Privacy Policy

Last updated: July 2025

Introduction

This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website. We are committed to safeguarding your privacy and ensuring you have control over your data.

By using this site, you agree to the practices described in this policy. If you do not agree, please discontinue use of the site.

Information We Collect

Analytics Data

We use Google Tag Manager (GTM) and Google Analytics 4 (GA4) to collect anonymised usage statistics — such as page views, session duration, and browser type. This helps us understand how visitors interact with the site and continuously improve the experience.

Analytics cookies are only set after you give explicit consent via the cookie banner that appears on your first visit. You may accept or reject analytics cookies at any time. If you reject them, no analytics cookies will be placed and only anonymised, non-identifiable data may be collected.

Your consent preference is stored in a cookie named cookie_consent for one year. You can change your mind by clearing your cookies and revisiting the site.

Mailing List Data

If you subscribe to our mailing list, we collect your email address and optionally your name. We use this solely to send you updates, product announcements, and other communications you have expressly opted into.

Your email is never shared, sold, or rented — we maintain our own mailing list infrastructure and do not transfer subscriber data to any third party. You can unsubscribe at any time using the link included in every email we send.

Account Data

If you create an account, we store your email address, display name, and a hashed password (we never store plain-text passwords). Account data is used for authentication, order fulfilment (download access), and communication regarding your account.

How We Use Your Data

To operate and maintain the website and its features.
To send you emails you have subscribed to (mailing list).
To process product downloads and manage access grants.
To analyse aggregated, anonymised usage trends via GA4.
To respond to support requests or account enquiries.

Cookies

A cookie is a small text file stored on your device. We use the following categories:

Cookie	Purpose	Duration
cookie_consent	Stores your analytics consent preference	1 year
_ga / _ga_*	Google Analytics — only set after consent	2 years
next-auth.session-token	Session cookie for logged-in users	Session

Strictly necessary cookies (session, security) are always set. All other cookies require your consent via the cookie banner.

Third-Party Services

We use the following third-party services, each of which has its own privacy policy:

Google Tag Manager / Google Analytics 4 — analytics (only activated with your consent). Google Privacy Policy
NextAuth.js — authentication (session management).
Prisma / PostgreSQL — database hosting (your data is stored securely on our server).

Data Security

We implement industry-standard technical and organisational measures to protect your personal data, including:

HTTPS encryption for all data transmitted between your browser and our servers.
Passwords are hashed (never stored in plain text).
Session management with secure, httpOnly cookies.
Rate limiting and brute-force protection on authentication endpoints.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Right to access — request a copy of the data we hold about you.
Right to rectification — correct inaccurate or incomplete data.
Right to erasure — request deletion of your data (subject to legal obligations).
Right to restrict processing — limit how we use your data.
Right to data portability — receive your data in a machine-readable format.
Right to withdraw consent — for analytics, clear your cookies or use the banner.
Right to unsubscribe — click the unsubscribe link in any mailing list email.

Data Retention

We retain your personal data only as long as necessary:

Account data: until you delete your account or request erasure.
Mailing list subscription: until you unsubscribe.
Consent cookie: 1 year.
Analytics data: aggregated and anonymised; raw data retained up to 14 months.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically.

Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

Email: privacy@example.com