Privacy Policy

This explains what we collect, why, what we do with it, and how to make us stop. It is written to be read, not to be survived.

Who is responsible

PLR.Today is the data controller for the information described here. Our full trading identity and postal address are on the contact page. For anything on this page, write to info@plr.today.

What we collect, and why

Your email address. Collected at checkout and when you sign in. We need it to deliver what you bought and to let you back into your library, so the legal basis is performance of our contract with you. Without it there is no way to give you the thing you paid for.

Your name and billing country. Collected at checkout by Stripe. The country determines the tax we must charge; the name appears on your receipt. Legal basis: performance of the contract and our legal obligations.

Your phone number, only if you choose to give it. We do not ask for it at checkout, because a phone number is not necessary to send you a download and collecting it as if it were would be wrong. If you add one to your account so we can reach you about an order, that is your consent, and you can remove it at any time.

Payment details. We never see them. Stripe processes your card and we receive only the result, the last four digits, and the card brand.

Download records. When you open a file we record which product, when, and the requesting IP address and browser. This exists to detect a shared or leaked account, which is the main way this kind of business is stolen from. Legal basis: our legitimate interest in preventing fraud.

Technical logs. Our hosting provider keeps standard server logs.

What we do not do

We do not sell your data. We do not share it with advertisers. We do not run advertising trackers or analytics on this site — see the cookie notice. We do not use your data to train anything. We do not send marketing email unless you asked for it, and every such email has a one-click unsubscribe.

Who else processes it

Stripe processes payments and handles fraud checks. For some of that work Stripe acts as its own controller rather than on our instructions, under its own privacy policy.

Supabase hosts our database and authentication.

Resend delivers our email.

Vercel hosts the site.

We have data processing agreements with each of them. Where data reaches the United States, transfers rely on the EU–US Data Privacy Framework where the recipient is certified, and on Standard Contractual Clauses otherwise.

How long we keep it

Order records are kept for as long as tax law requires us to — typically six to ten years depending on jurisdiction — because we are not permitted to delete them sooner. Account and profile data is kept until you ask us to delete it. Download logs are kept for 12 months and then removed. Server logs are kept for 30 days.

Your rights

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, object to processing based on legitimate interest, or ask for your data in a portable format. Where we rely on consent, you can withdraw it at any time without affecting what we did before you did.

Email info@plr.today. We answer within 30 days and we do not charge for it.

One limit worth stating plainly: we cannot delete an order record while tax law requires us to keep it. We can delete everything else, and we will tell you exactly what we kept and why.

If you think we have handled your data badly you can complain to your national data protection authority. In the UK that is the ICO. We would rather you told us first, but you are not obliged to.

Children

This site is not intended for anyone under 16, and we do not knowingly collect their data.

Changes

If we change how we use your data in a way that matters, we will say so here and, where the change is significant, by email.