Privacy
Plain English. This is a pilot; the rules are simple.
What we store
Your email address. Tab-group readers also have a payment-method reference held at Stripe — used to settle the tab when it reaches £5. We never see or store card numbers, only the last 4 digits for your receipts.
What we never store
IP addresses. Browser or device identifiers. Third-party analytics scripts. The pilot is measured with anonymous counters tied to a random session id, not to you.
Your reading history
Treated as sensitive. Never shown to other readers, writers, or anyone else. Never sold. Visible only to you at /account.
Deleting your account
One tap removes your email and detaches your payment reference from Stripe. The anonymous money records stay in the ledger — they keep the books honest for everyone — but after deletion nothing in them links to you. This is pseudonymisation, not erasure of the money record, because the ledger is append-only by design.
The two-group experiment
You are randomly assigned to a balance group or a tab group at sign-up. This assignment is stored on your account to keep it consistent. The pilot's purpose is to compare the two groups. The assignment is disclosed here and in the FAQ on the home page.
Pilot measurement data
The anonymous counters used to measure this pilot are purged within 30 days of the pilot ending.
Card handling
All card entry happens inside Stripe's hosted fields. We never receive card numbers. Stripe's own privacy policy applies to what they collect. We receive only what is listed above.