How we handle your data.

1. Who we are

Sundries (referred to here as "we", "us", or "the studio") is an independent studio that makes small productivity tools. The data controller for the purposes of GDPR is Sundries, reachable at hello@bysundries.co.

2. What we collect, and why

2.1 When you visit this website

Standard web server logs maintained by our hosting provider (currently Cloudflare Pages). These include your IP address, the page requested, and your browser type, retained for a few days for security and abuse prevention.

We also use Google Analytics to understand how the site is used — for example, how many people visit, which pages and blog posts they read, roughly where they're visiting from, and what device they're on. Google Analytics sets cookies in your browser to do this. We use these numbers only to improve the site; we don't use them for advertising. You can opt out with Google's opt-out browser add-on or by blocking cookies in your browser.

2.2 When you buy a tool

Payments are handled by our payment processor (Stripe). They collect the data needed to process a card payment — your name, email, billing address, and card details. We receive only the email address, the product purchased, and confirmation that the payment succeeded. We never see your card number.

See Stripe's privacy policy for how they handle your payment data.

2.3 When you activate a tool (e.g. harmony)

To verify your license, our license server stores:

• The email you bought with
• The license key issued to you
• Timestamps of when the key was created and most recently used
• A counter of how many times the key has been verified

That's the entire record. We do not collect or transmit any of the data inside your spreadsheet — your expenses, partner names, notes, balances — none of it ever leaves your own Google Drive.

2.4 When you email us

We keep the email so we can reply and reference it for future support. We don't add you to any mailing list without explicit consent.

3. Who we share it with

Only the service providers we strictly need to run the studio:

• Stripe — payment processing.
• Cloudflare — website hosting and the license server backend.
• Google Analytics — visitor statistics for this website.
• Resend — sends your license key email after purchase.
• Google Workspace — our inbox, for support replies.

We never sell, rent, or trade your data, and we don't use it to target you for advertising. If we ever need to disclose data under legal compulsion (e.g. a court order), we will tell you unless we are prohibited from doing so.

4. How long we keep it

• License records — kept indefinitely so your purchase remains verifiable. Delete on request.
• Payment records — kept by Stripe per their retention policy; we keep only the receipt and the email.
• Support emails — kept for up to 2 years, then archived or deleted.
• Server logs — typically rotated within 7 days.
• Analytics data — kept by Google Analytics for up to 14 months, then deleted automatically.

5. Your rights

Under GDPR and similar laws elsewhere, you have the right to:

• Ask what we hold about you (right of access)
• Correct information that's wrong (right to rectification)
• Have it deleted (right to erasure / "right to be forgotten")
• Have it sent to you in a portable format (right to portability)
• Object to certain processing

Email hello@bysundries.co from the address tied to your account and we'll action it within 30 days.

6. Children

Our tools are not directed at people under 16, and we do not knowingly collect data from them. If you believe a child has provided us with information, please email us so we can delete it.

7. Cookies

This site uses Google Analytics cookies to count visits and see which pages are read (see section 2.1). We don't set any advertising cookies. Our payment processor (Stripe) sets cookies on its own checkout pages — see their privacy policy for details. You can block or delete cookies at any time in your browser settings.

8. Changes to this policy

We will update this page if our practices change. The "Last updated" date at the top reflects the most recent revision. Material changes (e.g. new categories of data, new providers) will be highlighted on the homepage for at least 14 days.

9. Contact

Privacy questions, deletion requests, or anything else: hello@bysundries.co. We aim to reply within 48 hours.