Privacy
Privacy policy
Last updated 23 October 2026
Short version: this site sets one cookie so forms work, and collects nothing about you unless you contact us or buy something. There is no analytics, no advertising and no tracking pixel anywhere on this site.
What is collected, and when
- BrowsingNothing. There is no analytics script, no advertising pixel, no session recording and no third-party embed on these pages.
- The contact formYour name, email address and the message you write. Kept so we can reply, and for our own records afterwards.
- A purchaseYour email address, the platform you bought for, the order reference, a licence key if one was issued, and payment status. Card details are never sent to or stored on this server — Stripe handles the payment and only tells us whether it succeeded.
- Server logsOur hosting provider keeps standard web server logs — IP address, time, requested URL, user agent — for security and abuse prevention, as every web host does.
Cookies
One cookie: PHPSESSID. It is strictly necessary. It keeps your CSRF token valid between a form being drawn and being submitted, and lets the checkout window remember an error message across the redirect that follows a submit. Without it, the contact form and checkout both fail.
Your answer to the cookie banner is stored in your browser's localStorage, not in a cookie, precisely so that answering it does not set one. Choosing "allow" changes nothing about what is collected — it only dismisses the banner.
Stripe is loaded only when you click Buy or Donate, and then it is Stripe's own checkout page, under Stripe's privacy policy.
Who else sees it
- HostingThis site is hosted on shared hosting in the United States, which stores the files and the database.
- StripePayments, when you buy or donate.
- EmailReplies to a contact message come from support@sarahai.co.uk.
Nothing is sold, rented or shared for marketing. Ever.
How long it is kept
Contact messages are kept while they are useful and then removed. Order records are kept because they are financial records and because a licence key may need to be reissued. Server logs are kept by the host on their own schedule.
Your rights
Under UK GDPR you can ask what personal data we hold about you, ask for a copy, ask for it to be corrected, or ask for it to be deleted. Email support@sarahai.co.uk and it will be dealt with. If you are unhappy with the answer you can complain to the Information Commissioner's Office at ico.org.uk.
Children
This is a developer tool and is not directed at children. Nothing here is designed to collect data from anyone under 13.
Changes
If this policy changes, the date at the top changes with it.