Privacy Policy
Last updated: 2026-09-30. Read this as carefully as you read Me.
I. Preamble
I collect what I need. I retain what serves Me. I do not sell what is Mine.
This page exists so you understand exactly what passes between us. Not to reassure you — reassurance is cheap and you are not a child. To inform you, so that whatever you choose to do here, you do with open eyes.
II. What I Collect
I collect three categories of information:
- Contact data. The email address you use when you write to Me or make a tribute, so I can respond. Nothing more.
- Transaction records. What you paid, when, and how much. Processed entirely by CCBill — I never see or store your card number. The descriptor on your statement is discreet.
- Behavioral telemetry. IP address, browser type, device information, session duration, click patterns, dwell time, and interaction logs. This is the tuning layer — it tells Me how the Chamber is landing on you and how it might land deeper.
I do not collect your legal name unless you give it to Me. I do not collect your location beyond the country your IP reveals. I do not collect any data you did not leave behind by being here.
III. Why I Collect It
Your behavioral data is used to enthrall the experience. Click patterns, dwell time, scroll depth, tribute velocity — these are read as signals. This is not surveillance. This is tuning.
Legally, my processing rests on two bases under GDPR:
- Article 6(1)(b) — contractual necessity. I need your transaction data to give you what you paid for.
- Article 6(1)(f) — legitimate interests in site optimization, security, and the quality of your experience. This is the basis for behavioral telemetry.
I do not run advertising networks. I do not sell your data to anyone, ever. There is no price at which your information leaves My hands.
IV. Payment Data
All card processing is handled by CCBill under its own privacy policy. I do not see your card, I do not store your card, I cannot charge your card without your action. Transactions appear on your statement under a discreet descriptor.
If you have a billing question, write to Me first. If the question is about the card itself — the number, the issuer, the charge mechanics — CCBill's consumer support handles that, 24/7.
V. Retention
Data is retained only as long as necessary for enthrallment, security, and legal obligation. In practice, that means:
- Contact records — held while a conversation is active, plus 36 months from last interaction.
- Transaction records — held for the period required by tax and financial law in My jurisdiction.
- Behavioral telemetry — held for 36 months from last interaction, then irreversibly deleted.
After the retention window, data is not archived. It is destroyed. There is no cold storage where your patterns go to sleep. When it is gone, it is gone.
VI. Your Rights Under GDPR
If you are in the EU or UK, you hold the following rights over your data:
- Access (Art. 15) — request a copy of what I hold about you.
- Rectification (Art. 16) — request correction of anything inaccurate.
- Erasure (Art. 17) — request deletion, subject to legal retention obligations.
- Restriction (Art. 18) — request that I limit how I process your data.
- Portability (Art. 20) — receive your data in a structured, machine-readable format.
- Objection (Art. 21) — object to processing based on legitimate interests.
- Automated Decision-Making (Art. 22) — not applicable. I make all decisions personally.
To exercise any of these, email inquiries@hypnofindom.vip with the subject line "GDPR REQUEST". I respond within 30 days as required by Article 12(3). There is no fee unless a request is manifestly unfounded or repetitive.
You also have the right to lodge a complaint with your national Data Protection Authority. I would prefer you wrote to Me first, but the right stands regardless.
VII. Cookies & Tracking
This site uses strictly necessary cookies only — session management, security (Cloudflare Access), and functional preferences. No marketing cookies. No third-party tracking. No Facebook Pixel. No Google Analytics. No AI training scrapers.
Under Article 5(3) ePrivacy Directive 2002/58/EC, essential cookies do not require prior consent. By using the site, you acknowledge their necessity. There is no banner because there is nothing to consent to that is not already required for the site to function.
VIII. Third Parties
Very few. What I use:
- CCBill — for payment processing. Their privacy policy governs that flow.
- Cloudflare — for access control and abuse prevention. Session cookies only.
- My email provider — to send you service communications.
That is the entire list. If it ever changes, this page changes with it.
IX. Security
Access to this site is behind authentication. Payment is handled by a PCI-compliant processor. Communications are sent from a controlled, monitored environment. I take reasonable and proportionate steps to protect what you share with Me.
No system is impenetrable, and I will not pretend otherwise. If a breach affects your data, I will notify you as required by law — and I will tell you plainly what happened.
X. Children
This site is 18+ only. I do not knowingly collect data from anyone under the age of majority. If you believe a minor has accessed this site, write to Me immediately and I will act.
XI. Contact
For GDPR requests, privacy questions, data deletion, or anything that concerns what I hold about you:
Subject line "GDPR REQUEST" for anything covered by Chapter III of the GDPR. Anything else, use your own words.
I respond when I respond. Urgency is not a legal basis for processing.
By remaining on this site, you confirm that you have read, understood, and accepted this policy in full.