Privacy Policy

1. Information We Collect

When you make a purchase:

• Email address - to deliver your purchase and send order confirmations
• Payment information - collected and processed by Stripe on their own checkout page. We never see or store your card details.
• Purchase record - which products you bought, your order reference, and how many times your download link has been used

When you browse the site:

• Usage data - pages viewed, products opened, items added to the cart, and whether a visit ended in a purchase
• Technical data - browser type, device type, approximate country (derived from your IP address), and the site that referred you

Usage and technical data are collected only when analytics are active for your browser. See section 5 for how that is decided and how to change it.

When you subscribe to our newsletter: your email address, until you unsubscribe.

2. How We Use Your Information

• Process and deliver your purchases
• Send download links and order confirmations
• Re-issue a download link if yours expires or you lose the email
• Provide customer support
• Prevent fraud and abuse, including rate-limiting requests by IP address
• Understand which products people look for and where the site is confusing, so we can improve it
• Measure whether our advertising is working
• Send newsletters, if you asked for them

We do not use your information to make automated decisions about you, and we do not sell it.

3. Who We Share It With

We do not sell, trade, or rent your personal information. We use the following service providers to run the store, and share only what each one needs:

• Stripe - payment processing and checkout
• Resend - sending order emails and newsletters
• PostHog - product analytics
• Pinterest - when we run advertising campaigns, to measure whether visits from those ads lead to purchases
• Hosting and storage providers - our website host, database and file storage, used to run the store and deliver your downloads
• Legal authorities - if required by law or to protect our rights

These providers process data in the United States and other countries. Where information about visitors in the European Economic Area, the United Kingdom, or Switzerland is transferred, it is done under the transfer safeguards those providers maintain.

4. Data Security

We implement appropriate security measures to protect your personal information. All payment transactions are processed through Stripe using industry-standard encryption, and download links are single-purpose tokens that expire. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

5. Cookies, Analytics and Your Choices

We use four kinds of cookie and similar browser storage:

• Essential - keeping your cart, completing checkout, and protecting the site from abuse. These cannot be switched off.
• Preferences - remembering choices such as light or dark mode.
• Analytics - understanding how visitors find and use the store, so we can improve it.
• Advertising measurement - when we run advertising campaigns, working out which ads led to a purchase. We do not use cookies to build advertising profiles or to target you elsewhere on the web.

How we decide whether analytics run. This depends on where you are, based on the approximate country of your IP address:

• European Economic Area, United Kingdom and Switzerland - analytics and advertising measurement stay off until you accept them using the banner shown on your first visit. If you decline, or ignore the banner, nothing beyond essential and preference storage is set.
• Everywhere else - analytics and advertising measurement are on by default, and you can turn them off at any time.

If we cannot determine your country, we treat you as if you were in the first group.

You can see and change your current setting at any time on our Privacy Choices page, also linked in the footer of every page. Your choice is stored in your browser, so you will need to set it again on a different browser or device.

Turning analytics off does not affect your ability to browse or buy, and it does not stop us recording a purchase you make - we always keep a record of orders so we can deliver them and support you.

6. Data Retention

We retain your purchase information for as long as necessary to provide our services and comply with legal obligations. Download links expire after 7 days, but your purchase record is retained for customer support purposes. Newsletter subscriptions are kept until you unsubscribe. Analytics data is retained by PostHog according to their standard retention period.

7. Your Rights

You have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request deletion of your data (subject to legal requirements)
• Request a copy of your data in a portable format
• Object to, or withdraw consent for, analytics and advertising measurement - see Privacy Choices
• Opt out of marketing communications, using the unsubscribe link in any newsletter
• Lodge a complaint with your local data protection authority

To exercise any of these rights, please contact us. We will respond within 30 days. We may ask you to confirm the email address you used at checkout so we can find the right records.

8. Children

Our store is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any website you visit.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of our services after any changes constitutes acceptance of the new policy.