Privacy

No banner, because
there is nothing to consent to.

Why there is no cookie pop-up

Consent banners exist because most sites store or read something on your device for advertising and cross-site tracking. This one does not. The only cookie we set is the one that keeps you signed in, and only once you have made an account and signed in. A cookie that is strictly necessary to provide the thing you asked for does not need consent, and we have no others.

What we count

We keep a counter of how many times each page was viewed each day, which site linked to it, which country the request came from, and whether it was a phone, tablet or computer. That is a number in a row. There is no identifier, no cookie, no fingerprint, and no attempt to recognise the same visitor twice, so no individual can be picked out of it.

What we never store

We do not store IP addresses. We do not use Google Analytics, advertising pixels, session recording, heatmaps or any third-party tracker. Nothing about you is sold or shared.

The messages

Messages are visible to the organiser who made the kit, and to anyone they choose to show them to. They are not public, not indexed by search engines, and not used for anything else. The organiser can delete any message, and asking us to delete a kit removes it and everything in it.

Accounts

An organiser account stores a name, an email address and a hashed password. The password is stored as a PBKDF2 hash, so we cannot read it. Contributors do not need an account and we ask them only for the name they want on their message.

Payments

If you order a printed book, payment and the delivery address are handled by Stripe. We keep the order, the delivery name and address needed to post it, and a reference. We never see your card details.

Getting it removed

Ask and we will delete your account, your kits and every message in them. There is no retention period we are clinging to.