Privacy policy
Last updated: October 18, 2026
Data Controller
Information We Collect
Account information: When you create an account, we collect your email address and password (stored securely hashed), and record when you agreed to our Terms of Service and this Privacy Policy.
Signing in with Google: If you sign up or log in with your Google account, Google tells us your email address, whether Google has verified it, and your Google account ID, which we keep to recognise you next time. We don't ask Google for your name or picture, and we never see your Google password.
Payment information: Payment details are processed and stored by Stripe. We do not store your full credit card number on our servers. We retain your Stripe customer ID and subscription ID to manage your subscription.
Usage data: Our server records the pages you view, without cookies: the page, the website or tagged link you came from, your country as reported by Cloudflare, and whether you use a phone or tablet. To count daily visitors, your IP address and browser identifier are combined with a random key that is replaced every day; we don't store your IP address, and visits on different days can't be linked to each other. When you create an account, start a checkout or subscribe, we record that step with your account, and your account is linked to the pages you viewed that day, so we can see which pages bring new members.
We also collect aggregate, cookieless website statistics through Cloudflare Web Analytics. It does not use cookies or track you across sites.
Newsletter: our newsletter runs on Substack. If you enter your email address in a subscribe box on this site, it is passed on to Substack's sign-up page; we don't store it.
How We Use Your Information
We use your information to:
- Provide and maintain our services
- Process subscription payments
- Generate and manage your API access key
- Send important service-related notifications
- Improve our website and services
Third-Party Services
We use the following third-party services:
- Stripe - for payment processing (Stripe Privacy Policy)
- Cloudflare - for website hosting, security and cookieless analytics (Cloudflare Privacy Policy)
- Substack - for the newsletter (Substack Privacy Policy)
- Google - if you choose to sign up or log in with your Google account (Google Privacy Policy)
Data Retention
We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.
Page view records are deleted after 13 months.
Your Rights (GDPR)
Under the General Data Protection Regulation, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to processing of your data
- Request data portability
To exercise any of these rights, contact us at [email protected].
Cookies
We only use essential cookies required for authentication and session management. We do not use analytics or advertising cookies.