What we keep.

Your account. Your name, your email address, and — if you set one — your password, stored only as a one-way hash, so nobody here can read it. If you sign in with Google we receive your name, your email address, a profile image if Google sends one, and confirmation that Google has verified the address. We never receive your Google password. We also note when the account was created.

Your sessions. When you sign in we store a session token so you stay signed in, along with the IP address and browser your session came from. That is how a session can be recognised and expired.

Your orders. What you bought, the price and currency, whether it is paid, when, and the reference of the Stripe checkout it came from. Orders placed before we stopped selling printed books direct also hold the delivery name and address given at the time; nothing new adds one, because nothing we sell is posted.

Your submission, if you send one. The pen name, the description of your writing, and any links you include, plus whatever note an editor writes back.

Your reader-note choice. If you request the free Decision Audit, we keep the email address, optional first name, when and where you consented, which notes have been sent, and whether you unsubscribed.

Your card. Payment happens on Stripe's own pages, and your card number never reaches this site or its database. What comes back to us is confirmation that a payment succeeded, the email you gave Stripe for the receipt, and the billing address Stripe collects so that the correct tax is charged.

One cookie keeps you signed in. One more, set for a day when you complete a purchase, is what lets you see that order's receipt without an account. If you sign in with Google, a short-lived cookie is set so we can tell the reply came from the same browser; it expires when the sign-in finishes. That is all. There are no advertising cookies, no third-party trackers, and nothing that follows you to other websites.

We use Vercel Web Analytics to count pages and store events such as a book view, checkout start, completed purchase, and reader-list signup, and Vercel Speed Insights to measure how quickly pages actually loaded for real visitors. Both work without analytics cookies or a profile that follows you across sites. We use the aggregate funnel and the timings to improve the shop, not to identify a person.

If you explicitly request the free Decision Audit, we email the file, a short welcome sequence, relevant recommendations, and occasional new-release notes. Every one includes a one-click unsubscribe link. We also send transactional messages needed to complete a purchase: receipts, private shelf links, and abandoned-checkout reminders. Unsubscribing from reader notes does not suppress those purchase messages.

A short list of service providers processes data on our behalf: Stripe takes payments, Vercel runs the website and its analytics, Neon holds the database, our mailbox or transactional-email provider delivers receipts and reading notes, and Google authenticates you if you choose to sign in with them. The website and database are hosted in the United States, so if you order from elsewhere your details are handled there. Google's own privacy policy covers what they hold on their side.

We do not sell your data, rent it, or hand it to anyone for their own purposes. We would disclose something only if the law actually required it.

Account and shelf details are kept while your account exists. Order records outlive the account, because a sale is an accounting record and has to be kept — but they can be reduced to the bare transaction, with your name and address removed.

Write to hello@danicarl.com and ask. You can have a copy of what we hold, a correction to anything wrong, or the account and everything personal in it deleted. Deleting the account also deletes your shelf, so download anything you want to keep first — the files are yours and carry no DRM.

The press does not sell to children and does not knowingly keep anything about anyone under 13. If you believe a child has made an account, write to us and we will remove it.

If this notice changes, the date it came into force changes with it. If the change is one that matters, we will say so on the site rather than quietly editing the page. Questions go to hello@danicarl.com.