Last updated: 29 October 2026
This policy explains what personal data Tempting Fantasies collects when you visit temptingfantasies.com, why, and what rights you have. We collect as little as we can: you can read and listen to every story without an account, and we never ask for your name or email to use the site.
Who is responsible
The data controller is Webels ApS (CVR 40153063), Michael Drewsens Vej 13, 8270 Højbjerg, Denmark. You can reach us about anything in this policy at info@temptingfantasies.com.
What we collect and why
Analytics (only with your consent)
If you accept analytics cookies in our cookie banner, we use Google Analytics 4 (loaded through Google Tag Manager) to understand how the site is used — which pages are visited, how long people stay, and roughly where visitors come from. Google processes this data on our behalf and may transfer it to the United States under the EU–US Data Privacy Framework. If you decline, Google Analytics does not set any cookies. Google Tag Manager is loaded on every page so that your choice can be passed on to Google (Google Consent Mode); loading it sends your IP address to Google. Until you consent, Google Analytics sets no cookies, but Google receives cookieless signals (for example the time, the page visited, browser information and your consent status), which it uses for statistical modelling and which are not linked to a user profile. Legal basis for this: our legitimate interest in privacy-friendly audience measurement (art. 6(1)(f)). Legal basis: your consent (GDPR art. 6(1)(a)), which you can withdraw at any time.
Story ratings
When you rate a story, we store a cookie (tf_voted_[story ID]) in your browser for one year so the site remembers that you have voted. To stop the same person voting many times, our server also stores a one-way hashed code made from your IP address and browser type for 30 days. The hash cannot be turned back into your IP address, and we do not store the IP address itself. Legal basis: our legitimate interest in fair, reliable ratings (art. 6(1)(f)).
View counts and popular searches
We count story views and which categories and search terms are used, so we can show “Most Viewed” and learn what readers are looking for. To avoid counting the same visit twice, the server keeps a hashed visitor code (as above) for 6 hours. The statistics we keep are totals per day — they are not linked to you. Legal basis: legitimate interest (art. 6(1)(f)).
Security
To protect the site against abuse, the server temporarily limits how many requests a single IP address can make. This uses a hashed form of the IP address and expires automatically within an hour. Our hosting provider also keeps standard server logs for security and operations. Legal basis: legitimate interest (art. 6(1)(f)).
Preferences stored only in your browser
If you switch to dark mode, your choice is saved in your browser’s local storage (tf_theme). When you listen to a story, how far you got is saved the same way (tf_listen: the story, your position and when you last listened), so the site can offer “Continue listening” and pick up where you left off. A story is removed once you have finished it, and everything is cleared after 30 days. This information never leaves your device, and you can delete it at any time by clearing your browser’s site data.
Emails you send us
If you write to us, we use your email address and message only to answer you, and delete the correspondence when it is no longer needed.
Cookies
We only store or read information on your device when it is strictly necessary to provide the site, or when you have consented. On your first visit, a banner asks which categories you accept: Necessary (always on), Statistics and Marketing. Rejecting is as easy as accepting, and you can change or withdraw your choice at any time via “Cookie Settings” at the bottom of every page or here: Cookie Settings. Withdrawal applies to the future, and we delete cookies from the categories you switch off where technically possible.
The banner is run by us on our own server; no data is passed to third parties. Your choice is stored in the cookie gdc_consent (12 months). To be able to prove consent (GDPR art. 7(1)), we log each choice with a random consent ID, the chosen categories, the settings version, date and time, the page visited, your shortened IP address (the last byte is removed) and your browser identification (user agent). Legal basis: legal obligation (art. 6(1)(c) in conjunction with art. 7(1)). The logs are deleted after three years. You can find your consent ID in the Cookie Settings.
If you have accepted “Statistics”, a small share of page views sends the names of the cookies and local storage entries in your browser, and the domains of loaded third-party content, to our server — never their contents — so we can check that the list below is complete. Legal basis: your consent (art. 6(1)(a)).
List of cookies and stored information
Necessary
Required for the site to work, e.g. to remember your cookie choice.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
gdc_consent | This website | Stores your cookie choice | 12 months |
tf_voted_* | This website | Remembers that you have rated a story so you cannot vote twice | 1 year |
tf_themeLocal Storage | This website | Remembers whether you chose dark mode | Persistent |
tf_listenLocal Storage | This website | Remembers how far you got in an audio story so you can continue listening | 30 days |
sc_clearance | Simply.com (hosting) | Security check: confirms the visit is not from a bot | 24 hours |
Statistics
Helps us understand how visitors use the site so we can improve it.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics | Distinguishes visitors for statistics | 2 years |
_ga_* | Google Analytics | Stores session state | 2 years |
_gid | Google Analytics | Distinguishes visitors | 1 day |
_gat* | Google Analytics | Throttles request rate | 1 minute |
Marketing
Measures the performance of ads and partner links and enables more relevant ads.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_gcl_* | Google Ads | Measures conversions from ads | 90 days |
Your consent ID: –
Who we share data with
We never sell your data. We only use these service providers (data processors):
- Simply.com (Denmark) — web hosting.
- Google (Ireland/USA) — Google Tag Manager and Google Analytics 4, only with consent.
- Captivate — hosts our audio files. When you press play, the audio is streamed from Captivate’s servers, which receive your IP address as part of delivering the file.
Links to Spotify, Apple Podcasts and other platforms take you to their own sites, where their privacy policies apply.
Adults only
This site is intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18.
Your rights
Under the GDPR you have the right to access, correct or delete your personal data, to restrict or object to our processing, to data portability, and to withdraw consent at any time. Because most of the data we hold is hashed or aggregated, we usually cannot link it to you — but write to info@temptingfantasies.com and we will help as far as we can.
You can also complain to the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk.
Changes
We will update this page if we change how we handle data. The date at the top shows the latest version.