Privacy Policy

We collect the minimum needed to run an account and a purchase, and nothing that exists only to build a profile of you.

We do not sell personal information. We do not share it with advertisers. Card details never reach this site at all.

Account information, when you create an account:

• your email address, which is how your access is identified;
• authentication data held by our authentication provider (we never store your password ourselves, and it is not readable by us);
• whether you consented to marketing email, and when;
• if you enable it, the existence of a two-factor authenticator on your account.

When you buy access we record the order, what was purchased, the amount, the currency, the outcome, and the identifiers our payment provider gives us so a payment can be matched to an order and supported later.

We do not receive, see or store your card number, expiry date or security code. Payment details are entered on the payment provider's own hosted checkout and stay with them.

Like any website, our hosting and infrastructure providers process request data (including IP addresses) in order to serve pages, apply rate limits and protect the service from abuse.

We use a session cookie so that you stay signed in. It is required for the site to function and is not used for advertising or cross-site tracking.

Where errors are recorded to help us fix faults, those records are configured to carry identifiers rather than content: they never include guide material, signed file links, authentication tokens or payment secrets.

Each category has one purpose, and is not reused for another:

• account data: to give you access to what you bought and to let you sign in;
• purchase data: to fulfil the purchase, to support you afterwards, and to meet accounting and tax obligations;
• technical data: to keep the service available, secure and functioning;
• marketing consent: solely to decide whether you may be sent optional email, which is off unless you turned it on.

Account and purchase emails (sign-in links, address confirmation, password resets, purchase confirmations) are part of the service and are sent whether or not you consented to marketing.

Marketing email is separate, opt-in, and unchecked by default when you sign up. You can withdraw that consent at any time without affecting your access.

We use a small number of specialist providers to run the service. Each processes data only to deliver its own function, under contract:

• an application hosting and content delivery provider, which serves the site;
• a database and authentication provider, which stores your account and content records;
• a payment provider, which processes payments and holds the card details we never see;
• a transactional email provider, which delivers account and purchase email.

Account data is kept for as long as your account exists. Purchase and payment records are kept for as long as accounting and tax rules require, which is longer than the account itself and is not something we can shorten on request.

Operational logs and diagnostic records are kept for a short period and then discarded.

You can ask for a copy of the personal information we hold about you, ask us to correct it, withdraw marketing consent, or ask for your account to be deleted. Contact support at the address below and we will act within a reasonable time.

Deleting an account removes your access. Records we are legally required to retain (principally purchase and payment records) survive the deletion of the account itself.

Depending on where you live you may have further rights under local data protection law, and you may have the right to complain to your national data protection authority.

Our providers operate internationally, and your information may be processed outside the country you live in, including in the United States. Where that happens, it is done under the safeguards those providers offer for international transfers.

This service is not intended for anyone below the legal gambling age in their jurisdiction, and accounts are not knowingly created for them. If you believe such an account exists, contact us and it will be removed.

This policy may be updated as the service changes. The date at the top of the page shows when the wording last changed.