The short version
We collect as little as possible, we do not sell anything to anybody, and there is no mailing list you are added to without asking.
What we collect when you buy
Payment is handled by Stripe. Stripe collects your card details, your email address and your billing information in order to process the payment and issue your receipt. We never see or store your card number. We can see your email address and the fact that you bought, which is what lets us re-send your download links if you lose them.
Stripe's own privacy policy is at stripe.com/privacy.
You get one email from Stripe, which is your receipt. We do not add you to a marketing list and there is no sequence. If you email us, we keep that thread so we can help you.
Analytics and advertising
Advertising measurement. We advertise this product, and we need to know which adverts lead to a sale. When you arrive here from an advert we load a tracking pixel from the advertising platform. It records that a page was viewed and, if you buy, that a purchase happened and its value. It does not receive your name, your email address, or anything you typed. The purchase event carries the order reference so a reloaded page is not counted twice.
The pixel sets cookies belonging to the advertising platform, which may use them to recognise the same browser across sites. You can block this with your browser settings, an ad blocker, or Do Not Track. Nothing on this site requires the pixel to work. If it is blocked, the page, the checkout and your downloads all behave exactly the same.
What we send to the advertising platform when you buy. When a purchase completes, our server tells Reddit that a sale happened, so we can tell which adverts work. That message carries the order reference, the amount, and matching signals: your email address and your IP address, both put through a one way SHA-256 hash first, plus your browser type and the advertising cookie identifier already in your browser.
Hashing means we do not send your email address itself, we send a fingerprint of it that cannot be reversed back into the address. Reddit compares that fingerprint against its own to see whether you arrived from one of our adverts. It is the same information the tracking pixel in your browser would send, sent a second way so that ad blockers do not leave us guessing. It is not used to contact you, and we do not send it to anyone else.
How the page is used. We use Microsoft Clarity to understand how people read this page, because it is long and we want to know which parts get skipped. It records mouse movement, scrolling, clicks, and a replay of the visit that we can watch back.
What it does not record. Anything you type is masked before it leaves your browser. In practice there is very little to mask here: this page has no forms. Your name, email address and card details are entered on Stripe's own checkout page, which is a different site that Clarity does not run on and cannot see.
Clarity is a Microsoft product and the recordings are processed by Microsoft. We use them to improve the page, not to identify you. You can block it with an ad blocker or browser privacy settings, and the page works identically if you do.
We do not run a general analytics product such as Google Analytics, and we do not sell or share your information with anyone for their own marketing.
Your data
Email us at hello@lanternpathbooks.com to ask what we hold about you, to correct it, or to have it deleted. We will action it within 30 days. Note that we may be required to retain transaction records for tax purposes even after a deletion request.
Cookies
This site sets no cookies of its own. Stripe sets cookies on its own checkout pages, which are necessary for payment and fraud prevention.