Privacy

Short version: an email address if you subscribe, aggregate analytics that cannot identify you, and nothing else.

What we collect

Newsletter subscribers: Your email address, the date you confirmed, and whether you are still subscribed. Nothing else — no name, no location, no inferred interests.
Everyone else: Aggregate analytics: page views, referrer, approximate country, device class. This is not linked to an identity and cannot be used to single you out.
Server logs: IP address and user agent, retained for 30 days, used for abuse prevention and nothing else.

What we do not collect

No advertising cookies and no third-party ad trackers
No cross-site tracking pixels
No payment information — we never take a payment
No account, because there are no accounts

Embedded video

Video plays from YouTube. We use the youtube-nocookie domain and the thumbnail-until-click pattern, which means nothing is requested from YouTube and no cookie is set unless you press play. Once you do, YouTube's own privacy policy applies to that playback.

Your rights

Under GDPR and equivalent laws you can ask for a copy of everything we hold about you, ask for it to be corrected, or ask for it to be deleted. Email privacy@avengersuniverse.example and we will respond within 30 days.

For a newsletter subscriber, deletion is immediate and complete — there is no suppression list retaining your address afterwards.

Retention

Subscriber address — until you unsubscribe, then deleted
Unconfirmed signup — 14 days, then deleted
Server logs — 30 days
Aggregate analytics — 26 months, never identifying

Changes

If this policy changes materially, subscribers are emailed before it takes effect. The date at the bottom of this page is always the date of the current version.

Last updated 16 August 2026.

—Elsewhere