Loading…
Loading…
What we collect, why, and how to get rid of it.
Last updated 5 Sept 2026
Draft — pending legal review. This document was written to be clear and honest, not by a lawyer. It has not been reviewed by counsel and is not legal advice. It must be reviewed before this store accepts payment.
We collect the minimum needed to sell you a file and keep your access to it working. We do not run third-party trackers, we do not sell data, and we do not build advertising profiles.
When you buy: your email address, what you bought, and the payment reference our payment provider gives us. We never see or store your card details — those go directly to the payment provider.
When you have an account: your email, an optional display name, and a hash of your password. We cannot read your password.
When you browse: page views, product views, searches, and which filters you used. Visitors are identified by a hash that includes the current date, so it changes every day and cannot be used to follow you over time. Your IP address is hashed with a rotating key before it is stored, and is used only to spot abuse.
When you download: the time, the product, and a hashed IP, so we can enforce fair-use limits and help you when a download fails.
We set: - a session cookie when you sign in, - a CSRF token cookie to protect forms, - an anonymous visitor cookie so a cart survives a page reload, - a favourites cookie so saved items work before you have an account, - an order-access cookie so you can return to an order you bought as a guest.
All five are strictly necessary for the features they support, which is why there is no cookie banner asking you to accept optional tracking — there is none to accept. We set no analytics or advertising cookies.
We do not send marketing email at all today. The only email you will receive is transactional — a receipt, a download link, a password reset. If we ever add marketing email it will be opt-in, with a one-click unsubscribe, and unsubscribing will never affect your purchases or downloads.
We have not yet set specific retention periods. When we do, they will be published here.
You can ask us to show you what we hold, correct it, delete it, or export it. Use the contact form. Deleting your account anonymises your profile and removes your favourites. It does not erase the record that a purchase happened: orders, payments and downloads remain, without your name or email attached to them.
We rely on a payment provider, an email provider and a hosting provider. The specific list will be published here before launch.
Use the contact form