Privacy Policy

Last updated:

The short version. We hold the email address you give us when you buy or write to us, and the record of what you bought. We run no analytics product, we have no accounts and no session cookies, and we build no profiles ourselves. We do run one advertising pixel from Meta, so that we can tell which of our ads lead to sales — in the EU, the EEA and the UK it stays switched off until you allow it, and everywhere else you can switch it off in section 3. We never sell personal data for money, and we never send anyone your email address for advertising.

1. Who is responsible for your data

The data controller for this website is , trading as , of . For any privacy question, write to or call .

Payments are handled by Lemon Squeezy, which acts as Merchant of Record and as an independent controller for the payment data you enter in its checkout. Lemon Squeezy's own Privacy Policy governs that processing.

For the advertising pixel described in section 3, we and Meta — Meta Platforms Ireland Limited for visitors in the EEA and the UK, Meta Platforms, Inc. elsewhere — are joint controllers for the collection of the data and its transmission to Meta. Everything Meta does with that data afterwards is Meta's own responsibility, under Meta's Privacy Policy. The division of responsibilities between us is set by Meta's Controller Addendum. You can exercise your rights over that data with either of us; Meta is the better address for anything it does after receiving it.

2. What we collect and why

Data Why we have it and on what basis
Your email address, and your name if you give it To deliver the files you bought, send your download link and receipt, notify you of updates to the product, and answer your messages. Legal basis: performance of our contract with you.
Order reference, product bought, date, amount and country To provide support, handle refunds, and meet our accounting and tax record-keeping duties. Legal basis: contract and legal obligation.
The content of emails or calls you send us To handle your enquiry and keep a record of what was agreed. Legal basis: contract, and our legitimate interest in keeping accurate support records.
Payment card details We never receive these. They are entered directly into Lemon Squeezy's PCI-DSS compliant checkout and are never transmitted to or stored on this website.
Which of our pages you visited, your IP address, your browser and device, and the identifier the Meta pixel stores on your device Collected by the Meta pixel and sent to Meta, so that we can measure whether our advertising works and reach people who are likely to be interested in our products. Legal basis: your consent, which you give or refuse in section 3 and can withdraw at any time. We do not receive a name, an email address or a list of individuals back from Meta — only aggregate counts.
Server access logs Our hosting provider records standard request data such as IP address, timestamp and user agent, for security and to keep the site running. Legal basis: legitimate interest in the security and availability of the site.

We do not ask for and do not want any special category data, and we do not collect the categories that US state laws call sensitive personal information. Please do not send us health, biometric, political or similarly sensitive information.

Nothing on this site makes automated decisions with legal or similarly significant effects about you. The advertising pixel builds an audience for advertising; it does not decide what you are charged or whether we will sell to you.

3. Cookies, tracking, and your choices

The advertising pixel below is the only thing on this site that stores anything on your device. There is no account system, no session cookie, no analytics product and no Google Analytics. Even your decision about the pixel is remembered in your browser's local storage rather than in a cookie, and never leaves your device.

The Meta advertising pixel

We advertise our products on Facebook and Instagram, and we use Meta's pixel to see which of those ads lead to a sale. When it is active, the pixel stores an identifier on your device (the _fbp cookie, set by this website's own domain, kept for up to 90 days) and sends Meta the address of the page you are on, your IP address, your browser and device details, and that identifier. Meta can also read the cookies it has already set through your Facebook or Instagram account. Meta uses this to match the visit to an ad, to report to us how many people bought after seeing it, and to show our ads to comparable audiences.

Because Meta is in the United States, this involves an international transfer, covered by Meta's certification under the EU-US Data Privacy Framework and its UK extension, and by Standard Contractual Clauses where the Framework does not apply.

How the choice works. If you are in the EU, the EEA or the UK, the pixel does not load at all until you press “Allow” on the banner — no identifier is stored and nothing is sent to Meta before that, and refusing is exactly as easy as accepting. Everywhere else the pixel loads when you arrive and you can switch it off here. If your browser sends a Global Privacy Control signal, we treat that as a refusal and never ask, wherever you are.

Use this switch to change your mind at any time:

Switching it off stops any further collection. It cannot recall what was already sent to Meta — for that, use the controls in your Meta account settings, which let you disconnect off-Facebook activity, or write to us and we will pass the request on.

Everything else the site loads

4. Who else sees your data

We share the minimum necessary with the following recipients, and with nobody else. We never sell personal data for money, and we never disclose your email address, your name or what you bought for anyone else's advertising.

Some of these providers operate outside the European Economic Area. Where data is transferred internationally, it is protected by an adequacy decision — including the EU-US Data Privacy Framework — or by Standard Contractual Clauses.

5. How long we keep it

6. Your rights in the EU, the EEA and the UK

If you are in the EU, EEA or UK, the GDPR gives you the right to access your data, to have inaccurate data corrected, to have your data erased, to restrict or object to processing, to receive your data in a portable format, and to withdraw consent where processing is based on consent — which for the advertising pixel takes one press of the switch in section 3, no harder than giving it. Withdrawing consent does not affect what was lawful before.

To exercise any of them, email . We respond within one month, and we do not charge a fee. We may ask you to confirm the email address used at checkout so we release data to the right person. Note that we cannot delete records we are legally required to retain for tax purposes.

You also have the right to lodge a complaint with the data protection authority in your country. We would appreciate the chance to resolve the matter first.

7. Your rights in the United States

If you live in California, Colorado, Connecticut, Virginia, Texas, Oregon or another state with a comprehensive privacy law, this section is for you. We give these rights to every US visitor who asks, regardless of whether we meet a particular statute's size threshold.

In the twelve months before the date at the top of this page, we collected these categories of personal information:

Category Where it comes from, and who receives it
Identifiers — email address, name if given, IP address, the pixel identifier From you at checkout or by email, and automatically from your device. Disclosed to Lemon Squeezy, our email provider and our host; the IP address and pixel identifier go to Meta when the pixel is allowed to run.
Commercial information — what you bought, when, for how much From your order. Disclosed to Lemon Squeezy and our accountant, and to tax authorities where the law requires it. Not sent to Meta.
Internet activity — pages viewed on this site, referring ad, browser and device Automatically from your device. Sent to Meta when the pixel is allowed to run; otherwise it stays in our host's server logs.
Inferences — the assumption that you are interested in our products Drawn by Meta from the pixel data, for advertising. We do not build profiles ourselves.

Selling and sharing. We have never sold personal information for money and never will. However, letting the Meta pixel send your browsing data to Meta so that it can target advertising counts as “sharing” for cross-context behavioral advertising under the CPRA, and as “targeted advertising” under the other state laws. That is the only such disclosure we make, and you can stop it:

We do not knowingly sell or share the personal information of anyone under 16, and we do not collect sensitive personal information, so there is nothing to limit under the CPRA's “limit the use of my sensitive personal information” right.

You also have the right to know what we hold, to a copy of it, to correction, and to deletion, and the right not to be discriminated against for exercising any of them — our prices and products are the same either way. Email and we will answer within 45 days, extending once by a further 45 days if the request is complex, and telling you if we do. An authorised agent may submit a request on your behalf with written permission we can verify. If we refuse a request and your state gives you a right of appeal, tell us and a different person will review the decision.

8. Marketing email

Buyers receive transactional email — the download link, the receipt, and notices about updates to the files they bought. We do not add anyone to a marketing list without a separate, explicit opt-in, and every non-transactional email carries a one-click unsubscribe link.

9. Security

The site is served over HTTPS. Access to the systems holding order and support data is restricted to the people who need it and protected by strong, unique credentials and two-factor authentication. Card data never touches our systems. No system is perfectly secure; if a breach occurs that is likely to affect your rights, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of it.

10. Children

Our products are sold to adults. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with data, contact us and we will delete it.

11. Changes to this policy

We update this policy when our practices or the law change. The revision date is shown at the top of the page. Material changes affecting existing buyers are announced by email.

12. Contact



· ·