Legal
Privacy Policy
The short version
We collect the least we can: an email address so you can get back into what you bought. There are no advertising trackers, no analytics scripts and no third-party cookies on this site, and we do not sell or share personal information.
What we collect
- Your email address — from Stripe when you buy, or when you ask for a sign-in link, or when you join the print-edition list.
- A purchase record — that you paid, when, and the Stripe checkout reference. We never see or store your card number.
- Certificate records — if you pass the exam: the name you type on the certificate, your score and the date.
- Abuse counters — short-lived counts keyed to an address or network address, so the sign-in form cannot be used to send junk mail.
- Standard server logs, kept by our host.
Your reading position, which chapters you have ticked off and your light or dark preference are stored in your own browser and never sent to us.
Cookies
One cookie: its_access, which proves you are enrolled. It is
strictly necessary, set only after purchase or sign-in, marked HttpOnly and
Secure, and lasts up to a year. Signing out deletes it. There are no advertising
or analytics cookies.
Who processes it
We use three service providers, each only for what it says: Stripe (payments), Cloudflare (hosting, delivery and the store that holds the records above), and Amazon SES (sending sign-in emails). They process data on our instructions. The site is served from a global network, so data may be processed outside your country. We do not sell personal information, and we do not share it for cross-context behavioural advertising.
How long we keep it
Purchase and certificate records are kept while your access lasts, and as long as we need them for tax and accounting. Abuse counters expire within hours. Print-list entries are kept until you ask us to remove them or the list is retired.
Your rights
Wherever you live, you can ask us what we hold about you, ask us to correct it, ask us to delete it, or ask for a copy — email [email protected] and we will answer within the time the law allows. California residents have these rights under the CCPA as amended by the CPRA, including the right not to be discriminated against for using them; we do not sell or share personal information, so there is nothing to opt out of. If you are in the UK or EU, our basis for processing is performing our contract with you (access and sign-in) and our legitimate interest in keeping the service secure.
Deleting your purchase record ends your access to the course, so we will say so before we do it.
Children
This course is sold to adults and is not directed to children under 13, and we do not knowingly collect their information.
Changes
Revisions appear here with a new effective date. Questions: [email protected].