Privacy notice

What we collect

• Your email address, to send a magic sign-in link and, if you opt in, occasional updates.
• The 18+ confirmation you give when signing in.
• Authentication cookies that keep you signed in (via Supabase Auth).
• Billing metadata (your subscription status, plan and renewal date) that our payment processor, Stripe, sends us after checkout. We never see or store your card number — Stripe handles payment details directly.

Why (lawful basis)

We process your email and sign-in to perform our contract with you (providing the account and subscription you asked for). We process billing metadata to perform that same contract and to meet our legal obligations (accounting and tax records). If you opt in to marketing updates, that’s on the basis of your consent, which you can withdraw at any time.

How long we keep it

For as long as your account exists, plus what UK tax law requires us to retain for billing records afterwards. Delete your account at any time from your account page and we delete your account and subscription record immediately, subject to that legal retention requirement for billing records.

Who we share it with

Supabase (our database and authentication provider) and Stripe (our payment processor) — both process data on our behalf, under their own security and privacy commitments. We do not sell your data, and we do not run ads or share your data with advertisers.

Your rights

Under UK GDPR you can ask to access, correct, or delete your personal data, or ask us what we hold. Use the self-serve deletion on your account page for the fastest route, or contact us directly for anything else. If you’re unhappy with how we’ve handled your data, you can complain to the UK Information Commissioner’s Office (ico.org.uk).