Privacy
What is collected, why, how long it is kept, and your rights over it.
Last updated 7 September 2026
Draft — not yet reviewed by a solicitor
These terms are a working draft written to be reviewed, not legal advice. They have not been checked by a qualified solicitor and should not be relied on as final. Business entity and contact details are still to be confirmed.
Who is responsible
Marnay Made is the data controller for personal data collected through this site.
What is collected
Only what is needed to run accounts, payments and access:
- Your email address, so you can sign in and so access can be attached to you.
- Purchase records: what you bought, when, how much, and your consent to immediate access. Card details are handled entirely by Stripe and are never seen or stored by this site.
- Entitlements: which tier you hold and when it expires.
- An access log: which gated pages your account viewed or was refused, and when.
- Anything you type into the contact or application forms.
Why the access log exists
Paid content is gated, so the site records which account viewed which gated page, allowed or refused. It exists to enforce access, detect account sharing, and understand which work is worth developing.
It is not sold, not shared with advertisers, and not used to build a profile of you beyond that purpose.
Legal basis
Contract, for accounts, payments and delivering access. Legitimate interests, for the access log — protecting paid content from being redistributed. Legal obligation, for keeping financial records.
How long it is kept
- Account and profile: while your account exists, then deleted on request.
- Purchase records: six years, because tax law requires it.
- Access log: 24 months, then deleted.
- Contact and application messages: 24 months.
Who else processes it
Supabase (accounts and database, hosted in the UK/EU), Stripe (payments), and the site's hosting provider. Each processes data on instruction, under their own terms.
Your rights
You can ask for a copy of your data, ask for it to be corrected or deleted, object to processing, or ask for it to be restricted. Use the contact page.
If you are not satisfied with how a request is handled, you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
This site sets one cookie: the sign-in session cookie, which is strictly necessary and only exists once you sign in. There is no advertising or third-party tracking, which is why there is no cookie banner.