Privacy at a glance: Malfoid is an independent fan archive. We do not require accounts or user registration. We collect email addresses only if you voluntarily subscribe to our newsletter via Resend. We do not sell your personal data. We support granular cookie consent (Google Consent Mode v2), and you can adjust your cookie settings at any time.

Last updated: October 4, 2026

1. Overview & Who We Are

Malfoid (https://malfoid.co) is an independent fan-made cultural documentation project and curated art archive tracking the female Draco Malfoy (“Malfoid”) internet phenomenon. This Privacy Policy explains what personal information we collect, how we process it, the third-party services we utilize, and the choices available to you.

If you have questions regarding this policy or wish to exercise your data rights, please contact us at [email protected].

2. Information You Provide Directly

You can browse the overwhelming majority of Malfoid freely without providing any personal information. We do not operate user accounts, public user comments, or user-uploaded art repositories.

Email Newsletter Subscriptions

If you choose to subscribe to our Malfoid Art Radar email updates via our subscription form, we collect:

  • Email address: Provided voluntarily by you to receive editorial digests, curated artwork highlights, and site updates.

Data Processor: We use Resend Inc. as our third-party email delivery processor. Your email address is securely transmitted and stored on Resend's infrastructure to send notifications. Resend processes data in accordance with their privacy policy and industry-standard security protocols.

Retention & Unsubscribing: We retain your email address only for as long as you maintain an active subscription. Every email sent includes an immediate, one-click Unsubscribe link in the footer. You can also request removal at any time by emailing [email protected], upon which your address will be permanently purged from our mailing list.

3. Cookies and Automated Tracking Technologies

Like most websites, Malfoid and our third-party partners may use cookies, web beacons, device identifiers, and similar technologies to collect information about your browser, device, and browsing actions.

4. Google Analytics 4 (GA4)

We use Google Analytics 4 (measurement ID G-3272Q0GQM2) to assess audience engagement and optimize our content hierarchy. Google Analytics uses first-party cookies (such as _ga and _ga_*) to distinguish unique visitors and measure page sessions.

GA4 collects aggregated metrics, including pages visited, session duration, approximate geographic region (country and city derived from masked IP addresses), browser type, and referring URLs. Google does not log or store full IP addresses in GA4. Learn more at Google Analytics Data Privacy & Security and Google Analytics Cookie Usage.

5. Advertising: Google AdSense & Adsterra

To support ongoing server hosting, archive maintenance, and research costs, Malfoid displays third-party advertisements.

Google AdSense Required Disclosures

  • Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites on the internet.
  • Google's use of advertising cookies enables it and its partners to serve ads to our users based on their visits to Malfoid and/or other sites across the internet.
  • Users may opt out of personalized advertising by visiting Google Ads Settings. Alternatively, you can opt out of a third-party vendor's use of cookies for personalized advertising by visiting www.aboutads.info or Your Online Choices (EEA & UK).

Adsterra

Selected pages may display banner ads served by Adsterra. Loading an ad unit connects your browser to Adsterra's ad delivery network, which may use cookies or device identifiers to serve, target, and measure impressions. For information on Adsterra's practices and opt-out options, see Adsterra Privacy Policy and Adsterra Cookie Policy.

6. Consent Management Platform (CMP) & Consent Mode v2

Malfoid implements Google Consent Mode v2. By default, when a visitor from regions requiring prior consent (such as the European Economic Area, the United Kingdom, and Switzerland) arrives on the site, advertising and analytics storage tags are set to denied until explicit, affirmative consent is granted.

For users in the EEA, UK, and Switzerland, advertising partners require a Google-certified Consent Management Platform (CMP) adhering to the IAB Europe Transparency and Consent Framework (TCF v2.2). Our site integrates certified consent messaging to present standardized choices regarding advertising vendors, personal data processing, and legitimate interest objections.

You can modify, grant, or revoke your consent at any time using our on-site consent controls:

7. Embedded Games & External Links

Our playable visual novel page (/game) embeds a fan game hosted on itch.io via an iframe. Interacting with or loading the game embeds content from itch.io, which may receive your IP address, browser technical information, and set its own session cookies according to the itch.io Privacy Policy.

Malfoid contains links to third-party social networks (X, Pixiv, Reddit, Bluesky, FanFiction.net). When you follow an external link, the privacy policies of those destination sites govern your activity.

8. Your Rights Under GDPR & UK Data Protection

If you reside in the European Economic Area (EEA) or the United Kingdom, you have rights under Regulation (EU) 2016/679 (GDPR) and the UK Data Protection Act 2018:

  • Legal Bases for Processing: We process email addresses for newsletters based on your explicit Consent (Art. 6(1)(a)). We process essential cookies and security logs based on our Legitimate Interests (Art. 6(1)(f)) in protecting and operating the website. Analytics and marketing cookies are processed strictly upon your Consent.
  • Right of Access & Portability: You may request copies of personal data we hold about you.
  • Right to Rectification & Erasure: You can ask us to correct inaccurate data or delete your personal information (“right to be forgotten”).
  • Right to Restrict or Object: You can object to processing based on legitimate interests or request restricted handling.
  • Right to Withdraw Consent: You have the unconditional right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
  • Supervisory Authority: You have the right to lodge a complaint with an EU data protection authority or the UK Information Commissioner's Office (ICO).

To exercise any of these rights, please email us at [email protected]. We respond to all verified requests within 30 days free of charge.

9. California Privacy Rights (CCPA / CPRA)

Under the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (CCPA/CPRA), California residents are entitled to specific disclosures:

  • Categories Collected in the Preceding 12 Months:
    • Identifiers: Email address (only if you subscribe to our newsletter), IP address, and browser cookies.
    • Internet / Electronic Network Activity: Pages visited, interaction data, referral sources, and device characteristics collected via analytics and advertising partners.
  • Sale or Sharing of Personal Information: We do not sell your personal information for monetary compensation. However, allowing third-party ad networks (such as Google AdSense and Adsterra) to place cookies for targeted advertising may be categorized as “sharing” under California law. You may opt out of this sharing via our Cookie Preferences or by enabling Global Privacy Control (GPC) in your browser.
  • Your Rights: California residents have the right to know what personal data is collected, the right to delete personal information, the right to correct inaccurate personal data, and the right to non-discrimination for exercising these privacy rights.

To submit a CCPA/CPRA request, email [email protected] with “California Privacy Request” in the subject line.

10. Children's Privacy (COPPA)

Malfoid is an informational archive and cultural guide designed for general audiences aged 13 and older (or 16 and older in the EEA/UK). Because Harry Potter–related fandom content appeals to diverse age groups, we take children's privacy seriously:

COPPA Notice: We do not knowingly solicit or collect personal information from children under the age of 13. If you are a parent or legal guardian and believe that your child under 13 has provided us with personal information (such as subscribing to our newsletter), please notify us immediately at [email protected]. We will promptly delete such records from our databases.

11. Security and Retention

We implement reasonable technical and organizational safeguards to protect collected data against unauthorized access, loss, alteration, or disclosure. All web traffic to Malfoid is encrypted in transit using Transport Layer Security (TLS/HTTPS). Newsletter subscriber data is securely stored within Resend's SOC 2-compliant infrastructure.

12. Policy Updates

We may periodically update this Privacy Policy to reflect modifications to our tools, legal requirements, or operational changes. When modifications are made, the revised policy will be posted on this page with an updated “Last updated” timestamp.

13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal information, contact our privacy contact at:

Email: [email protected]

See also our About page, Contact directory, and Disclaimer & DMCA Policy.