Privacy

Last updated 25 September 2026. The same text is on the legal page, with everything else.

Stripe stores the card. We never see it and never hold it. What we store is your email address, your Stripe customer id and a record of each payment, which is what the transparency page adds up. There are no accounts and no passwords. The payment records stay for as long as the site publishes the months they belong to, which is every month since the first; they hold amounts and dates, not your name or your address. Your email address and your Stripe customer id stay while your subscription is active, and we delete them on request once it has ended.

Visits are measured with cookieless analytics, Vercel and PostHog. Nothing is written to your browser: no cookie and no local storage, so a reload counts as a new visit. Your IP address is not recorded, and everything after the question mark in a page address is removed before an event is sent, so the link Stripe returns you on never reaches analytics. Nothing in it points back to you.

Six companies handle the data on our behalf, all in the United States: Stripe for payments and the card, Railway for the database, Vercel for the site, Resend for the email the contact form sends us, PostHog for the analytics above, and Cloudflare for the domain. Each one holds only what its job needs, and none of them is given your data for any other purpose.

What you write on the contact page is emailed to our inbox, with the address you gave so we can answer. It is not stored on the site.

To see what we hold about you, to correct it, or to have it deleted, ask on the contact page from the address you paid with. Cancel first if you are still giving, because an active subscription needs the record. Stripe keeps its own copy of the payment for as long as the law requires it to; ask Stripe about that.