We store the order. Not much else.

Each of these because you did something that required it.

Your account

Name, email address, a hashed password, and — if you signed in through a provider — the provider name and its account id. Never a provider password.

Orders and licences

What you bought, what it cost, which gateway took the payment, its reference, and the licence keys and domains issued against it.

Messages

Support tickets and their replies, and anything sent through the contact form.

Technical logs

Server logs carrying an IP address and a timestamp, kept briefly for security and debugging.

Usage statistics

Only if you agree: which pages you opened, roughly where you arrived from, and what kind of device you used. Held by Google Analytics under your consent, never joined to your account, and never used to identify you.

Each item above earns its place, or it is not stored.

To perform the contract

Delivering source, issuing licence keys and answering support all need an account and an order behind them.

To meet the law

Sales records and invoices are kept for the period tax law requires, which outlasts an account.

To keep the site standing

Rate limits, a captcha on public forms, and logs that show an attack while it is happening.

Because you agreed

Usage statistics rest on your consent and nothing else. It is the one thing here you can withdraw at any moment, and withdrawing costs you no part of the site.

A few are needed to run a shop. The rest wait for your answer.

Session and basket

Keeps you signed in, holds what you have added, and remembers the language you chose. The site cannot work without these, so they are not offered as a choice.

Security

A short-lived token proving a form was submitted from this site rather than by somebody else on your behalf.

Your answer

The choice you make on the cookie panel, so you are not asked on every page. Set whichever way you answer.

Analytics

Google Analytics, and only once you have said yes. Decline and nothing is written to your device — the cookies are not set, and any that already exist are cleared.

A short list, each name doing exactly one job.

Payment gateways

Stripe, PayPal or Helio, depending on how you paid. Each receives what a payment needs and keeps its own records under its own policy.

Email delivery

Receipts, verification links and support replies leave through our mail provider.

Sign-in providers

Only if you choose social sign-in, and only your name, email address and provider id come back.

Captcha

Google reCAPTCHA on public forms, where it is switched on, to keep spam out.

Analytics

Google Analytics, once you have agreed to it, to count visits and see which pages are read. It receives page addresses and a device identifier, and never your name, email address or anything about what you bought.

Nothing is kept indefinitely except the records the law pins down.

Account

Until you delete it.

Orders and invoices

Six years from the sale, because tax law requires it. Trimmed to the bare record when an account is deleted.

Support threads

Two years after the ticket is closed.

Server logs

Fourteen days.

Usage statistics

Fourteen months at Google, which is the shortest retention their analytics offers.

Ask and it happens. No fee, and no need to explain why you are asking.

Access and export

A copy of everything we hold about you.

Correction

Change your name or email yourself in settings, or ask us to.

Deletion

We remove the account and everything not held back by the retention rules above.

Withdrawal

Take back your cookie consent whenever you like, through the Cookies link in the footer. Nothing you have already been shown depends on it.

Objection and complaint

Object to any processing you disagree with, and complain to your data protection authority if we get it wrong. In the UK that is the ICO.