The short version. We collect only what we need to sell you lessons and send the emails you ask for. Your account is your email address, plus anything you choose to add. We never sell your personal information. Stripe handles your card. Our site is for adults, and we don't knowingly collect information from children.
1. What we collect
- When you sign in: your email address. There's no password. You can also add a name for your Learning Passport, mark lessons you've finished, and choose which emails you get.
- When you buy: your name (we print it on your files), your email, your billing country and ZIP code, and what you bought. Your card details go straight to Stripe.
- When you download: the date and time, your IP address, your browser type and the number of downloads.
- When you join The Dispatch or vote for a Field Guide: your email, and the place or topics you picked. We email you once to confirm, and you're only on the list after you confirm.
- When you vote for a story idea or request a lesson: the idea you send, your kids' ages if you give them, and your email if you want to hear back. To stop repeat voting, we keep a scrambled one-way code made from your network address and the day, never the address itself.
- When you contact us or leave a review: whatever you send us.
- When you browse: we run our own simple analytics, built into our site. It records the page you visit, the website that sent you (just its name, like google.com), any campaign tags on our own links, your rough screen size, how far down the page you scroll, where on the page you click (a position and the button or link name), and steps like opening a preview or starting checkout. It never records what you type, uses no cookies, doesn't store your IP address, and no outside analytics company receives it. If your browser sends a Global Privacy Control or Do Not Track signal, we don't collect any of this. Our website host also keeps short-lived technical logs for security.
Cookies and storage. Our pages set no cookies. When you sign in, your browser keeps a sign-in token in its own storage so you stay signed in; signing out removes it. Our analytics keeps a random visit code in your browser's session storage, which your browser clears when you close the tab. Stripe's checkout page uses its own cookies to take your payment. The sign-in step uses Cloudflare Turnstile to check you're a person, not a bot. We don't use advertising or tracking cookies.
2. How we use it
- To take payment, deliver your files and stamp them with your name and order number
- To sign you in and keep your library ready for you
- To answer your questions and help with downloads
- To prevent fraud and unauthorized file sharing
- To send receipts, sign-in codes, order emails and the emails you signed up for
- To keep the tax and business records the law requires
3. Who we share it with
Only the companies that help us run the store, and only for that purpose: Stripe (payments and fraud screening), Supabase (sign-in, our database and file storage), Resend (sending email) and Cloudflare (our website host and the Turnstile bot check). We may also share information when the law requires it, or to stop fraud. If the business is ever sold, your information would move to the new owner under this same policy.
We never sell or rent your personal information, and we don't share it for targeted advertising.
4. Children's privacy
Our website is meant for adults. We don't knowingly collect personal information from children under 13. Kids use our printed lessons with a grown-up and don't need accounts. If you think a child has given us information, email [email protected] and we'll delete it.
5. Emails
Every email from The Dispatch has an unsubscribe link that works right away. Even after you unsubscribe, we'll still send sign-in codes, receipts and order emails for things you buy.
6. How long we keep it
Order records: as long as tax law requires, usually up to 7 years. Download records: [12 months]. Analytics: 13 months, then deleted. Your account: until you ask us to delete it. Email list details: until you unsubscribe. Support emails: [2 years].
7. Keeping it safe
The whole site uses HTTPS. Full lesson files sit in private storage, and only the signed-in buyer can download their own copies, through links that last 60 seconds. No system is perfect, but we work hard to protect your information.
8. Your choices and rights
You can ask us to show, correct, download or delete your personal information. You can delete your account yourself in Account settings. Email [email protected] and we'll respond within 30 days. When we delete an account, we keep only the order records tax law requires. Some states, such as California, Colorado and Virginia, give their residents extra privacy rights. We honor these requests for everyone, wherever you live, and we'll never treat you differently for using them.
9. Visitors outside the U.S.
We run the site from the United States, and your information is processed there.
10. Changes and contact
If we change this policy, we'll update the effective date and post a notice for important changes. Questions or requests: write to The Everywhere School at [email protected].