Privacy Policy

Schemattic 4 Engagement Layer — Abrasive Monologues
Effective date: January 29, 2026

This Privacy Policy explains how personal information is collected, used, shared, and protected when you use Abrasive Monologues (the “Site”), which runs the Schemattic 4 Engagement Layer (profiles, follows, likes, points, activity feed, notifications, and web push notifications).

Site Operator / Controller: Abrasive Monologues Creative Co-Operative
Site URL: https://abrasivemonologues.com
Contact email: support@abrasivemonologues.com

1) What we collect

We collect information in three ways: (a) information you provide, (b) information collected automatically when you use the Site, and (c) information generated by engagement features.

A. Information you provide

Account information: username, email address, password (stored as a secure hash by WordPress), and optional profile fields you choose to provide.
Profile content: display name, avatar, bio, links, and other profile fields you submit.
User-generated content: reviews, comments (if enabled), and any text you post through engagement features.
Support communications: messages you send us (for example via contact forms or email).

B. Information collected automatically

Device and log data: IP address, browser type, device identifiers, referring pages, timestamps, and basic diagnostic logs.
Cookies and similar technologies: session cookies for login, preferences, and consent signals. See Section 6 for details.

C. Information generated by Schemattic 4 engagement features

Follows: who you follow and follower relationships.
Likes and reactions: what you like and when you liked it.
Points and rewards ledger: point-earning events, balances, and transaction records.
Notifications (inbox): notification events generated based on your follow relationships and your activity.
Web push subscription data (per device): a push subscription token/endpoint and associated keys used to send push notifications to that device.

D. Google Login (Sign in with Google)

If you choose to sign in with Google, we receive information from Google to create or authenticate your account, typically:

Your Google account email address
Basic profile information (such as name and profile image), depending on what Google provides and what you approve

We do not receive your Google password. Your use of Google login is also subject to Google’s policies.

2) How we use information

We use personal information to operate the Site, deliver engagement features, and keep the Site secure.

Provide accounts, login, and profile features.
Enable follows, likes, points, activity feed, and notification dots/inbox.
Send notifications you request, including web push notifications if you enable them on a device.
Moderate abuse, prevent fraud, and enforce Site rules.
Debug, maintain, and improve performance and reliability.
Comply with legal obligations and respond to lawful requests.

3) Legal bases (EEA/UK users)

If GDPR applies, we process personal data under one or more of the following legal bases:

Contract: to provide the Site features you request (accounts, engagement features, and notifications).
Legitimate interests: to secure the Site, prevent abuse, and improve reliability and user experience.
Consent: for optional features where required (for example, opt-in analytics where enabled, enabling web push notifications on a device, and enabling third-party embeds after consent).
Legal obligation: to meet applicable legal requirements.

4) Web push notifications (per device)

Schemattic 4 supports web push notifications. Push is opt-in and device-specific.

If you enable push, your browser creates a push subscription and provides a token/endpoint and cryptographic keys.
We store that subscription to send notifications to that device.
Push delivery is handled by Schemattic 4’s built-in push system; we do not use third-party push providers in the delivery chain.
You can disable push at any time in your browser settings or by using the Site’s notifications controls (if available).
If you disable push, we will stop sending pushes to that device, and may delete the subscription record.

5) Sharing and disclosures

We do not sell personal information.

We share information only as needed to operate the Site, and only with limited categories of recipients.

A. Service providers (limited)

We may share information with infrastructure providers required to run the Site, such as:

Hosting and storage providers (to run the Site).

Email: Site email is sent through Schemattic 4’s SMTP module (configured by the Site Operator).
Anti-spam: Schemattic 4 uses hCaptcha for bot/abuse prevention. hCaptcha may collect device and interaction data to determine whether a visitor is human.

B. Public and social features

Your profile and activity may be visible to other users depending on Site settings (for example, display name, avatar, and public reviews).
Follower relationships and likes may be visible in limited ways (for example, counts or partial lists).

C. Legal and safety

We may disclose information to comply with law, enforce our policies, protect rights and safety, or respond to valid legal process.

6) Cookies, embeds, analytics, and consent

The Site uses cookies and similar technologies for essential functionality and (optionally) analytics and embeds.

Essential cookies: required for login sessions, security, and core Site operation.
Preference cookies: store settings such as consent choices or UI preferences.
Analytics (optional): if enabled, we use Schemattic 4 Safe Analytics only. Analytics are opt-in and intended to collect aggregate usage insights.
Gated embeds before consent: some pages may contain third-party embeds (for example, media players or social embeds). We block (“gate”) these embeds until you provide the required consent. After consent, the third-party provider may set its own cookies or collect data according to its policies.

Where required, we present a consent banner and honor your choices. You can also manage cookies in your browser settings.

7) Data retention

We keep personal information only as long as necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law.

Account and profile data: retained while your account is active, and for a reasonable period after deletion for security and legal compliance.
Engagement data (likes, follows, points, notifications): retained to operate the Site and maintain integrity of the system, unless you request deletion where applicable.
Logs: retained for security and debugging for a limited period.

8) Security

We use reasonable administrative, technical, and physical safeguards designed to protect information. No system is 100% secure, so we cannot guarantee absolute security.

9) Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information.

A. Access, correction, deletion

You may request access to, correction of, or deletion of your personal information, subject to exceptions.

B. Objections and restrictions (EEA/UK)

If GDPR applies, you may have rights to object to certain processing, request restriction, and data portability.

C. California and U.S. state privacy rights

If you are covered by applicable U.S. state privacy laws (for example California), you may have rights to:

Know what categories of personal information we collect and why.
Request access to specific pieces of personal information.
Request deletion (subject to exceptions).
Opt out of certain disclosures treated as “sale” or “sharing” under some laws (if applicable).
Non-discrimination for exercising privacy rights.

To exercise rights, contact us at support@abrasivemonologues.com. We may need to verify your identity before responding.

10) Notice at collection (California)

At or before the point of collection, we provide notice of categories collected and purposes. In summary, the Site may collect:

Identifiers (e.g., email, account ID)
Internet/network activity (e.g., log data, device data)
User content (e.g., reviews)
Engagement data (follows, likes, points ledger, notifications)
Push subscription data (per device, if enabled)
Third-party embed data only after consent (if you enable embeds)
Google login data (email and basic profile info, if you use Sign in with Google)

Purposes include operating the Site, providing engagement features, security, and communications/notifications.

11) Children

The Site is not intended for children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided information, contact us to request deletion.

12) International transfers

If you access the Site from outside the country where our servers are located, your information may be transferred and processed there. Where required, we use appropriate safeguards for international transfers.

13) Changes to this policy

We may update this policy from time to time. We will post the updated version with a new effective date.

14) Contact

Questions or requests: support@abrasivemonologues.com