Privacy & Data

Signal Acquisition (Data Collection)

Modulation Strategy (Data Usage)

• Operation: To sustain and display your lore within the CharHaven network.
• Alerts: To dispatch critical status updates, security warnings, and billing sequences.
• Fortification: To detect anomalies, neutralize threats, and prevent unauthorized data access.
• Improvement: To troubleshoot bugs, analyze feature usage in aggregate, prioritize roadmap work, and measure the performance of platform systems.

Your Rights & Controls

Depending on applicable law and the request, you may:

Orbital Safeguards (Security)

CharHaven uses administrative, technical, and organizational safeguards designed to reduce the risk of unauthorized access, disclosure, misuse, or loss of personal information. No internet service can be guaranteed perfectly secure, but we work to limit access, log important security events, and respond to credible threats. We do not sell your personal data to third parties for monetary consideration.

Age Requirements & Youth Privacy

• Users must be at least 18 years of age to register an account.
• Registration uses a birthdate-based age-eligibility check. This is not government-ID verification. Accounts found to belong to users under 18 will be disabled and handled under our safety and legal obligations.
• We do not serve targeted advertising to users under 18.
• If you are a parent or guardian and believe your child under 18 has created an account, please contact us immediately at admin@charhaven.com. We will disable the account promptly and delete or retain associated data only as required for safety, evidence preservation, and applicable law.

Content Safety & Mature Content

CharHaven features user-generated content that may include mature themes. We implement the following safeguards:

• All mature content is hidden by default behind age-verification gates and content filters.
• Users must be 18+ and explicitly consent before they can view mature-tagged content.
• Consent records (including timestamp, IP address, and user agent) are stored for legal compliance.
• For the full content policy, refer to our Community Guidelines and Terms of Service.

Cookies & Tracking Technologies

CharHaven uses the following types of cookies and tracking technologies:

Third-Party Services & Data Sharing

We share data with the following categories of third-party service providers as necessary to operate the platform:

We do not sell, rent, or trade your personal data to advertisers, data brokers, or any third party for marketing purposes.

Data Retention

• Account and content data: Retained while the account is active and then deleted or de-identified through the account-deletion process, subject to backups, disputes, and legal obligations.
• Web-server logs: Normally rotate daily with up to 14 rotations; incident evidence may be preserved longer when reasonably required for security, abuse investigation, or legal claims.
• Database backups: The production backup schedule normally retains daily database archives for 7 days. An isolated archive may be retained longer only for a documented recovery, security, dispute, or legal purpose.
• Transaction records: Retained for the period required by applicable tax, accounting, fraud-prevention, and payment rules.
• Moderation records: Retained for as long as reasonably needed to enforce safety rules, address repeat abuse, and resolve legal claims.

Breach Notification

If we determine that a security incident has affected your personal information and notification is required by applicable law, we will notify affected users and regulators within the legally required timeframe, including the 3×24-hour period required by Indonesia's Personal Data Protection Law where it applies. The notice may describe the nature of the incident, the information involved, and recommended protective steps where available.

International Users & Data Transfer

CharHaven may store and process data in countries other than the one in which you live. When cross-border transfers occur, we use reasonable operational, contractual, or technical safeguards appropriate to the service and the nature of the data involved.

Access, Deletion & Verification Requests

If you submit a privacy request, we may ask you to verify ownership of the account or otherwise confirm your identity before disclosing, exporting, correcting, or deleting personal information. We may deny or limit a request where the law permits, including where we need to retain data for fraud prevention, moderation records, tax obligations, security logs, or unresolved disputes.

European Economic Area (EEA) / GDPR Rights

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access (Art. 15): Request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
• Right to Erasure (Art. 17): Request deletion of your personal data, subject to legal exceptions (fraud prevention, moderation records, legal obligations).
• Right to Data Portability (Art. 20): Request your data in a structured, commonly used, machine-readable format (JSON export).
• Right to Restrict Processing (Art. 18): Request that we limit how we use your data under certain circumstances.
• Right to Object (Art. 21): Object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Legal Basis for Processing: We process your personal data on the following legal bases as applicable: consent, performance of a contract, legitimate interests such as security and service improvement, and legal obligations such as financial record-keeping. To exercise a privacy right, contact admin@charhaven.com. We will respond within the period required by applicable law and will explain any permitted extension or limitation. You may also have the right to complain to your local supervisory authority.

California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request the categories and specific pieces of personal data we have collected about you.
• Right to Delete: Request deletion of your personal data, subject to legal exceptions.
• Right to Opt-Out: CharHaven does not currently sell personal information. If covered practices change, we will provide any opt-out mechanism required by applicable law.
• Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise any of these rights, contact us at admin@charhaven.com. We will verify your identity before processing requests.