We sell runbooks; we do not run accounts, ads or analytics that profile you. This page says exactly what is collected to deliver a purchase, who processes it, how long it stays, and how to have it removed.
The email address you enter at Paddle checkout, because it receives the Paddle receipt and the single-use delivery link. The Paddle order and customer identifiers, so a refund can revoke access. Purchase and access timestamps. When a delivery link is redeemed or a file is fetched, the IP address and user agent are recorded for anti-abuse, and nothing else.
No account, password or profile. No card or bank data — Paddle handles payment as merchant of record and card data never reaches this site. No advertising or cross-site tracking, and no analytics script is loaded on this site. There is no newsletter and no marketing email.
After you redeem a delivery link, the delivery service sets a single HttpOnly session cookie so you can open the files without redeeming again. It expires after 30 days. Nothing else is stored in your browser by this site.
Paddle (payments, tax, receipts, refunds), Cloudflare (hosting, email delivery and email routing), and GitHub (source repository — no customer data). Each processor handles data under its own terms; we do not sell or rent personal data to anyone.
Purchase records are kept as long as accounting rules require. Access logs are kept for 180 days, email delivery logs for one year. The delivery cookie expires after 30 days. Refunded purchases lose access immediately.
Ask for access, correction or deletion of anything beyond the accounting record, and for a copy of what is held, at [email protected]. Deletion requests are handled within 30 days. Nothing here limits rights you have under applicable data protection law.
Email [email protected]. See also the terms of service and the refund policy.