Privacy Policy
Last updated: 30 October 2026
This policy explains what personal data The Midnight Mystery collects through www.themidnightmystery.com, why, and what rights you have. It follows the EU General Data Protection Regulation (GDPR) and Spain's Organic Law 3/2018 (LOPDGDD).
What we collect and why
Contact form
Data: name, email and your message.
Why: to reply to you.
Legal basis: your consent and our legitimate interest in answering enquiries.
Kept for: up to 2 years after our last exchange.
Midnight Radio story submissions
Data: name, email, your story, any voice recording, and the name you want credited.
Why: to review your story and, if chosen, adapt and produce it.
Legal basis: your consent, and the agreement in our Story Submission Terms.
Kept for: up to 12 months if not selected. If selected, for as long as the episode is available, plus the records needed to show the licence you gave us.
Website analytics (Squarespace Analytics)
Data: pages visited, device and browser type, approximate location, and how you reached the site.
Why: to understand how the site is used and improve it.
Legal basis: your consent through the cookie banner.
Kept for: see our Cookie Policy.
Emails you send us
Data: whatever you include.
Why: to reply to you.
Legal basis: our legitimate interest in answering enquiries.
Kept for: up to 2 years after our last exchange.
We don't sell your data, and we don't use it for automated decision-making or profiling.
Who we share it with
We only share data with service providers that help run the site, under data processing agreements:
- Squarespace (website hosting, forms and analytics)
- Google (Gmail, for email)
If your story is produced, the name you choose to be credited under will appear publicly in the episode and its description. Voice actors and collaborators working on that episode may see your story, but not your contact details.
We may also disclose data where the law requires it.
International transfers
Squarespace and Google may process data outside the European Economic Area, including in the United States. These transfers rely on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
Your rights
You can ask to access, correct or delete your data, restrict or object to how we use it, or receive a copy in a portable format. Where we rely on consent, you can withdraw it at any time, though this won't affect anything already done. For a story already produced and published, withdrawing consent to data processing doesn't cancel the licence granted in the Story Submission Terms, but we can stop crediting you by name if you ask.
To use any of these rights, email studio@themidnightmystery.com. We'll reply within one month.
If you're unhappy with how we handle your data, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or the authority in your own country.
Age
This site isn't aimed at children. Story submissions are only accepted from people aged 18 or over. If you're under 14, please don't send us any personal data.
Changes
We may update this policy. The date at the top shows the latest version.