Folklore Finder (“we”, EditionTree) respects your privacy. This notice explains what we collect and why. You do not need an account to use anything on this site, and we never ask for your name. The only place we ask for an email address is the optional contact field on the feedback form, and you can leave it blank.
Bug reports
If you submit a bug report, we collect: the text you write (the description and steps), the page address you were viewing, your browser’s user-agent string (which identifies your browser and operating system), and whether you are on a mobile or desktop device. We do not collect your name, email, account, or IP address. Please do not include personal details in the report text.
Why: our legitimate interest in diagnosing and fixing faults on the site. Retention: bug reports are automatically deleted 30 days after they have been actioned.
Legend submissions
If you submit a legend suggestion, we collect: the legend name, location, your brief description, and the source URL you provide. We do not collect your name, email, or IP address. Please do not include personal details in the submission text.
Why: our legitimate interest in expanding and improving the map’s content. Submissions are independently researched and verified before publication, so your text is never published directly. Retention: submissions are automatically deleted 30 days after they have been actioned (approved, rejected, or flagged).
Feedback
If you send feedback, we collect: the category you choose, the message you write, the address of the page you were on, and, where it applies, which legend or collection your feedback is about. There is also an optional contact email field. Leave it blank and we have no way to identify you. Fill it in and we will use it only to reply to you about that feedback, never for anything else.
Why: our legitimate interest in correcting mistakes and improving the site. Retention: feedback is deleted 30 days after we have actioned or rejected it, and in any case no later than 6 months after you send it.
Spam protection
The bug report, legend submission and feedback forms use Cloudflare Turnstile to block automated spam. Turnstile runs a check in the background to confirm you are a person rather than a script. The check runs when you open one of those forms, not when you arrive on the page, so it does not run at all unless you are actually about to send us something. It sets no cookies and does not track you across sites, but the check itself is processed by Cloudflare’s infrastructure. See Cloudflare’s privacy policy for details.
Analytics
Two separate things are counted here, and they work differently.
Cloudflare Web Analytics tells us which pages are viewed and what type of device you are using. It sets no cookies, collects no personal data, and does not track individual visitors. See Cloudflare’s privacy policy for details.
Our own usage events. The site also records a small number of events in our own database: opening a legend page, viewing a collection or a period, unlocking an achievement or making progress towards one, following a link to our Ko-fi page, and sending feedback. Each event stores what happened, which legend or collection it relates to, and the path of the page you were on. It does not store the full web address, your IP address, or anything you typed.
Each event also carries a random session identifier. It is generated in your browser, it lasts only for the current browsing session, and it is not linked to you, to your device, or to any account. Close the tab and it is gone; your next visit generates a new one. We use it only to tell one visit apart from another, so that ten pages opened by one person are not counted as ten people.
Why: our legitimate interest in understanding which entries people actually read, so we know what to research, correct and expand. Retention: usage events are deleted after 30 days.
Security monitoring
The site tells your browser which sources it is allowed to load code, images and fonts from. When something breaks that rule, your browser sends us a short report so we can find the fault. We record the path of the page, which rule was broken, and the address of whatever was blocked. We do not record who you are, your IP address, your browser, or anything you typed, and the page address is reduced to its path before it is stored, so these reports cannot show what you searched for.
Why: our legitimate interest in keeping the site secure and working correctly. Retention: these reports are deleted 90 days after we last see them.
Cookies & local storage
This site sets no tracking cookies. To make it work the way you expect, we store a few small things in your browser’s own storage, on your device: your saved legends, which legends you have opened, your progress through collections and Explorer Seals, and your choice of the day or dusk map view. All of it stays on your device and is never sent to us, which is why your archive does not follow you to another browser or another computer. You can clear it at any time through your browser, and doing so resets that progress.
Location
The “Find folklore near me” button asks your browser for your device’s location, using your browser’s own location permission prompt. If you allow it, your coordinates are used only inside your browser to work out the nearest legend on the map. They are never sent to us or stored anywhere. If you decline, or your browser or device does not support location, we show a short message with a link to the map instead.
Who processes your data
The site is hosted on Cloudflare Pages. Bug reports, legend submissions, feedback, usage events and security reports are all stored using Supabase, our database provider. Page analytics is provided by Cloudflare Web Analytics. Spam protection on the bug report, legend submission and feedback forms is provided by Cloudflare Turnstile. These providers act as our data processors.
International transfers
Our processors (Supabase and Cloudflare) may store or process data on servers outside the United Kingdom. Where data is transferred outside the UK, it is protected by appropriate safeguards, such as the UK’s International Data Transfer Agreement (or the UK addendum to the EU Standard Contractual Clauses) or a finding of adequacy, as required by UK data protection law.
Your rights
Under UK data protection law you have the right to access the personal data we hold about you, and to ask us to rectify it, erase it, or restrict how we use it. Because we rely on legitimate interests (see above), you also have the right to object to our processing at any time. We will respond without undue delay. Bug reports, legend submissions and usage events are anonymous, and so is feedback unless you chose to give us an email address, so please describe what you sent and roughly when, and we will find it. If you did give an email address, quoting it is the fastest way for us to locate your feedback.
If you are unhappy with how we handle your data, you have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk/make-a-complaint.
Contact
For any privacy question, or to exercise your rights, contact us at: hello@folklorefinder.uk
← Back to the map