Privacy

The short version

We hold your work email address, the categories you chose, and a log of what happened on your account. There is no advertising, no analytics that follow you, and nothing is sold or passed to anyone. We count visits to the public pages without a cookie and without anything that recognises you on another site. The cards themselves are about businesses, not about people.

What we store about you

• Your email address and its domain, which is how an account is identified.
• The categories you selected and when you changed them.
• Any note you write on a card, and which cards you marked as contacted.
• A log of sign-ins, refusals and changes, so that we can see what happened if something goes wrong. The addresses you connect from are stored as a salted hash, never as the address itself.

What we deliberately do not store

No password, because there is none: you sign in with a code sent to your address, and the code is stored only as a hash that is useless once used or expired. Your session is a random token in a cookie, and the database holds only its hash. No payment details. No third-party trackers or advertising pixels.

People in the cards

The cards are built from public records about companies and sites. We deliberately do not publish the names of directors, owners or any other individual, even where a public record carries them: what a subscriber needs is whether a business can pay and who controls it, which is a corporate fact rather than a personal one.

How long we keep it

Account details last as long as the account. The event log is kept for a year and then deleted. One-time codes are deleted once they are used or expired. If you ask us to delete your account we delete it, including your notes, and keep only the fact that an account on that domain existed and was closed.

Who else touches it

The site runs on a hosting provider, the database is a managed Postgres service, and the code email is sent by an email provider. Each of them processes it on our instructions and for nothing else. Data is held in the United Kingdom and the European Union.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it, by writing to contact@stanfell.com. We answer within a month. If you are not satisfied you can complain to the Information Commissioner’s Office.

Cookies

One cookie, set when you sign in, which keeps you signed in for a fortnight. It is necessary for the account to work and there is no other cookie to consent to. Visits to the public pages and the sign-in page are counted by our host’s privacy-friendly analytics, which sets no cookie and keeps no identifier that follows you from day to day or from site to site. If a sign-in link carried a tag saying where it came from, such as a partner site, we keep that tag with the new account.