Skip to content

Privacy Policy

Original document

LAST VERIFIED 2026-10-01

ATTENTION POINTS · 14 TO CHECK · HEURISTIC, NOT LEGAL ADVICE

GDPR / UK-GDPR

5/13 ADDRESSED
  • Who controls your data (identity & contact of the data controller)GDPR Art. 13(1)(a)
  • Data Protection Officer contactGDPR Art. 13(1)(b)
  • The legal basis for using your dataGDPR Art. 13(1)(c)
  • International transfers and their safeguardsGDPR Art. 13(1)(f) / 46
  • The right to withdraw consent (where consent is the basis)GDPR Art. 13(2)(c)
  • The right to complain to a supervisory authority (e.g. the ICO)GDPR Art. 13(2)(d)
  • Whether providing your data is required, and what happens if you don'tGDPR Art. 13(2)(e)
  • Where your data was obtained, if not collected from you (source)GDPR Art. 14(2)(f)

CCPA / CPRA

4/10 ADDRESSED
  • The categories of sources the data comes fromCCPA §1798.110(c)
  • Categories of third parties data is shared/sold toCCPA §1798.115
  • A 'Do Not Sell or Share My Personal Information' option (if it sells/shares)CCPA §1798.135(a)
  • A 'Limit the Use of My Sensitive Personal Information' option (CPRA)CPRA §1798.135(a)
  • Your CCPA rights (know, delete, correct, opt-out, limit, non-discrimination)CCPA §§1798.100–125
  • At least two ways to submit a request, plus a contactCCPA §1798.130

The Archive of Our Own (AO3) is a project of the Organization for Transformative Works (OTW), which is committed to fan privacy. AO3 exists to host content by and for fans from all over the world. To do so, we process certain data and information, including Personal Information. This is so that we can: - Host or share your fanworks - Show you works by other people - Enable you to post comments, kudos, bookmarks, and other information designed to be seen by other users This…

Show full text