What this site knows about you

You can read this entire site without signing in and without telling us your name. Superhero Nation sells nothing about you, runs no advertising, and carries no third-party trackers on any page.

We do count visits, using our own server rather than somebody else’s script. If you write in, book a talk, subscribe, or make an account, we keep what you sent so we can answer it.

The one thing we would rather be able to say and cannot: there is no button that deletes your data. Ask, and a person removes it by hand — usually the same day.

Every visitor gets a cookie called sn_cid. It holds a random string and nothing else — no name, no address, nothing that means anything off this site. It lasts two years, page scripts cannot read it, and it goes to no one.

Each page you open is recorded: the full web address including anything after the ?, the page title, where you arrived from, and rough figures on how quickly the page loaded. Your IP address is used only to stop one machine flooding the site with requests, and is not stored alongside those records.

This next part is unusual enough to be worth stating plainly. Your browser never contacts Google Analytics. It reports to this site, and this site passes on a summary. No analytics script from anyone runs on any page here, so Google cannot watch you on this site the way it can on most others.

The contact and speaking forms keep what you typed: your name, your email address, your organisation if you named one, your message, and for a booking the dates, audience size and budget range.

They also record two things you were not asked for — your IP address and your browser’s user-agent string. Those exist to show a message came from a person rather than a script, and they are kept as long as the message is. If you would rather we had neither, email us directly instead: a message you send yourself carries whatever your own mail provider attaches and nothing from us.

Messages are read by Kevin and by anyone he has given inbox access to, and are emailed to those same people when they arrive.

Accounts exist so the library, the assessments and your notes follow you between devices. Signing in with Google means Google gives us your email address, your name and your profile picture. Signing in with an email and password means we hold the address and whether it has been verified — never the password itself, which belongs to Firebase and not to us.

A cookie called sn_session keeps you signed in for five days. Page scripts cannot read it either.

Finishing one adds a single anonymous tally: which band you fell into on each dimension, nothing finer. What comes back is the shape of the group, never a row belonging to a particular person — and the breakdown is withheld entirely until at least ten people have finished, because among four respondents a distribution and a date is a name.

You may choose to put a name to your results so they can be read individually. It does not have to be your real name, and your account is not stored beside it — only whether you were signed in at all. Type no name and nothing connects that run to you.

Signed in, a copy is saved to your account with your answers so you can open it on another device. That copy is yours: the security rules grant no administrator any way to read it, and that absence is deliberate.

These never leave your device. They are encrypted in your browser with a passphrase only you know, stored only on that machine, and no part of this site contains any code capable of uploading them.

Two consequences follow, and the second is not a footnote. Nobody here can read them — not Superhero Nation, not anyone with access to the database, not anyone who compels us, because we hold nothing to hand over. And nobody here can recover them: forget the passphrase or clear your browser data and they are gone, and they will not appear on your other devices.

Google runs the machines this site lives on, holds its database, and handles sign-in and outgoing email, so everything above passes through their systems. Analytics summaries reach them too, once configured, without your IP address attached.

Amazon sees you when you follow a link to buy a book; from that click their privacy policy governs, not this one. Square is the same for coaching and support links, and handles payment details throughout — card numbers never reach this site at all.

Data is stored in the United States. There are no advertising networks, no data brokers and no social media pixels anywhere on this site.

Honestly: indefinitely, unless you ask otherwise. Messages, booking requests, accounts and newsletter subscriptions stay until someone removes them.

The administrative log deserves naming. It records who changed what on this site, including email addresses, and it cannot be edited or deleted by anyone at all — including Superhero Nation’s own administrators. That is the point of it: a log an administrator can quietly rewrite is not a log. An address appears there because someone subscribed or was granted access, never because they read something.

Write to kevinmiller@knowresponsibility.com and ask for a copy of what is held, a correction, or deletion. A person reads it and does it by hand. There is no self-service button, and we are not going to imply there is. Expect an answer within a few days rather than within the hour.

Leaving the newsletter is the exception, and it is immediate: every issue carries a link, and it works without signing in.

Depending on where you live you may have a legal right to see, correct, delete or take away your data, or to object to its use. The route is the same either way — that address — and we will not ask you to prove which country you are in before honouring it.

This site is written for adults. Kevin’s earlier book concerns schools and children, so a good many readers are teachers and parents, but nothing here is aimed at a child or invites one to sign up. We do not knowingly hold information from anyone under 13. If you believe a child has made an account, write to us and it will be removed.

The date at the top moves whenever the text does. Material changes will be said plainly rather than slipped in.

Questions, or something here that does not match what you have seen on the site? Tell us. That is a real invitation: a gap between this page and the software is a bug, and we would rather hear about it than have it sit there.