What we keep (and what we don’t)

When you order, we keep a minimal record: your email address, the items you bought, what you paid, an order reference, and whether the order was fulfilled. That is the whole record.

• Your delivery address is not stored on our servers. It is collected securely by Stripe and passed to the printer. We only read it in transit to create the print job.
• Your card details never touch our systems. The checkout runs entirely through Stripe; we cannot read your card number, and it is never sent to us in any form.

Running a print-on-demand press means a handful of specialized companies each do one job. None of them are sold your data, and none may use it for anything but the jobs named here.

• Stripe & Lulu: Stripe securely processes your payment and address. Lulu prints and ships the book — they receive your delivery details so the carrier can reach you.
• Our tech stack: We use Supabase to store our minimal order records, Cloudflare to securely host the site and digital files, Render to calculate pricing, and Resend to email your download links.

We do not sell personal data, we do not share it with data brokers, and there is no sneaky tracking on this page.

We do advertise on Meta. To know if our ads work, we send them an irreversible cryptographic hash of your email along with the order value. We never send your name, address, or what you bought. This hash only lets Meta recognize a match if you are already in their system; it tells them nothing about you they didn’t already know. If you prefer we exclude you from this reporting, just email [email protected].

• Why we hold it: We need your order details to fulfill our contract — getting your book to you. The advertising measurement is based on our legitimate interest in knowing if our marketing works.
• How long we keep it: Order records are kept for six years because tax authorities require sellers to evidence their sales for that long.
• What you can ask for: You can ask for a copy of everything we hold about you, ask us to correct it, ask us to delete it, or object to the ad measurement. We will answer within 30 days. (Note: we can remove you from advertising immediately, but we cannot delete tax-required order records early.)

If you are in the UK or EU and think we have handled this badly, you may complain to your national data protection authority — though we would always rather you told us first.

Questions about your privacy? Write to us at [email protected].