Privacy

We collect the minimum data needed to deliver your purchase: your email address and your Stripe customer ID + payment receipts. Your email is normalized to lowercase and stored as the key under which we look up your purchases for delivery + recovery.

Analytics and cookies: Plausible Analytics runs on every page; it is cookie-free and only counts aggregated visits. Google Analytics 4 runs only if you click "Accept" in the cookie banner. It then sets first-party cookies (_ga, _ga_*, kept up to 2 years) to recognise returning visits, and Google receives your IP address and the pages you view. If you choose "Decline" or ignore the banner, the site sets no cookies at all. You can change your choice at any time with "Cookie settings" at the bottom of every page.

We do NOT collect: behavioural profiles, advertising cookies, or third-party tracking pixels, and we never sell your data.

Third-party processors: • Stripe — payment processing. Stripe stores your name, payment method, billing country. • Amazon Web Services (S3, CloudFront, Lambda, DynamoDB, SES) — hosts the site, the Lambda backend, and sends transactional email. Their infrastructure runs in the EU (eu-central-1). • Plausible Analytics — cookie-free, aggregated traffic counts. No personal data leaves your browser to Plausible. • Google Ireland Ltd. (Google Analytics 4) — visit statistics, only after you accept analytics cookies. Google may process data outside the EU under its standard contractual clauses.

Retention: your purchase records and feed tokens are kept indefinitely while you have an active feed. Idempotency markers (Stripe event IDs) auto-expire after 30 days. Recovery rate-limit counters auto-expire after 24 hours.

Delete-my-data request: email stories@anicha.space and we will revoke your feed and erase your customer + purchase rows from our database within 7 days. Stripe-side records remain per Stripe's own retention policy.

Last updated: 2026-10-06.