This website exists to share a book. It collects as little about you as possible, never sells it, and never uses it to follow you around the internet. This page explains what is collected, why, for how long, and how to change your mind.
It is written to meet Morocco’s Law No. 09-08 on the protection of individuals with regard to the processing of personal data, supervised by the CNDP, and the European Union’s General Data Protection Regulation (GDPR), for readers in Europe.
Who is responsible
The data controller is Mohamed Zerouali Omari, author of From the Ashes and the Snow, Casablanca, Morocco. For any question about your data, write to author@fromtheashesandthesnow.com.
[PLACEHOLDER — CNDP declaration or authorization number, once filed.]
What is collected, and why
If you join the readers’ list
- Your email address, to tell you when the book is out and to share occasional news about it (events, new editions, translations).
- The date and time you signed up and the version of the consent text you accepted, to prove that you agreed.
- A private unsubscribe code, so that every email can include a link that removes you in one step.
Legal basis: your consent (Law 09-08, article 4; GDPR, article 6(1)(a)). You can withdraw it at any time.
If you use the contact form
- Your name, email address, the subject you choose, and your message, only to read and answer it.
Legal basis: your consent and your request for an answer (GDPR, article 6(1)(a) and (b)).
To keep the site safe
- To stop automated spam, the server keeps a scrambled (salted hash) version of your IP address for up to one hour when you send a form. It cannot be turned back into your address and is deleted within 24 hours.
- Like every website, the hosting company records technical server logs (IP address, browser, pages requested, time) for security and to keep the site running. [PLACEHOLDER — hosting provider name and its log retention period.]
Legal basis: legitimate interest in keeping the site secure (GDPR, article 6(1)(f)).
Cookies
This site uses no tracking cookies: no analytics, no advertising, no social-media trackers, no fonts or scripts loaded from other companies.
One strictly necessary cookie, named ftas_sid, is set only if you start using one of the forms. It carries a security code that proves the form was sent from this site. It is limited to the form addresses, contains nothing about you, and is deleted when you close your browser. Because it is strictly necessary, it does not require a consent banner.
If visitor statistics are added one day, a privacy-friendly tool that uses no cookies and stores no personal data (for example Plausible Analytics) will be chosen, and this page will be updated first.
Who sees your data
Only the author. Your data is never sold, rented, or shared for marketing. It is processed by two technical providers, only as needed:
- the hosting company, where the list is stored in a private folder that cannot be reached from the web: [PLACEHOLDER — provider name and server country];
- the email service of the domain, which carries the messages.
If the readers’ list is later moved to a newsletter service (such as Brevo or Mailchimp), this page will be updated beforehand to name the service and where it stores data. If any provider is outside Morocco or the European Union, the transfer will rely on the safeguards required by law (for example, the European Commission’s standard contractual clauses, or the authorization of the CNDP).
Links to Kickstarter, Amazon, Instagram, and Facebook take you to those companies’ own sites, under their own privacy policies.
How long it is kept
- Readers’ list: until you unsubscribe. After that, the address is marked as unsubscribed so it is never written to again by mistake. On request, it is deleted completely.
- Contact messages: as long as needed to answer, and no more than 24 months.
- Anti-spam data: one hour, deleted within 24 hours.
How to unsubscribe
Every email includes a link that removes you in one step. You can also write to author@fromtheashesandthesnow.com with the word “unsubscribe”, and you will be removed by hand.
Your rights
You can ask at any time to see the data held about you, to correct it, to delete it, or to object to its use (Law 09-08, articles 7 to 9). Readers in Europe also have the right to restrict processing and to receive their data in a portable format (GDPR, articles 15 to 21). Write to author@fromtheashesandthesnow.com; you will receive an answer within 30 days.
If you believe your data has been mishandled, you can complain to the CNDP in Morocco (www.cndp.ma) or, in the European Union, to the data protection authority of your country.
Security
The site is served only over HTTPS. Forms are protected against forgery and spam. Personal data is stored outside the public part of the server, with access limited to the author.
Children
This site is meant for adult readers. It does not knowingly collect data from anyone under 16.
Changes to this policy
If this policy changes, the new version will be published here with a new date. If the change affects how your email address is used, you will be told by email before it applies.