Privacy Policy

This Privacy Policy describes how Halcyon Brand Services, Inc. ("we," "us," or "our") collects, uses, and shares information about you when you visit damnosus.com (the "Site"). Damnosus™ is a trademark owned by Halcyon Brand Services, Inc.

1. Information We Collect

Information you provide

We currently do not require an account to use the Site. If you subscribe to our newsletter or contact us by email, we collect the email address you provide and any message contents you choose to send.

Information collected automatically

When you visit the Site, we (or our service providers) may automatically collect:

• Standard server log information (IP address, browser type, referrer, pages viewed, timestamps)
• An age-verification cookie (described below) if you choose to use the "remember me" option on our age-gate
• Aggregate, anonymized traffic data via our hosting provider's privacy-respecting analytics

2. How We Use Information

We use the information described above to:

• Operate, maintain, and secure the Site
• Verify that visitors meet our minimum age requirement (18+)
• Send the newsletter you've subscribed to (and only to subscribers)
• Respond to messages you send us
• Understand aggregate usage of the Site to improve content and performance
• Comply with applicable law

We do not sell your personal information, and we do not use it for advertising profiles.

3. Cookies

A cookie is a small file stored in your browser. We use cookies sparingly:

• Age verification — when you confirm you are 18+ and check "remember me," we set a cookie named damnosus_age_verified that expires after 30 days. This cookie contains no personal information; it only records that the device confirmed eligibility.
• Essential operational cookies may be set by our hosting provider (Cloudflare) for security and performance.

You can clear cookies at any time using your browser's settings. Doing so will cause the age-gate to reappear on your next visit.

4. Third-Party Service Providers

We rely on a small set of trusted third-party service providers to operate the Site, including hosting and content-delivery providers, email service providers, analytics providers, and back-end infrastructure providers. Each is bound by its own privacy policy and is contractually obligated to handle any data only on our behalf and only for the purposes of operating the Site.

We do not share, sell, or rent your personal information to third parties for marketing purposes.

5. Your Rights

Depending on where you live, you may have the right to:

• Request access to the personal information we hold about you
• Request correction or deletion of that information
• Object to or restrict certain uses
• Withdraw consent at any time (for example, by unsubscribing from our newsletter)

To exercise these rights, email [email — JavaScript required]. We will respond within the timeframes required by applicable law.

6. European Residents — Your GDPR Rights

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation ("GDPR") and equivalent regional laws give you specific rights regarding your personal data.

Data controller

For the purposes of GDPR, the data controller is Halcyon Brand Services, Inc., reachable at [email — JavaScript required].

Legal bases for processing

We process your personal data on the following legal bases under GDPR Article 6:

• Consent — when you voluntarily subscribe to our newsletter or use the "remember me" option on the age gate
• Legitimate interests — operating, securing, and improving the Site (including age verification and basic analytics)
• Legal obligation — to comply with applicable laws and lawful requests from authorities

Your rights

You have the right to:

• Access — request a copy of the personal data we hold about you (Art. 15)
• Rectification — request correction of inaccurate or incomplete information (Art. 16)
• Erasure — request deletion of your personal data, subject to limited exceptions (Art. 17, "right to be forgotten")
• Restriction — request that we limit how we use your data (Art. 18)
• Data portability — receive your data in a structured, machine-readable format (Art. 20)
• Object — object to processing based on legitimate interests (Art. 21)
• Withdraw consent at any time, where processing is based on consent

International data transfers

Damnosus is operated from the United States. When you visit the Site from the EEA, the UK, or Switzerland, your data is transferred to and processed in the U.S. Where applicable, we and our service providers rely on the European Commission's Standard Contractual Clauses (SCCs) or other approved mechanisms to provide appropriate safeguards for these transfers.

Right to lodge a complaint

If you believe our processing of your personal data violates GDPR, you have the right to lodge a complaint with the supervisory authority in your country of residence. A list of EU data protection authorities is available at edpb.europa.eu.

How to exercise your rights

To exercise any of these rights, email [email — JavaScript required] with the subject line "GDPR Request." We will respond within 30 days as required by Art. 12. We may need to verify your identity before fulfilling the request.

7. California Residents — Your CCPA Rights

Under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA"), California residents have the following rights regarding their personal information:

• Right to know what personal information we have collected about you, the categories of sources, the purposes for collection, and the categories of third parties with whom we share it
• Right to delete personal information we have collected from you, subject to certain exceptions
• Right to correct inaccurate personal information
• Right to opt out of "sale" or "sharing" of your personal information — we do not sell or share your personal information for cross-context behavioral advertising
• Right to limit use of sensitive personal information — we do not collect categories of "sensitive personal information" as defined by California law
• Right to non-discrimination — we will not deny you services, charge different prices, or provide a different level of quality because you exercised any of these rights

To exercise any of these rights, email [email — JavaScript required] with the subject line "California Privacy Request." We may need to verify your identity before fulfilling the request. You may designate an authorized agent to make a request on your behalf.

8. Children's Privacy

The Site is intended for adults aged 18 and older. We do not knowingly collect information from children under 18. The age-gate at the entrance to the Site exists for this reason. If you believe a child has provided us with information, please contact [email — JavaScript required] and we will delete it.

9. Data Security

We use industry-standard safeguards to protect the information we collect, including TLS encryption in transit, hardened cloud infrastructure (Cloudflare), and least-privilege access controls. No method of transmission over the internet or method of electronic storage is 100% secure; we cannot guarantee absolute security.

10. International Visitors

Damnosus is operated from the United States. If you visit the Site from outside the U.S., your information may be transferred to, stored, and processed in the United States. By using the Site, you consent to this transfer.

11. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be announced on the Site. Your continued use of the Site after changes take effect constitutes acceptance of the revised Policy.

12. Contact Us

Questions, requests, or comments about this Policy:

Halcyon Brand Services, Inc.
[email — JavaScript required]

This Privacy Policy is provided as a starting point and does not constitute legal advice. Before relying on it for production use, especially once we begin collecting payment information or expanding into e-commerce, have it reviewed by an attorney licensed in your jurisdiction.

← Back to home