Privacy Policy

When you create an account

We collect your name, your email address, and a password — stored only as an Argon2id hash, never in readable form. We also record whether your email has been confirmed, and when your account was created and last updated.

We record your confirmation that you are 18 or older, and which versions of these policies you accepted, together with the date.

When you sign in

We create a session record holding a session token, its expiry, and the IP address and browser user-agent the session was created from. Sessions last 7 days and refresh as you use the site. While you are signed in, we also keep a record of your activity on the site, such as which videos you have started or finished, so we can offer features like resuming where you left off.

Security and account management

Single-use email-confirmation and password-reset tokens, which expire after one hour and are deleted once used. If you turn on two-factor authentication, we store your authenticator secret and your encrypted backup codes, plus a failed-attempt counter and a lockout time.

Membership

Which entitlements you hold and when they start, end or are withdrawn; your subscription’s status, billing period end and cancellation date; and a reference identifier for the payment behind it.

Administrative records

We keep an audit log of security- and account-sensitive actions: what happened, whether it succeeded, who did it, what it affected, the IP address and user-agent, and a short technical detail record which identifies people by internal identifier rather than by name or email. The audit log never contains passwords, tokens or secrets.

Cookies and similar storage

We set cookies for authentication and session operation — keeping you signed in, and protecting sign-in against abuse. We also keep rate-limiting counters in our own server-side store.

As of this version, this site carries no Google Analytics or gtag, no Plausible, PostHog, Mixpanel, Segment, Fathom or Matomo, no Meta or Facebook pixel, no Hotjar, and no advertising or cross-site tracking pixels. Our public pages load no third-party analytics or marketing scripts, and our emails are plain text with no tracking pixels and no images. If that changes, this page changes with it.

We are stating what exists. We are not reaching a legal conclusion about whether consent is required where you live.

Service providers

• Email. Transactional email — account confirmation, password reset, and membership notices — is sent through a third-party email delivery provider, which receives your email address and the message text.
• Video. Our video is hosted by a third-party video platform and plays in an embedded player. When you press play, your browser connects to that platform directly, so it receives your IP address, your user-agent and details of the request. We do not send it your name or your email address.
• Hosting. Our application, database and cache run on a virtual private server rented from a third-party hosting provider and administered by us. That provider has the access to its own infrastructure that any hosting provider necessarily has.
• Payments. We have not yet engaged a payment processor, so no payment data is being processed today. When membership payments begin, they will be handled by a third-party payment processor; our records are designed to hold only a reference identifier, and we do not receive or store full card details.

How long we keep things

Sessions expire and are removed. Confirmation and reset tokens are deleted when used or when they expire. Account, membership and audit records are retained while the account exists, and membership and audit records may be retained afterwards where we need them for billing disputes, fraud and security, accounting, or legal obligations.

We have not yet set fixed retention periods.

Deleting your data

There is no self-service delete button today. Write to info@ourkindoflove.net from the address on your account and we will respond and explain what we are able to remove and what we must retain.

Records of the fact that a payment and a membership existed, and security and audit records, are retained for disputes, fraud prevention, accounting and legal obligations.

Your rights

Depending on where you live, you may have rights to access, correct, delete or export your data, or to object to certain processing. Write to info@ourkindoflove.net and we will do our best to help.

Minors

We do not knowingly permit accounts for people under 18. If we learn that an account belongs to someone under 18, we will close it and address the associated account data appropriately. See Age & eligibility.