What we collect, and what we never do with it.

2. Data you give us

When you create an account we store your email address, your name, your company name, and the industry you select. You may optionally upload a profile picture. If you register with a password, we store it only as a salted hash, never in readable form.

3. Signing in with Google, Microsoft, or Facebook

If you choose to sign in with an identity provider, that provider tells us your email address, your name, and your profile picture so we can create or recognise your account. We request no other permissions, we cannot see your password with that provider, and we do not post anything to your account there.

Using one of these buttons means the provider also learns that you signed in to this service. Their own privacy policy governs what they do with that.

4. Purchases and payment

Payment is processed by Stripe. Card numbers and payment credentials are entered on Stripe's systems and never reach ours. We record which documents or bundles you bought, the amount, the number of items, a Stripe reference for the transaction, and when it happened. We keep this record because it is what entitles you to download the files you paid for.

5. Cookies and local storage

We use only what the service needs to function. We do not use advertising or cross-site tracking cookies.

• pb_auth — keeps you signed in. Encrypted and httpOnly, so page scripts cannot read it.
• cyber_prepare_cart — remembers the documents in your cart before checkout.
• pb_oauth_flow — a short-lived cookie that exists only during a social sign-in, to protect that sign-in from tampering. It is discarded as soon as the sign-in finishes.
• Your light or dark theme choice is stored in your browser's local storage. It stays on your device and is never sent to us.

6. Technical and security data

To protect accounts and downloads from abuse, we count recent requests against the network address they came from. These counters are held briefly in server memory, are not written to our database, and are not used to build a profile of you.

7. Who else sees your data

We do not sell personal data, and we do not share it for advertising. It is shared only with the providers needed to run the service: Stripe for payment processing, the identity provider you choose to sign in with, and the infrastructure that hosts the application and its database. We may disclose data where the law requires it.

8. Your rights

You can ask us for a copy of your data, correct it, or have it deleted. You can change your name, company, industry, and profile picture yourself at any time from your account settings. To delete your data, follow the instructions on the data deletion page. Depending on where you live, you may also have the right to object to certain processing or to complain to your local data protection authority.

9. How long we keep it

Account data is kept while your account exists, and is removed when you delete it. Records of completed transactions are kept for as long as accounting and tax rules require, even after an account is closed. Section 3 of the data deletion page sets out exactly what is removed and what is retained.

10. How we protect it

Your session is carried in an encrypted, httpOnly cookie. Every download is checked against your purchase record on the server before a file is released, and files are served through short-lived, access-controlled links rather than public URLs. Passwords are stored only as hashes.

11. Children

This service is intended for people working in or for an organisation, and is not directed at children. We do not knowingly collect data from children.