Privacy Policy

1. What we collect

When you sign in with Google we receive your Google account identifier (the `sub` claim), your email address, your email-verified status, your display name and your profile image URL. We use the identifier to recognise you on future visits; we do not use your email address as your account key.

When you buy credits we store the order: what you bought, the amount, the currency, the Stripe identifiers for the payment, and the resulting credit transactions. Card data never reaches our servers.

We also keep a session cookie, and technical logs (IP address, user agent, timestamps) needed to keep the service secure and to diagnose faults.

2. What we do not collect

We do not store your password — there is no password, because sign-in is delegated to Google.

We do not receive or store card numbers, CVCs or bank details. Stripe processes the payment and we only receive the result plus non-sensitive identifiers.

We do not sell personal data, and we do not run advertising trackers on this site.

3. Cookies and local storage

We set one essential cookie, `session_token`, which keeps you signed in. It is HttpOnly, SameSite=Lax and Secure on HTTPS, and it expires after 7 days of inactivity.

The site stores a theme preference in your browser's local storage so dark mode survives a page reload. That value never leaves your browser.

We do not use third-party advertising or analytics cookies. If we add analytics later, this page will name the provider before it is enabled.

4. Who else is involved

Google (sign-in): receives the standard OAuth request and tells us who you are. See Google's privacy policy for how Google handles that.

Stripe (payments): receives the payment details you type into its hosted checkout, and tells us whether the payment succeeded. Stripe is the merchant of record for the charge.

Cloudflare (hosting): serves the site and processes requests on our behalf, including the D1 database that holds accounts, credits and orders.

We do not share your data with anyone else except where the law requires it.

5. How long we keep it

Account data, credit balance and order records are kept while your account exists.

When you delete your account we remove your profile, sessions, credit balance, credit history and order records, except the minimum payment records we must keep for tax and accounting purposes.

Server logs are kept for a short operational window and then discarded.

6. Your rights

You can see and correct your display name in settings, delete your account at any time, and email us to ask what we hold about you or to request a copy.

If you are in the UK or EU, you have rights of access, rectification, erasure, restriction, portability and objection under the GDPR. If you are in California, you have rights to know, delete and correct under the CCPA/CPRA. We honour these requests for all users, wherever you live.

We do not use your data for automated decisions that have a legal or similarly significant effect on you.

7. Security

Sessions are random 32-byte tokens stored only as SHA-256 hashes; the raw token lives in your browser. Transport is HTTPS. Payments are handled entirely by Stripe, which keeps us in the lightest PCI scope (SAQ A).

No system is perfectly secure. If we discover a breach affecting your data, we will notify affected accounts and, where required, the relevant regulator.

8. Children

The site is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, email us and we will remove it.

9. Changes and contact

If this policy changes we will update the date at the top of the page and, for material changes, tell signed-in users by email.

Privacy questions and data requests: hello@kdpbookkit.com.

Contact

Anything unclear in this document? hello@kdpbookkit.com