Penwick - Privacy policy
This policy explains how Penwick (https://penwick.ink) and the phpBB software use and protect the information collected while you use the site. Penwick is a volunteer-run, non-commercial community hosted in New York, United States, and subject to U.S. federal law and the laws of the State of New York.
Penwick does not sell, share, or exploit user data. We collect only what is strictly required for the operation and security of the forum.
1. What Data We Collect
Technical Data
phpBB automatically stores:
No advertising or tracking cookies are used.
Account Data
To create an account, you must provide:
Your password is stored as a one-way hash and cannot be read by administrators. The “Forgot Password” tool allows resets.
2. How We Use Your Data
Your data is used only to:
3. Data Security
We use HTTPS, keep server software updated, and apply standard security practices.
No system is perfectly secure, but we minimize data collection to reduce risk.
4. Your GDPR Rights
You may request:
Account deletion removes your account data, but your posts may remain to preserve roleplay threads.
Penwick does not sell, share, or exploit user data. We collect only what is strictly required for the operation and security of the forum.
1. What Data We Collect
Technical Data
phpBB automatically stores:
- A user identifier cookie (user-id)
- A session identifier cookie (session-id)
- A read-tracking cookie that remembers which topics you have viewed
No advertising or tracking cookies are used.
Account Data
To create an account, you must provide:
- Your username (a fictional character name)
- Your email address
- Your password
- Any posts and messages you make
Your password is stored as a one-way hash and cannot be read by administrators. The “Forgot Password” tool allows resets.
2. How We Use Your Data
Your data is used only to:
- Operate and secure the forum
- Maintain your account
- Provide essential notifications
- Enforce moderation and prevent abuse
- Comply with applicable U.S. and New York laws
Your email and IP address are visible only to administrators.
We do not share your data with phpBB Limited or any external entity.
3. Data Security
We use HTTPS, keep server software updated, and apply standard security practices.
No system is perfectly secure, but we minimize data collection to reduce risk.
4. Your GDPR Rights
You may request:
- Access to your data
- Correction or deletion
- A data export
- Limitation or objection to processing
Account deletion removes your account data, but your posts may remain to preserve roleplay threads.
Last Updated: December 18, 2025