Penwick - Privacy policy

This policy explains how Penwick (https://penwick.ink) and the phpBB software use and protect the information collected while you use the site. Penwick is a volunteer-run, non-commercial community hosted in New York, United States, and subject to U.S. federal law and the laws of the State of New York.

Penwick does not sell, share, or exploit user data. We collect only what is strictly required for the operation and security of the forum.


1. What Data We Collect
Technical Data

phpBB automatically stores:
  • A user identifier cookie (user-id)
  • A session identifier cookie (session-id)
  • A read-tracking cookie that remembers which topics you have viewed
The server also logs IP addresses when you browse or post. This is required for security, spam prevention, detecting multi-accounts, and complying with Dutch/EU legal obligations related to illegal content.

No advertising or tracking cookies are used.

Account Data

To create an account, you must provide:
  • Your username (a fictional character name)
  • Your email address
  • Your password
  • Any posts and messages you make
Anything else you add (posts, messages, profile fields) is voluntary.
Your password is stored as a one-way hash and cannot be read by administrators. The “Forgot Password” tool allows resets.

2. How We Use Your Data
Your data is used only to:
  • Operate and secure the forum
  • Maintain your account
  • Provide essential notifications
  • Enforce moderation and prevent abuse
  • Comply with applicable U.S. and New York laws
    Your email and IP address are visible only to administrators.
    We do not share your data with phpBB Limited or any external entity.

3. Data Security
We use HTTPS, keep server software updated, and apply standard security practices.
No system is perfectly secure, but we minimize data collection to reduce risk.

4. Your GDPR Rights
You may request:
  • Access to your data
  • Correction or deletion
  • A data export
  • Limitation or objection to processing
To do so, contact a site administrator.
Account deletion removes your account data, but your posts may remain to preserve roleplay threads.

Last Updated: December 18, 2025