Updated 23 September 2026
Privacy policy
Úlfarr Publishing, an imprint of NOXX 75 EOOD, is responsible for the personal information collected through this website. Contact us at info@ulfarr.com about your information or this policy.
When you request a free guide
We use the email address you provide to send the PDF you requested: either The Publishing Chain Setup or The 4-Week Stōneheart Daily Foundation. We record the address, request time, requested guide and whether our email service accepted the message, so we can handle delivery questions. The Daily Foundation email also contains a private download link that works for seven days. Anyone you share that link with can use it.
Submitting the form asks us to send that requested message. Requesting a guide does not, by itself, subscribe you to promotional emails. Without an email address, we cannot deliver the guide through this service.
Free publishing-system updates
When we release an updated version of a Publishing Chain part you have received, including free Setup, we use your delivery email address and part records to send the new version free of charge. These are updates to your existing guides, not a separate promotional subscription. Email info@ulfarr.com if you want to stop update emails or change your delivery address.
Optional Publishing Chain tips
The Setup form has a separate, unchecked option for three emails with practical publishing tips and guidance on choosing your next part. If you request them, we send a confirmation link. Only pressing the confirmation button starts the sequence, scheduled over nine days. Setup delivery, purchases, free support and product updates do not depend on subscribing.
We record your email, the consent wording version, request and confirmation dates, any withdrawal, and message scheduling references. You can unsubscribe through any tip email or email info@ulfarr.com. We cancel remaining scheduled tips when you unsubscribe. Purchase records may help us avoid an unnecessary complete-package invitation. We rely on your consent for these optional emails.
Optional book updates
The Daily Foundation form has an optional, unchecked choice for occasional emails about Úlfarr books and new reader guides. If you select it, the delivery email includes a link where you can confirm that choice. Your subscription starts only when you press the confirmation button. The PDF is free whether or not you subscribe.
We rely on your consent for these updates and record the wording version, request time, confirmation time and any withdrawal. You can withdraw at any time using the unsubscribe option on your email link, or by emailing info@ulfarr.com. Withdrawal does not affect processing that has already taken place. We do not treat unconfirmed requests as permission to send promotional emails.
Publishing Chain reviews
When you submit a review, we collect your chosen public name, private email address, product, rating, title, text, review date and publication permission. We email a confirmation link and check the submission before publication. Reviews received separately can be entered by our team with your permission. For these manual reviews, you may ask us to leave your email address out of the review record; no email address is then stored with the review. These reviews are identified as shared with permission. Do not include an email address in the review or permission text if you do not want it stored. Your email address and our private permission and moderation records are not displayed publicly.
We use your permission to publish the review. Published reviews contribute to the displayed average and rating distribution for the relevant product. Review submissions do not subscribe you to marketing emails.
We retain a review and its permission record while it is published. If you ask us to withdraw it, we remove it from public display and ratings. A private record remains for moderation, disputes and any applicable legal obligations; you may request correction or deletion by emailing info@ulfarr.com. Unconfirmed submissions remain private until confirmed or removed by the team. Confirmation links expire after seven days. We use hashed email and connection information to limit abusive submissions.
Website security and enquiries
Our hosting services process technical connection information, including IP addresses, to deliver and protect the website. The delivery service uses hashed IP and email values to limit repeated requests. These limits help prevent abuse and protect email delivery for other visitors.
If you contact us, we process the information in your message to respond. Our legitimate interests are operating a secure website and dealing with enquiries; where your enquiry concerns buying a service, we also use it to take the steps you request before entering a contract.
Service providers
The website uses OpenAI Sites and Cloudflare for hosting and storage, Resend to deliver requested emails, and Shopify for checkout and payment processing. Email sent to our contact address is handled through one.com. These providers process information needed to operate their services. They operate internationally, and processing may take place outside your country. Contact us for information about the providers and applicable transfer arrangements.
We do not sell your personal information. If you follow an Amazon, Goodreads or social-media link, you leave our website and that service’s own privacy practices apply.
Retention
Delivery-only and unconfirmed Daily Foundation requests are kept for up to 30 days. Accepted Publishing Chain Setup requests retain the email address, requested guide and delivery date while we provide free updates, or until you ask us to stop. Temporary Setup mail payloads are removed after 30 days. Confirmed book-update consent is kept for up to two years from confirmation, or until you withdraw; withdrawn records are removed after 30 days. Older records are removed during routine processing of new requests. Request-limit records older than seven days are removed in the same way. You can ask for earlier deletion by email. Our service providers may retain separate operational records under their own retention policies.
Optional Publishing Chain tip records and message payloads are removed after 90 days, during routine processing of new requests. Unconfirmed requests are removed after 30 days. Our email provider may retain separate delivery records under its own retention policy.
Correspondence is retained while needed to deal with your enquiry and any related legal obligations.
Cookies and measurement
We count public-page views, free-Setup clicks, successful form responses and purchase-link clicks in daily totals. We store the page category, an allowlisted campaign-source label, a campaign code that we have registered and the count, grouped by calendar day in Europe/Brussels. We do not store visitor identifiers, full referring URLs, email addresses or browsing histories with these totals, and do not use advertising pixels or visitor identifiers for this measurement. A preference cookie can exclude a browser from measurement for one year. It does not identify a visitor. Signed-in site administrators are excluded, and opening ControlTower, our private management dashboard, enables that preference for their browser. We honor Do Not Track and Global Privacy Control signals. Totals are retained for up to 180 days. Daily salted IP hashes are used only to limit abusive measurement requests, and are removed after seven days during routine processing.
Our private reporting also compares existing delivery and confirmed-purchase records to count how many Setup recipients later purchased. The private dashboard also compares daily orders, delivery confirmations and campaign dates. Campaign page counts do not prove which campaign caused a purchase. Known internal test addresses are excluded by default from sales reporting. This does not create an advertising profile or share purchase identities with advertising networks.
Hosting and sign-in services may use essential cookies for security and access. Public pages and free-guide forms do not require a ChatGPT account. The private workspace requires sign-in.
Your rights
Depending on the applicable law, you can request access, correction, deletion, restriction or portability of your information, and object to processing based on legitimate interests. You may also complain to your data protection authority. Email info@ulfarr.com to make a request. We may need to confirm your identity before acting on it.
Paid purchases
Publishing-system purchases are processed through Shopify. We use your name, email address, order references, purchased parts, payment status and paid amounts to provide checkout access, deliver your files, calculate the price of missing parts when you complete your series, prevent duplicate purchases and help with your order. The purchase email address connects your orders; we do not read your mailbox. We keep purchase and delivery records while needed to provide access, free part updates and support and meet applicable accounting and legal obligations.
Payment details are entered in Shopify’s checkout. Our website does not collect or store full card numbers or card security codes. Shopify and its payment partners handle payment processing under their own privacy terms. Read Shopify’s consumer privacy policy for details.
Private purchase links expire after 30 minutes. The site stores an active access token in your browser session so you can return to your purchase; it is not an advertising identifier. A short-lived essential cookie helps return you from the Shopify storefront to your publishing-system purchase. Purchase and delivery emails are part of the requested service and do not subscribe you to a separate marketing list.