LIFE TAUGHT ME · YOUR STORY, YOUR CHOICES

Privacy & publication

Policy edition: September 2026 · LTM 0.11

This notice explains how INGOAMPT handles information in the Life Taught Me public album. It also describes the privacy principles for a planned iOS companion. An iOS app is not being launched by this notice; its actual features, providers and disclosures must be confirmed before release. This supplements the wider INGOAMPT website privacy policy.

1. Who is responsible?

The controller is DI Pegah Tafvizi — INGOAMPT, . For privacy questions, rights requests, safety concerns or removal requests, email ingoampt@yahoo.com. Include the public story URL where relevant, but do not put a private editing link into a public comment or social post.

2. Information we collect

• Public contribution: your selected or custom question, story text, title, public name, optional family name, optional social or LinkedIn URL, chosen photo/video/audio, publication date and edits.
• Optional private contact: an email address, if you choose to provide one, for necessary correspondence about the contribution or your request. It does not subscribe you to a mailing list, verify your identity or give someone editing access.
• Editing access and choices: a random browser/contributor identifier, protected session records, hashed editing secrets, privacy-notice version, publication choices, optional study choice, timestamps and a content hash.
• Interactions and safety: Agree/Disagree choices, older appreciation reactions, reports, hidden-storyteller preferences and necessary security/rate-limit information. Agreement totals are public; individual voters’ names and contact details are not displayed.
• Technical information: hosting and security systems may receive IP addresses, request times, browser/device information, requested URLs and error information needed to deliver and protect the service. Other website services are explained in the wider policy and any cookie choices.

Information comes from your submission, your device and your use of the service. Browsing needs no WordPress account. The form requires a public name, a topic/question, story text and the publication confirmations; surname, contact email, links and uploads are optional. Reading does not require publication consent.

3. What public means

Anyone, anywhere may read, download, copy, link to or share a published story and its media. Search engines and social networks may index or preview it. A story can appear alongside advertising without making its author an advertiser or endorser. Sharing does not prove that an experience is accurate: names and profiles are contributor-supplied, not independently verified identities.

Only publish information you are comfortable making public. Remove confidential material, identifying details about children and other people’s private information. Do not make allegations of offences, diagnoses or harmful claims about identifiable people. If you choose to disclose your own sensitive information—such as health, religion, political beliefs, ethnic origin, union membership, genetic or identifying biometric information, sex life or sexual orientation—use the separate explicit-publication consent in the form. It does not authorise disclosure of another person’s sensitive information.

4. Why we use information and our legal bases

• Publish the contribution you choose to share: your consent under GDPR Article 6(1)(a), and separate explicit consent under Article 9(2)(a) when you disclose your own sensitive information. Withdrawing publication is possible by deleting the story.
• Provide requested functionality: creating editing access, saving edits, handling chosen media and recording a requested Agree/Disagree response are necessary to provide those services, under Article 6(1)(b). Names may be chosen public names, rather than legal names.
• Protect and maintain the service: proportionate abuse prevention, reports, troubleshooting and security use our legitimate interests under Article 6(1)(f). You can object to legitimate-interest processing.
• Legal duties and requests: we use necessary information to demonstrate choices, respond to applicable rights requests and meet legal obligations under Article 6(1)(c). Optional email is used for requested support or necessary contribution-related contact, not unsolicited marketing.

We do not make solely automated decisions about you that produce legal or similarly significant effects. Aggregate counts, such as posts and responses, are not a scientific survey or a count of verified individual people. A browser identity can have one current Agree or Disagree choice per story; it can change or remove that choice. Other browsers or cleared cookies can create a different identity.

5. Possible data analysis and academic research

Public life lessons and stories may be considered for future statistical or academic research, including a possible PhD about life experiences. We may examine non-identifying service totals. However, a public story can still contain personal information: removing a name does not necessarily anonymise a distinctive experience.

This notice and the publication checkbox do not grant blanket permission for future research. Before research using personal story data begins, we will identify the purpose, researchers/recipients, relevant information, retention, safeguards and appropriate lawful basis, and provide the necessary participant information. Where relying on consent, we will request a separate, voluntary research choice that can be refused without preventing publication. Any required institutional or ethics review must also take place.

No study is enabled merely by installing this plugin or publishing this page. If an optional study is offered, its specific information appears beside a separate, initially unticked choice in the story form. The plugin’s standard study option is limited to consenting adults’ text and topic, excludes names, emails, profile links, media, sensitive and third-party personal information, and permits only non-identifying aggregate findings. Researchers must review and minimise records before use. Earlier contributors are not automatically enrolled.

You can withdraw a study choice in the private editor without deleting the public story, or contact us. Consent withdrawal stops further consent-based use and does not make earlier lawful processing unlawful. Genuinely anonymous results that cannot be linked back to a person cannot be retrieved by identity. Selling a personal-story dataset, AI model training, identifiable research quotations, advertising endorsements or unrelated future uses are not authorised by the publication checkbox. A new purpose needs further assessment, information and any required permission.

6. Service providers, recipients and international access

The website is hosted using HostGator. Authorised website staff and service providers may access information needed for hosting, databases, backups, technical support, security and maintenance. Correspondence sent to the contact address is also processed by its email provider. Legal advisers or authorities may receive information where lawfully necessary. We require providers receiving personal information to protect it appropriately and use it only as authorised.

Public readers and the social services you choose receive the public information you share. Selecting a social link opens that service under its own policies. The plugin does not post to social accounts automatically or load a social tracking SDK merely to show its share buttons. Downloadable sharing cards are generated on your device.

Public content is accessible globally. Hosting, email or other providers may process information outside your country or the EEA/UK. Where transfer restrictions apply, a valid mechanism and necessary safeguards must cover the transfer, such as an applicable adequacy decision or approved contractual safeguards with supplementary measures where needed. Contact us for the current processing countries, recipients and applicable safeguards or a copy. Public publication consent is not a substitute for required safeguards for private hosting records.

7. Advertising, AdSense, cookies and your choices

INGOAMPT may display Google AdSense or other advertising on the website, and a future app may include an advertising service. Advertising providers may use cookies, device or advertising identifiers, IP addresses, ad interactions and usage information to deliver or measure ads and, if permitted, personalise them. Actual vendors, purposes and choices must be described in the website/app’s current advertising notice and consent controls before the relevant processing begins.

Agreeing to publish a lesson is not agreeing to personalised ads or tracking. Optional advertising/analytics technologies require their own controls and any consent or opt-out required in your location. Refusing optional tracking must not prevent you from submitting a story. You can change advertising choices through the website/app’s advertising or cookie controls, when those services are active, and contact us for assistance. Google explains its partner-service processing at How Google uses information from sites or apps that use its services.

The album’s essential cookies support requested editing access, responses and protection against forged requests. They are not an advertising-consent mechanism. For Google advertising in the EEA, UK or Switzerland, the operator must use the consent-management arrangements required by Google and applicable law; this privacy page alone does not configure them. Likewise, browser Global Privacy Control signals must be honoured where required. A general “Do Not Track” setting is not the same as GPC.

The album plugin itself does not install an ad/analytics SDK or sell its story records to advertisers. This does not establish whether separate website advertising amounts to “sale”, “sharing” or targeted advertising under a particular US law. Applicable opt-outs, including “Do Not Sell or Share My Personal Information”, must cover those actual services. You can contact the privacy address with that request; any required online preference control must also be provided. We do not use sensitive story content or private contact email to target advertising.

8. Retention and deletion

A contribution normally stays public until you delete it, the operator removes it or the service closes. Current contact fields and consent records are linked to the story; earlier consent events document its changes. Deleting through the private editor removes the live story and its attached uploads managed by the plugin, including replaced attachments belonging to that story. Any separately retained legal-claim records must be necessary, access-restricted and kept only for the applicable purpose and period.

Browser editing sessions last up to 90 days. Legacy verified-email recovery sessions last seven days and recovery codes expire after ten minutes. A private story editing link remains usable until it is replaced or its story is deleted. “Forget this browser” ends browser access; it is not deletion of the published story or every associated database record. Unused contributor records require periodic cleanup. Agree/Disagree choices remain until removed, the story is deleted or the relevant identity’s records are erased.

Operational logs, reports, support correspondence and backups are kept only for the periods needed for security, troubleshooting, resolving requests, recovery and applicable obligations. Retention is assessed by purpose, incident status, backup rotation and statutory requirements; the operator must maintain and enforce those schedules with providers. Ask us for the current schedule for a particular record. Archived notice versions explain what was offered and do not themselves contain participants’ story text.

Deletion from the live album cannot instantly erase independent internet copies, search/social previews, shared media-library files or backups. We take applicable steps for copies and recipients under our control, restrict retained backups and reapply deletions after a restore. Please contact us if a removed story remains visible so we can check website/CDN caches.

9. Your controls and rights

Use Find & edit my stories in your original browser or your private edit link to correct your contribution, remove optional email, download your story data, withdraw a study choice or delete your story. Anyone holding that private link can edit the story and see its optional contact email, so keep it secret. Share the separate public URL with readers. The download is a copy of that story and its recorded choices, not a full site-wide access report.

If you lose editing access, want a broader data request or someone else has posted information about you, email ingoampt@yahoo.com. We may ask for proportionate proof of control or identity, but an unverified email field alone is not proof of story ownership. No new WordPress account is required to request your rights.

EEA and UK: where applicable you may request access, correction, erasure, restriction, portability and recipient information, object to legitimate-interest processing, and withdraw consent without affecting earlier lawful processing. GDPR requests normally receive a response within one month; any lawful extension is explained in that period. You may complain to your local supervisory authority, including the Austrian Data Protection Authority or the UK Information Commissioner.

United States: rights depend on the state and whether its law covers this processing. Applicable rights may include access, copies, correction, deletion, and opting out of sale, cross-context behavioural advertising/sharing, targeted advertising or certain profiling. California law may also provide limits on certain uses of sensitive personal information. We do not retaliate for exercising applicable rights. An authorised agent may act with legally appropriate evidence. Verification requirements depend on the request; we do not impose identity verification on opt-outs where prohibited. Covered California access, correction and deletion requests generally receive a response within 45 days, with any lawful extension explained. If we deny a request, email “Privacy appeal” for review and information about applicable further appeal/regulator routes.

Switzerland and other countries: contact us using the same controls to exercise applicable local rights. Swiss residents may also contact the Federal Data Protection and Information Commissioner. Mandatory local protections and complaint rights remain available. GDPR is not a US or worldwide statute; no term here waives rights that apply under another law.

10. Planned iOS app and device permissions

A future official Life Taught Me app using this album will link to the current privacy notice in the app and its App Store listing. Before release, its disclosures must describe its actual data collection, third-party SDKs and uses, including data sent through embedded web pages. The planned app does not gain permission for extra collection merely because you accepted this website notice.

Where an app feature uses the microphone, camera or selected photos/videos, it must explain the specific purpose and request the appropriate device permission when needed. Refusing an optional media permission should leave text contribution available. Do not upload media you do not have permission to share. Optional notifications need their own controls. This album does not request your address book or precise device location.

If a future app performs cross-company tracking or accesses the advertising identifier, it must obtain the applicable Apple App Tracking Transparency permission before doing so, alongside any separate legal advertising consent. A privacy checkbox or consent banner is not an ATT prompt. Refusing tracking must not remove core album functionality.

Any future account-based release must provide in-app initiation of account deletion and explain removal/retention of associated records. The present website instead offers private story editing/deletion without mandatory account registration. App providers and SDK partners receiving personal information must provide protection consistent with this notice, applicable law and Apple’s requirements. New processing must be disclosed before it begins.

The app will also need effective objectionable-content filtering, reporting, blocking and timely moderation, accurate age information and genuine app functionality. These are product requirements, not features created by a privacy-policy paragraph. Neither this notice nor the WordPress plugin is a promise of App Store approval.

11. Submission rules, age and content rights

Contributors must be 18 or older. This does not replace any age-rating or age-assurance obligations for a future app. Tell your own experience, respect others and upload only material you own or are authorised to publish. Do not identify children, disclose others’ confidential/sensitive details, harass, threaten, discriminate, impersonate or publish unlawful material. Report concerns using the story’s Report control or the contact email. The operator may correct or remove content and address misuse. Agreement responses concern the lesson’s ideas, not a person’s worth.

You retain your content rights. You permit us to store, format, display and facilitate your requested public sharing while your contribution remains published. This does not transfer ownership or grant unlimited rights for advertising, research or unrelated future uses. Album illustrations are labelled; they are not evidence that a story is true or a photograph of its author.

12. Changes and contact

We update this notice when practices change. Material new purposes require appropriate notice and, where necessary, fresh choices. A recorded choice applies to the purpose and notice offered at that time; it is not automatic agreement to changed research or advertising. Contact ingoampt@yahoo.com for questions or rights requests.

Return to the Life Taught Me album →