Last updated: 2026-08-31.
What we collect
- Contact form submissions. When you write to us via /contact, we store your name, email, optional subject, and message in our database so we can reply.
- Account and order data. When you buy a bundle on the site, we store your email, order details (bundles purchased, amount, currency), and your buyer country for tax purposes. Payment is handled by Stripe; we receive payment references and confirmation but never see your card number.
- Download history. When you download a purchased file, we record which bundle was downloaded, when, and by which account. We use this to power your library, answer support questions, and apply our refund policy (refunds require that nothing from the order has been downloaded). Kept as long as the related order record.
- Anonymous traffic. We run privacy-respecting, cookieless analytics (Plausible) that count page views, referrers, and anonymous shop events such as a checkout started or a purchase (product and amount only), with no personal identifiers.
What we don't collect
- We don't track you across other sites.
- We don't sell your data.
- We don't profile you for advertising.
- We don't use third-party advertising or remarketing tags.
How we use it
- To deliver the bundles you bought and give you access to My Downloads.
- To reply to your contact-form message.
- To meet our tax and accounting obligations.
- To improve the catalogue based on aggregate traffic patterns.
Who processes it
- Stripe: processes payments and stores payment details on our behalf. See Stripe's privacy policy.
- Resend: sends order receipt and account emails on our behalf.
- Supabase: hosts our database and handles account authentication.
- Plausible: runs our cookieless site analytics on our behalf. See Plausible's privacy policy.
Retention
We keep order records for as long as required for tax and accounting purposes.
Your rights
Under GDPR and similar laws, you can ask us to access, correct, or delete data we hold on you. Email us via Contact. We'll respond within a reasonable window (typically a few business days). Note that we may need to retain order records where the law requires it, even after a deletion request.
Children
The site is not directed at children under 16, and we don't knowingly collect data from them.
Changes
We'll update this page when our practices change. The "Last updated" date at the top reflects the current version.
Contact
Privacy questions: see the Contact page.