Privacy Policy

Last updated: 2026

Grison Press respects your privacy. We use first-party analytics and Google Analytics to understand how readers discover our books and which links they follow to retailers. Where permitted, we also use Meta's measurement tools to understand whether our advertising reaches interested readers.

What we collect

When you visit a page or follow one of our tracked links to a retailer, social profile, discussion community, or book promotion, our server may record a first-party analytics event containing:

  • the page visited, book, and timestamp;
  • referral parameters embedded in links from our ebooks and other campaigns (source, medium, placement), plus any other query parameters on the URL;
  • your IP address and country (as provided by Cloudflare);
  • browser, device type, and operating system, along with the full user-agent string;
  • the referring URL and your browser’s language preference;
  • Cloudflare request identifiers;
  • the request headers your browser sends;
  • a random visit identifier from a cookie, used to associate page views with retailer clicks.

We use general browsing analytics in aggregate to understand traffic and campaign performance. Separately, when someone voluntarily shares a personalized free-book invitation, the referral process described below can associate visits, outbound retailer clicks, or confirmed free-book signups with the reader who sent that invitation. We do not sell referral information, share it with advertisers, or fingerprint browsers.

Voluntary free-book referrals

Eligible marketing subscribers may receive a durable, public sharing link in future Grison Press email broadcasts. Each sharing link uses a random code associated with that subscriber's confirmed marketing-consent scope, not their email address or a download-access token. The link is safe to forward and stops resolving if the associated consent is revoked or the subscriber unsubscribes.

Confirmed free-story readers also receive channel-specific referral links for their novellas. We may record which channel is used, such as email, copied link, device Share menu, Facebook, Instagram, Reddit, or X. A public invitation can be forwarded without disclosing a subscriber's name, email address, or book-download credentials.

For downloadable free stories, if a friend signs up, we save which reader referred the signup and whether the friend's own email confirmation was completed. For temporary free Kindle campaigns, we also record visits to the public offer page, clicks toward Amazon, and taps on sharing, following, and discussion links. These are clicks, not verified social follows, sent emails, posts, or Kindle downloads. Existing subscriber records are not reassigned to another referrer, and sharing is never required to download or receive a book.

The shared link does not contain the referring reader's email address or private download token. The referrer does not get access to the friend's email address or subscription details. This attribution is visible only to Grison Press's authorized internal staff, so we can understand which sharing methods bring readers to our books. We suppress Meta Pixel and Google Analytics on pages that contain a personalized reader referral code, so those services do not receive the code through the page URL. If you intentionally share a reader-specific link through Facebook, Instagram, Reddit, or X, the platform may receive the public invitation URL and its random referral code to create the post or link preview. This code contains no email address or book-download credential, and sharing does not give the platform access to your subscriber record. You can request deletion of information connected to you through the contact options below.

Visitors in privacy-regulated regions

If Cloudflare identifies your connection as coming from the European Economic Area, the United Kingdom, or Switzerland, this site automatically reduces what it records: Google Analytics is not loaded, no analytics cookies are set, your IP address is truncated to a rough prefix, and raw request headers and user-agent strings are not stored. The aggregate event — the page visited, referral parameters, country, and general device type — is still recorded. Reader-linked next-book handoff cookies are not set for visitors in those regions.

Cookies

Depending on which services you use, this site may set these first-party cookies:

  • gp_vid — a random visit identifier used for analytics. Lasts 30 days.
  • gp_ref — records the referral parameters of the link you arrived on, so a later retailer click can be attributed to it. Lasts 7 days.
  • gp_lm_* — a download-authorization cookie set when you confirm a free-story signup, scoped to that story's pages. Lasts 30 days.
  • gp_finish_next_* — a path-limited continuation cookie used only after you explicitly report finishing a free novella, so clicking its suggested next book can be attributed to your acquisition. Lasts up to 1 hour and is deleted on the next-book action.
  • gp_next_book — an opaque, HttpOnly, site-only handoff identifier set only after you intentionally choose a suggested next book. For up to 30 minutes it lets us associate your click toward a bookstore with that same reading journey. It is not an access token and is not sent to Amazon.

None of these cookies track you across other websites, and none are shared with third parties.

Third parties

This site is delivered through Cloudflare and a reverse proxy for performance and security. Cloudflare may process IP addresses and request data as part of its service; see Cloudflare’s privacy policy for details. Where Google Analytics is loaded (visitors outside privacy-regulated regions), Google processes usage data under its own privacy policy. Mailing-list email is sent through our own delivery infrastructure; subscriber addresses are never sold or shared with advertisers.

Facebook and Instagram

In addition to the measurement described above and below, we operate a private internal application that manages Grison Press’s own Facebook Pages and Instagram professional accounts: publishing posts we have approved and reading aggregate engagement statistics (reach, views, reactions). It is not available to the public, no Meta user accounts are connected to it, and it does not collect or store Meta profile data about our visitors.

Data retention

Analytics events are retained indefinitely unless you ask us to delete data associated with you. If you use the contact form, we collect the name, email, inquiry type, and message you provide in order to reply; submissions are stored in the same private PostgreSQL database, are not used for advertising, and are not sold. If you join the mailing list, we store your email address and where you signed up so we can send release news; every email includes an unsubscribe link, and you can also write to us to be removed. If you email us directly, we use your address only to respond.

Advertising measurement (Meta)

Where permitted, this site loads the Meta Pixel and sends Meta a limited conversion event when a reader confirms a free-story signup. That measurement may share with Meta: a hashed (SHA-256) version of the email address you subscribed with, Meta's browser identifiers (_fbc/_fbp cookies and the fbclid click id from an ad link), your IP address and browser user-agent at signup, and the fact that a confirmation happened. Meta uses this to measure and optimize our advertising.

This measurement is never sent for visitors in privacy-regulated regions (EEA, UK, Switzerland): the Meta Pixel is not loaded, no Meta cookies are set by our integration, and no conversion event is sent to Meta. Meta does not receive our manuscript content, message text, account tokens, or analytics data beyond the event described above.

Your rights

You may contact us at [email protected] to ask questions about this policy, to request a copy of data associated with your visits, or to request its deletion. For step-by-step deletion instructions, see Your Data & Deletion Requests. To stop marketing email, use the unsubscribe link in any message — or manage per-topic preferences from the preferences link in each email. Visitors from the European Economic Area, United Kingdom, and other jurisdictions with data-protection laws may have additional rights, including the right to object to processing and to lodge a complaint with a supervisory authority.

Changes to this policy

If we change what we collect or how we use it, we will update this page and its “last updated” date. Significant changes to mailing-list processing are announced to subscribers by email.