Privacy Policy

Who we are

This website is operated by [COMPANY LEGAL NAME], registered at [REGISTERED ADDRESS], [COUNTRY].

We are the data controller for the information described below. If you have a question about this policy, or want to exercise any of the rights in it, write to [PRIVACY CONTACT EMAIL].

What we collect

We collect three kinds of information, and nothing else.

• Your account. The name and email address you give us when you register, and a password we never store in readable form. If you fill them in, your profile can also hold a phone number, a short bio, a website and social media links, and a photograph.
• Signing in with Google. If you choose that route, Google tells us your name, your email address, whether Google has verified it, and an identifier for your account. We store the identifier so we recognise you next time. We never receive your Google password.
• Technical information. Each visit creates a session record holding your IP address, your browser's user-agent string, and the time you were last active. This is what keeps you signed in.

We do not buy personal information from anyone, and we do not track you across other websites.

Why we use it

• To create your account and sign you in.
• To send you service messages you have asked for, such as a password reset link.
• To keep the site secure and to investigate abuse.
• To meet our legal and accounting obligations.

We do not send marketing email unless you ask us to, and we do not sell your information to anybody.

Who else sees it

Some of what we do relies on other companies. Each of them sees only what their part requires.

• Google, if you sign in with a Google account. Their handling of that is governed by Google's own privacy policy.
• Google Fonts. Our pages load a typeface from Google's servers, which means your browser tells Google your IP address when a page loads. [We intend to serve this font ourselves, which removes the request entirely.]
• Our hosting provider, [HOSTING PROVIDER], which stores the database this site runs on.
• Our email provider, [EMAIL PROVIDER], which delivers messages such as password resets.
• [Stripe, once payments are live, which will handle card details directly. We will never see or store your card number.]
• [Some images on this site are currently served from a third-party domain, which means your browser requests them from that domain and it can see your IP address. We are moving these files onto our own servers.]

How long we keep it

• Account information is kept while your account is open, and for [RETENTION PERIOD] after you close it.
• Session records expire automatically and are removed.
• Password reset links stop working shortly after they are issued.
• [Records relating to a purchase are kept for as long as tax and accounting law requires.]

Your rights

Whatever country you are in, you can ask us to:

• Give you a copy of the information we hold about you.
• Correct anything that is wrong.
• Delete your account and the information attached to it.
• Send you your information in a portable format.
• Stop using your information for a particular purpose.

Write to [PRIVACY CONTACT EMAIL] and we will answer within [RESPONSE TIME].

[If you are in the United Kingdom or the European Economic Area, you also have the right to complain to your national data protection authority.]

Cookies

We use two cookies, both necessary for the site to work. One keeps you signed in; the other remembers which language you chose. Neither is used for advertising, and we set no analytics or tracking cookies.

You can delete them in your browser at any time, though you will be signed out if you do.

Changes, and how to reach us

If we change this policy we will update the date at the top of the page. If a change is significant, we will tell account holders directly.

For anything about this policy, write to [PRIVACY CONTACT EMAIL], or by post to [COMPANY LEGAL NAME], [REGISTERED ADDRESS].