to Macroverse use Transport Layer Security (HTTPS); we do not transmit personal data over unencrypted channels;
Access controls: internal access to personal data is limited to personnel who need it for their role, with authentication and audit logging on administrative systems;
Architecture that minimizes exposure: payment credentials are collected on Stripe-, Apple-, or Google-hosted surfaces and never stored on our servers; Producer identity documents go to Stripe's hosted onboarding; custodial ledger keys are server-managed through a key-management service and are never held by users or exposed client-side;
Vendor requirements: the service providers in Section 4.1 are bound to protect data to a standard equal to or greater than our own;
Ongoing review: security practices, dependencies, and access grants are reviewed regularly.

No system is perfectly secure, and we will not pretend otherwise. That is why the next section exists.

15. If a Breach Happens

In plain terms: If your data is involved in a security breach, we will tell you quickly and clearly, with what you need to protect yourself.

If we become aware of a breach of security affecting your personal data, we will:

Notify you without undue delay, and within the timelines applicable law requires (including the 72-hour supervisory-authority notification under GDPR where it applies, and applicable state breach-notification statutes);
Tell you what happened, what data was involved, and what we are doing about it, in plain language;
Tell you what you can do to protect yourself (for example, password changes; note that we do not store your payment credentials, which limits the damage any breach of our systems can do);
Notify regulators and payment partners as required.

We maintain an internal incident-response process so we can keep these commitments when it counts.

16. Changes to This Policy

In plain terms: When this policy changes in a way that matters, we tell you before it takes effect. We do not just quietly swap the page.

We may revise this Privacy Policy as the platform and the law evolve. When we do:

The version identifier and effective date at the top change;
Material changes (anything that expands what we collect, how we use it, or who we share it with) are announced with reasonable advance notice through the platform and by email before they take effect, with a plain-language summary of what changed;
Where a change requires your consent under applicable law, we will ask for it rather than assume it. Continued use after the effective date of non-consent-based changes constitutes acceptance of the revised policy.

Per Section 5: if we ever introduce data selling, data sharing for cross-context behavioral advertising, or third-party advertising networks, the policy changes first, before the practice begins.

17. Contact Us

Privacy inquiries and rights requests: privacy@macroverse.com General support: support@macroverse.com Legal: legal@macroverse.com

Privacy point of contact: the Macroverse privacy team, reachable at privacy@macroverse.com, is responsible for handling privacy questions, rights requests, and complaints for Macroverse Media, Inc.

Macroverse Media, Inc.

Privacy Policy