Privacy policy

Last updated: August 2026

We keep data collection to a minimum. This page explains what we store, why, and the processors we rely on to run the site.

What we collect

  • Account email — if you sign in, we store your email address to give you access to the SERU tool and to send your sign-in link.
  • Site analytics — when you visit a page we record a random visitor ID (stored in your browser's local storage so we can recognise a returning device), the page URL, the referrer and your browser's user-agent string. This is first-party analytics used to understand traffic. It is not sold or shared for advertising, but the persistent visitor ID means it is not fully anonymous, so we only set it once you accept analytics cookies. You can decline via the cookie banner.
  • Referral code — if you arrive via a referral link, we store the code in a cookie for up to 45 days so a later purchase can be attributed.
  • Contact form — if you message us we store your name, email and message so we can reply.
  • Payment — payments are processed by Stripe; we do not see or store your card details.

Who processes your data

We share data only with the services needed to run the platform:

  • Neon — our PostgreSQL database provider, where accounts, sessions and analytics rows are stored.
  • Vercel — website hosting and edge network; processes request metadata (including IP address) to serve the site.
  • Stripe — payment processing. We never see or store your card details.
  • Resend — sends transactional email (sign-in links and receipts). We don't send marketing email unless you ask us to.

How long we keep it

Account data is kept for as long as your account is active. Analytics rows are retained for up to 24 months and then deleted. Contact messages are kept for up to 12 months. Payment records are retained for as long as UK tax and accounting rules require.

Your rights

Under UK GDPR you have the right to access, correct, delete or receive a copy of the personal data we hold about you, and to withdraw analytics consent at any time via the cookie banner. To exercise any of these, contact us through our contact page. We aim to respond within 30 days. You may also complain to the UK Information Commissioner's Office (ico.org.uk).