Privacy

What we store

• Your email address. It is your login and where receipts and password resets go.
• Your first and last name. Used to address you in email and on receipts.
• Your password, hashed. Stored as a bcrypt hash with a salt. Nobody here can read it, including us.
• Whether you confirmed your address, and a short-lived token while you have not.
• Whether you asked for marketing email, which is off unless you tick the box.
• What you can reach, meaning which templates and whether that is because they are free, purchased, or covered by a subscription.
• Your purchases and subscription: the amount, Stripe's identifiers for the payment, whether it was refunded, and when a term ends.
• Which version of a template you last downloaded, so the site can tell you when a newer one exists.
• When your account was created.
• Which templates are looked at and downloaded. Opening a template's page records which template and when, and your account if you are signed in. A download records the template, the format and your account. There is no IP address, no browser details and no cookie in it. It is how we learn which templates people want, and only we see it. Deleting your account takes your name off those records and leaves the count.
• A copy of each email we send you. Receipts and account notices are kept under Messages on your account page, so one lost to spam is still there, with whether it was delivered. Links that confirm your address or reset your password are never kept. Deleting your account deletes the copies.
• Templates you ask us for. If you use Request a template on your account page, we keep what you wrote, with your account and when. Only we see it. Deleting your account deletes it.
• Your network address, briefly. To stop somebody guessing passwords or discount codes, the site counts attempts by network (IP) address for at most an hour. It also remembers the networks you logged in from, for 30 days, so a stranger's wrong guesses cannot lock you out of them. All of it is held in memory, never in the database, and a restart forgets it. When there are too many attempts, the site's log records the network address they came from.

That is the whole list. There is no address, no phone number, no company field, no job title, and no profile.

What we do not do

• No third-party analytics. The counts above are kept in our own database and go nowhere else. There is no Google Analytics, no Plausible, no tracking pixel and no third-party script of any kind on this site.
• No advertising cookies. The only cookie is the session cookie that keeps you logged in.
• No third-party fonts. The typefaces are served from this domain, so loading a page does not tell a font host that you were here. There is a check in the build that fails if that ever stops being true.
• We never sell, rent or share your email address. We use it only to write to you: to sign you in, to send receipts and notices about your account, and release emails if you asked for them. The same goes for the rest of your details. There is no arrangement under which that could change.

Card details

We never see them. Payment happens on Stripe's own checkout page, a card is changed on Stripe's own billing page, and what comes back to us is an identifier for the payment and the amount. There is no card number in this database and no field that could hold one.

Who else sees your data

• Stripe, and Link, its checkout, which sells our templates as merchant of record: it takes payment, works out and pays sales tax, and helps with payment questions. They receive your email address, your name and billing address (to work out the tax), and the payment details you give them directly.
• Resend, to deliver email. They receive your email address and the contents of the messages we send you.
• Railway, to host the site and its database. Everything listed above is stored on their servers, and they keep the site's logs for a month. The logs name an account by its number, never by its email address. A line about too many attempts names the network address they came from.
• Grafana Labs, to tell us when the site is slow or failing. They receive operational metrics and traces: how many requests the site answers, how long they take and which fail, and running totals of sign-ups, purchases and downloads. No personal data: no email address, no name, no IP address and no account.

Marketing email

The release announcement is marketing, not service email, and it is treated that way: off by default, on only if you tick the box, and every message carries a link that unsubscribes you in one click with no login and no confirmation step. That link never expires.

Receipts, address confirmations and password resets are not marketing and have no opt-out, because they are the store doing what you asked it to do.

How long we keep it

Your account details stay until you ask us to remove them. Purchase records outlive the account, because tax and accounting rules require keeping them, but they are reduced to the amount, the date and the Stripe identifier.

Your rights

Ask for a copy of what we hold, ask for it to be corrected, or ask for the account to be deleted. If you are in the UK or the EU, those are rights rather than favours, and we will not make you explain why.

Write to hello@pressworks.dev. The data controller is Code Monkey, LLC, and these terms are governed by the law of Ohio.