The short version
The members area keeps as little as possible. It does not store your name, email address or any payment details.
What is stored
- Your account: your username, a scrambled (hashed) version of your password, your access expiry date, and the time you last signed in. I may also note the PayPal transaction reference against your account so I can match it to your payment.
- Sign-in attempts: the username and IP address of failed sign-ins, kept briefly to block guessing, and cleared automatically after about a day.
- Activity log: a record of sign-ins, downloads and account changes (your username, what happened and when, but no IP address), kept so I can investigate problems.
Cookies
One cookie, used only while you are signed in, keeps you logged in. It is removed when you close your browser or sign out. Visitors who haven't signed in get no cookie.
Other services
- PayPal handles your payment and tells me your name and email address so I can send your credentials. That information stays in PayPal and in my email, not in the members database. See PayPal's own privacy notice.
- Duo Security provides the phone approval step. Duo holds your username and the device you enrol. See Duo's own privacy notice.
- The website is stored with a UK hosting provider.
Your rights
You can ask what is held about you, ask for it to be corrected, or ask for your account to be deleted, by emailing me. I will respond within a month.