Effective date: October 6, 2026
Operated by: Royal Decree

This policy covers this website (the “Site”). It describes what we actually collect, which is deliberately little, and what happens to it. It should be read together with the Terms of Use.

What we collect

• Signup forms: an email address and/or Signal username (at least one is required), and optionally a ZIP code and how you’d like to help. That’s the whole record.
• Event RSVPs: an email address and/or Signal username, and which event you’re registering for. Some events take registrations on the host’s own platform instead; when a listing sends you there, that platform collects your details under its own privacy policy, not us.
• Contact messages: your message, a subject, an email address and/or Signal username, and optionally your name.
• Content submissions (Submit page): the submission itself (its type, an optional title, the text, and an optional image), plus the name or alias and optional email address you give for credit and follow-up. If we publish it, the text, image, and the name or alias become public; the email address never does.
• Comments: if you comment on a blog post, the name and email you enter with it (standard WordPress commenting).
• Anti-spam: form endpoints briefly rate-limit by a hashed form of your IP address. The hash expires within ten minutes and is never stored with your submission.
• Protection against attacks: a shield in front of the Site watches for automated abuse. Its logs record a hashed form of visitors’ IP addresses, not the addresses themselves.

We do not collect payment information (donations happen entirely on external providers’ sites), account registrations from the public, or dates of birth. The royalty calculator runs in your browser; the income you type into it is never sent to us. If you use “find my nearest chapter” and allow it, your browser’s location is used on your device to sort the list and is not sent to us either. You must be 16 or older to submit any form; we do not knowingly collect personal information from anyone under 16.

What we use it for

Organizing. Signups are used to contact you about our events and campaigns; RSVPs are used to plan and coordinate the event you registered for; contact messages are used to reply to you; content submissions are reviewed and, if chosen, published with the credit you asked for. Submission data is never used for advertising, never enriched with outside data, and never sold, rented, or traded.

Where it lives and who can see it

• Submissions are stored privately on the Site. They are not published (except a content submission we choose to feature, as described above) and are excluded from search.
• Access is limited to the Site’s administrators and organizers who have been individually granted access. Under the Terms of Use, those organizers may use your data only for organizing purposes and must honor deletion requests.
• When a form is submitted, organizers may be notified in a private, end-to-end-encrypted Signal group so they can respond or plan attendance. That notice may include the details you submitted.
• We disclose personal data to third parties only if legally compelled to, and where lawful we will attempt to notify affected people before complying.

Cookies and tracking

The Site runs no third-party analytics, advertising pixels, or tracking scripts, and its fonts are served from the Site itself. The only cookies set are functional: standard WordPress cookies for logged-in editors and comment authors, a session cookie if you unlock the private links page, and, if the shield ever asks your browser to complete an automatic check during an attack, a cookie that remembers you passed.

A few things on the Site come from elsewhere. Event pages embed a venue map from OpenStreetMap, and social feed previews may load images directly from the platform they came from (for example, Bluesky or Reddit); in both cases your browser contacts that service, which sees your IP address. External sites you click through to (donation processors, event-registration platforms, social platforms, petition hosts) set their own cookies under their own privacy policies.

Retention

Submission records are kept for as long as they are useful for organizing, and deleted when you ask. Comments and published submissions stay on the Site until removed.

Your rights

You can ask what we hold about you, ask us to correct it, or ask us to delete it, regardless of where you live. That includes asking us to take down a submission we published or to change the name it is credited to. Write to hismajesty@nokings.lol. Depending on your jurisdiction (for example, the GDPR in Europe or state privacy laws in the U.S.), you may have additional statutory rights; we honor the requests above for everyone, so you rarely need to invoke them.

Security

Submission records are private, access-controlled, and visible only to granted organizers. The private-links password is stored hashed, never in plaintext. If we learn of a breach affecting your personal data, we will notify affected people and, where required, regulators. Report suspected vulnerabilities or data exposure to hismajesty@nokings.lol.

Changes and contact

If this policy changes materially, we will announce it on the Site with a new effective date. Questions: hismajesty@nokings.lol.