Short version: we store as little as we can get away with, we do not sell or share it, and you can have it deleted by asking.
A source tag (for example src=yt_exit) | Which link brought you here, so we can tell which one worked. It says nothing about you. Kept 13 months, then deleted. |
|---|---|
| A visit id | A random string made in your browser tab for this visit, so a download is not counted twice. It is not a cookie, it is not stored on your device, and it does not follow you to any other site. Kept 13 months. |
| A coarse device class, a shortened IP prefix and the referring website name | Mobile, tablet or desktop; the first half of your IP address only; and the host name of the site you came from, never the full address. Used to separate people from automated traffic. Kept 13 months. |
| Your email address, but only if you typed it | To send the one reminder you asked for, on the date you picked. Deleted when you cancel it, and in any case within 24 months. It is not added to any mailing list. |
| A purchase record | The Stripe checkout id, the amount, the date and the email you paid with, so we can re-issue your download and so the books are correct. Kept as long as tax law requires, which in Cyprus is six years. |
No cookies, no local storage, no tracking pixel on these pages, no advertising identifier, no full IP address, no full referrer URL, no card details, and nothing you type into the kit itself. The kit is a file. You fill it in on your own paper or your own screen and it never comes back to us.
Stripe processes the payment and holds the payment record, as the payment processor must. Zoho Mail delivers the reminder email. Nobody else. Nothing is sold, and nothing is shared for advertising.
Write to [email protected] from the address concerned and say what you want: a copy of what we hold, a correction, or deletion. We will do it within 30 days and tell you when it is done. The one thing we may have to keep is the purchase record, because tax law requires it, and we will say so if that applies to you. You can also complain to the Cyprus data protection authority.