Small print
Privacy
What we hold about you, why we hold it, how long for, and how to get a copy of it or get rid of it. It is specific on purpose: some of what this site collects is unusually personal, and a vague notice would not be an honest description of it.
Who we are
Affection Library is run by Profectify LLC, 256 Chapman Road STE 105-4, Newark, Delaware 19702, USA. We are the data controller for everything described on this page. You can reach us at hello@affectionlibrary.com or through the contact page.
[TO CONFIRM: whether a representative under Article 27 of the UK and EU GDPR has been appointed, and their name and address. We are established outside the UK and the EEA and we offer goods to people in both, so one is very likely required.]
What we collect
If you are only reading
Which pages were looked at, and when. If you accepted the analytics cookie, that is joined up by a random visitor id so we can tell one visit apart from two. There is no advertising network on this site, nothing is shared with advertisers, and nothing is used to follow you anywhere else.
If you take the check-in
Your twenty answers, your score, which of the five areas came out lowest, and — only if you ask us to send the result to you — your email address. Your answers describe your own relationship, including how you handle conflict and how close you can stand to be. That makes them special category data, and the section below explains what follows from that.
If you buy something
Your name and email address, what you bought, what you paid and in which currency, the country used to work out tax, and a record of the consent you gave to immediate delivery. Card details go straight to Stripe. They do not reach our servers and we never see your full card number.
If you have an account
Your email address; your password stored as an Argon2id hash, which we cannot read or reverse; your currency preference; which chapters and lessons you have opened and how far through them you got; and anything you have written in a reflection.
Reflections
The written prompts inside the course ask you about your own relationship. What you write is shown back to you and to nobody else. It is not read as a matter of routine, it is not used to train anything, and it is never used to decide what to sell you.
If you subscribe, we keep your address, when you consented, the wording you were shown when you did, and a log of which messages we sent you.
Special category data — the honest version
Three things we hold are what Article 9 of the UK and EU GDPR calls special category data, because they concern your sex life or your sexual orientation:
- your check-in answers, which describe your intimate life;
- the free text you write in reflections about your relationship;
- the fact that you bought a piece of sexual wellbeing content.
Our lawful basis for all three is your explicit consent, Article 9(2)(a). In practice that means we ask for it in plain words at the moment we collect it and separately from anything else; nothing is ever pre-ticked; and you can withdraw it at any time, as easily as you gave it. Withdrawing does not make the earlier processing unlawful, but it stops any further processing and we delete the detail.
Why we are allowed to hold the rest
| What we do with it | Lawful basis |
|---|---|
| Give you the thing you bought, and keep giving you access to it | Contract — Article 6(1)(b) |
| Keep order, payment and tax records | Legal obligation — Article 6(1)(c) |
| Keep the site secure, and stop fraud and abuse | Legitimate interests — Article 6(1)(f) |
| Send marketing email, set the analytics cookie, and anything under Article 9 | Consent — Article 6(1)(a) |
No decision is made about you by automated means that has a legal or similarly significant effect. The check-in result is a prompt for reflection. It is not a diagnosis, and it is not a decision about you.
How long we keep it
| What | How long | Then what |
|---|---|---|
| Check-in answers | 24 months | The individual answers are erased. We keep the score and the band, which are no longer special category data on their own. |
| Reflections | Until you delete your account | Deleted with the account, immediately. |
| Order records | 6–10 years | Kept because accounting and tax law requires it, separately from your account. The range is because the minimum differs between the countries we sell into. |
| Visitor events | 90 days | Deleted. Long enough to see what is working, too short to follow anyone. |
| Sent-email logs | 180 days | Deleted. Kept that long for deliverability, and so we can show you what we actually sent. |
| Account details, reading and lesson progress | Until you delete your account | Deleted with the account. |
| Security and administrative logs | [TO CONFIRM] | [TO CONFIRM: the retention period for sign-in and admin audit records, to be set alongside the data-retention job.] |
Deleting your account is done at /account/delete. It removes your account, your reflections, your progress and the link between you and any check-in result. Order records survive it, because we are required to keep them, and they are reduced to the fields the law actually asks for.
Who else touches it
| Who | What they do |
|---|---|
| Stripe | Takes payment and holds the card details. We receive the last four digits and the card’s country, never the number. |
| SMTP2GO | Delivers our email. |
| Linode | Stores the files you download, and serves them through short-lived signed links. |
| Bunny | Delivers course video. |
| Matomo | Analytics. We run it on our own infrastructure, so this data is not handed to an analytics company at all. |
We do not sell your data. We do not share it with advertisers. We do not use it for cross-site tracking.
We are a US company and some of these processors operate outside the UK and the EEA, so personal data does cross a border. Where it does, we rely on the standard contractual clauses or an equivalent safeguard. [TO CONFIRM: the transfer mechanism recorded for each processor, and the transfer risk assessment behind it.]
Your rights
You can ask us to:
- give you a copy of everything we hold about you;
- correct anything that is wrong;
- erase it — do this yourself at /account/delete;
- hand it over in a portable, machine-readable form, to you or to somebody else;
- stop a particular use you object to;
- withdraw a consent you previously gave, including the Article 9 one.
Email us and we will do it. There is no charge, and we will answer within one month. If we cannot do what you asked, we will say why.
You can also complain to a supervisory authority. In the UK that is the Information Commissioner’s Office, ico.org.uk. In the EU it is the data protection authority for the country you live in. You do not have to raise it with us first, though we would rather you did.
How it is kept safe
- Passwords are hashed with Argon2id. Nobody here can read yours.
- IP addresses are stored as keyed hashes, never in the clear.
- Downloads run through signed links that expire, and are re-checked against a live entitlement every time.
- The site is served over HTTPS only.
Cookies
Every cookie this site sets is listed by name, purpose and lifetime on the cookies page, along with a way to change your mind.
Children
This site is for adults. We do not knowingly collect anything from anyone under 18, and some material sits behind a separate age confirmation.
When this page changes
We will update it when the site changes, and the date at the top is when that last happened. If a change matters — a new processor, a new purpose, a shorter or longer retention period — we will tell subscribers by email rather than quietly editing the page.