Browser purchase privacy
Updated October 20, 2026
This notice covers the browser preorder and its account-activation service. It does not replace the separate app or general website privacy notices.
Information used
We use the purchase email, order identifier, product and purchase/refund status to verify orders, deliver access when ready, restore access and handle support. The account service stores purchase records and verification timestamps. Email-link and browser-session tokens are stored as hashes. It uses hashed network identifiers and short-lived counters to limit abusive requests.
Who processes it
- Stripe / Link: checkout, receipts, payment processing and refunds. For checkouts marked “Sold through Link,” Link also provides merchant-of-record tax handling and transaction support.
- Cloudflare: hosting, account records and secure browser sessions.
- Resend: activation and purchase-related email delivery.
Our account service does not collect or store your full card number or security code. The providers handle information under their own privacy notices.
Email and cookies
Activation links expire after 15 minutes and can be confirmed once. A secure, HTTP-only first-party cookie keeps you signed in for up to 30 days. Signing out clears that browser session without cancelling your order. Purchase and activation emails are transactional; receiving them does not subscribe you to marketing.
Retention and requests
Expired verification links, sessions and rate counters are periodically cleaned up. Order records are kept to administer purchases, refunds and support; records may also need to be retained for applicable accounting or dispute requirements. Contact us about access, correction or deletion. Removing the only order record may prevent later access restoration.