Privacy Policy

What is collected

An email address when you sign in, subscribe, or buy. Purchase records from the payment provider. Checklist and reading progress if you are signed in. Download records including IP address and user agent, which exist to detect licence abuse. Product analytics events, only if you allow them.

Checklist progress for signed-out visitors is stored in your browser and never reaches the server.

Processors

PostgreSQL database hosting: stores accounts, purchases, entitlements and progress. Lemon Squeezy: merchant of record, processes payment and holds billing details. PostHog: product analytics, only after consent. Amazon SES and Brevo: transactional and sequence email. GitHub: repository access for Code Kit buyers. The application host: serves the site and holds server logs.

Each of these receives only what it needs. Payment card details never reach SEO for Solos: they are held by the merchant of record.

Analytics and consent

Analytics do not load until you allow them. The consent banner gates the initialisation itself rather than setting a flag inside an already-loaded tracker, which means declining genuinely results in zero requests to the analytics host.

No advertising cookies are set at any point, and no data is sold or shared with advertising networks.

Retention

Accounts and purchases are retained while the account exists, and purchase records are retained for seven years afterwards where tax law requires it. Download logs are retained for 12 months. Analytics events are retained for 12 months. Unconfirmed email addresses are deleted after 30 days.

Your rights

You may request a copy of everything stored about you, a correction, or deletion. Email the address on the about page and it is actioned within 30 days. Deletion removes the account, progress, and analytics identity; purchase records are retained where tax law requires, with personal fields minimised.

These rights apply regardless of where you live. GDPR and CCPA give some readers a statutory route to them; SEO for Solos does not distinguish.

International transfers

Data is processed in the United States and the European Union depending on the processor. Standard contractual clauses apply where required.