Fictions by Aj

Privacy Policy

Effective date: September 19, 2026

This policy describes how Fictions by Aj (Aj Castelletto) handles information onfictionsbyaj.com. The site is operated from Illinois, United States. It is a small author website. It does not currently sell books or take payments on this domain.

This page is meant to be accurate, not impressive. If a practice is not listed here, that usually means it is not part of the public site.

Who operates this website

Fictions by Aj is the author brand of Aj Castelletto (also A.J. Castelletto). This policy does not claim a company type, registered office, or mailing address, because those details are not published on the site.

For privacy questions, use the Contact page, email aj@fictionsbyaj.com, or reach Aj on@FictionsByAjorFacebook. Those are the public contact channels. There is no public contact form.

Information you may provide

The public site does not have user accounts, public comments, child accounts, child photo uploads, or on-site payment or checkout. It does not offer an editor or a visitor login. A private operator editor may exist on a separate hostname and is not linked from public pages.

The public site does not have a contact form.

The Events page has an Event Suggestion form intended for adults, parents or guardians, event organizers, booksellers, and media. If you use it, you may submit:

That information is used to consider the suggestion and, if needed, to follow up. Submissions are not posted on the website.

Some pages have an email signup. If you use it and confirm you are 18 or older, your email address is sent to Mailchimp so Fictions by Aj can send a welcome PDF of the first three chapters of The Archive of the Unfound, then occasional newsletters, offers, and promotions. Mailchimp is a third-party email service. You should receive a confirmation email before you are fully on the list. The PDF is sent only after you click that confirmation link. That confirmation message sometimes goes to spam or junk, so check those folders if it is not in your inbox. After a successful signup request, this site showsa short confirmation page. Unsubscribe links will be in those emails. Mailchimp’s own retention is described inMailchimp’s privacy policy. This site does not store a separate copy of the list on fictionsbyaj.com.

That email list is not the same as advertising cookies or remarketing on this website.

Automatically collected information

Like most websites, this site is delivered over the internet. It is hosted on Cloudflare. Technical information such as IP address, browser type, date and time of the request, and the page requested may be processed by that hosting infrastructure as part of running and securing the site. The exact logs Cloudflare keeps, and how long they are kept, are not controlled in this website’s source code.

The Event Suggestion request may briefly keep a network address in the site’s memory so the form cannot be submitted over and over in a short period. That record is not shown on any public page. Whether the host also records the same request is unknown.

Google Analytics

Public pages load Google Analytics 4 (GA4) from Google. Fictions by Aj uses it to see where a visit started (for example a search result, a social link, or another website), which pages on this site were opened after that, and when someone leaves this site by clicking an outbound link (for example a book link to Amazon).

That still means Google’s script runs in the browser. Google may also see technical details it normally collects with GA4, such as approximate location, browser and device type, and identifiers it stores to recognize a visit. Outbound click reports can include the address of the site you clicked through to. This site does not treat Analytics as anonymous. Google’s own processing is described inGoogle’s Privacy Policyandhow Google uses information from sites that use its services.

This site does not send names, email addresses, phone numbers, or form contents to Analytics. It does not set a user ID. The page tag denies advertising storage and personalization, and it turns off Google Signals and ad personalization flags we can set in code. In the Google Analytics account, Enhanced measurement is set to Page views and Outbound clicks. Other account-only settings still cannot be seen from these website files.

Cookies and similar technologies

Public pages load a CookieYes script that shows a consent box. CookieYes is a third-party service. It may set cookies or similar storage so it can remember a visitor’s choice, and it may receive technical information needed to run the banner. CookieYes’s own processing is described inCookieYes’s privacy policy. Which cookie categories appear in the box, and whether Analytics waits for a click, are set in the CookieYes account. Those settings are not fully visible from this website’s source code.

The public site does not set its own login cookies. The home carousel may keep which book is centered in session storage. That value is a book id, not a name or email. Site colors are chosen by the operator and shown to every visitor. Guests do not get a color picker.

Google Analytics may set cookies or similar identifiers so it can connect pages viewed in the same visit and outbound clicks in that visit. Advertising cookies are denied in the page tag. Browser settings, the CookieYes box, or Google’s own opt-out tools can limit Analytics; that is not a guarantee they always work.

Forms and email

Event suggestions are sent from this website’s server to FormSubmit, which emails them to fictionsbyaj@gmail.com. FormSubmit is a third-party transmission service. This site does not store those submissions in a database on fictionsbyaj.com.

Copies that arrive in that Gmail inbox are treated as Event Suggestion mail. A mailbox script automatically moves matching messages to Gmail Trash after approximately 30 days. That is not the same as permanent deletion at day 30. Gmail may empty Trash later under Google’s own rules. FormSubmit is not that script. FormSubmit may keep its own copy according toits privacy terms (PDF). Fictions by Aj does not operate FormSubmit and cannot empty FormSubmit’s systems from this website. Moving a Gmail copy to Trash does not by itself delete a FormSubmit copy.

The site’s FormSubmit request turns FormSubmit’s captcha off (_captcha is sent as false) so the Event Suggestion dialog can submit by script. Spam resistance on this site is origin checking, a hidden honeypot field, and a short per-address rate limit. FormSubmit may still apply its own filters.

Third-party services

Services actually used by the public site include:

Those companies operate under their own terms and privacy policies. This site does not control their pages, accounts, or retention.

Amazon and other retailers

Book purchases happen on Amazon or another retailer, not on this website. This site does not process payments. The code reviewed for this policy uses ordinary Amazon product and author links. It does not include Amazon Associates tracking parameters. If that ever changes, this policy should be updated.

Children

Cat & Rat is a children’s picture book. This website is still a general author site for readers, parents, caregivers, booksellers, and media. It is not designed to collect personal information from children under 13, and children should not submit names, photos, stories, addresses, or other personal information here.

Event Suggestion is for adults and professional or parent/guardian inquiries. The email list is for people 18 or older. The site does not offer child accounts, child profiles, child comments, or a children’s mailing list.

Security

Reasonable measures are used for a small site of this kind, including HTTPS on the public host and basic checks on the Event Suggestion form. No website can promise that information will never be accessed without permission.

How long information is kept

Event Suggestion messages in the Fictions by Aj Gmail inbox are automatically moved to Trash after approximately 30 days. That is not a claim of permanent deletion at that moment. FormSubmit may keep its own copy for a period we do not control. Analytics data follows Google’s product settings. Host logs follow Cloudflare’s practices. Email list records are kept by Mailchimp until you unsubscribe or the Mailchimp account is changed.

Advertising

Paid advertising, remarketing, advertising cookies, Google Signals, and ad personalization are not currently active on this website. There is no Meta Pixel, TikTok Pixel, Pinterest Tag, or Google Ads remarketing tag in the site’s code today.

Those kinds of tools may be added later. If they are, this policy will be updated to name the platforms actually in use, what they receive, and how choices or consent work. Until then, do not treat this page as a description of live ads.

Questions and requests

You may ask about privacy, correction, or deletion of information you submitted through Event Suggestion by using Contact or @FictionsByAj. Requests will be handled in a way that is reasonable for a small site. This policy does not list every privacy statute that might apply in another place.

Changes

This policy may be updated. The effective date at the top will change when it is. Continued use of the site after an update means the current version applies to new visits, except where a law requires something else.