Privacy
Last updated November 9, 2026
Your documents never reach us. Bindery reads, numbers and assembles your files inside your browser, on your device. There is no upload step, and the site’s security policy (connect-src 'self') stops the page from sending your files anywhere.
Data controller: Bindery is operated by [operator name and address to be added before launch].
What stays on your device
The bundle you’re working on (files, descriptions, settings) and your license are saved in your browser’s storage so your work survives a reload. We keep it there only because you asked Bindery to keep your work; it is strictly necessary for the service, so there is no consent banner. Use “New bundle” or clear your browser’s site data to delete it. Browser extensions you install can read web pages; that is outside our control.
What we receive
- When you buy: Stripe (through Link), as merchant of record, collects your name, email, billing address and payment details as an independent controller under its own privacy policy. We receive your email address, country, the product you bought, and order and license details. We never see card numbers.
- When the page checks or restores a license: it sends us your license key or checkout reference, and we ask Stripe whether the purchase is active. We don’t keep a database of these requests.
- Anonymous usage counts: to see which steps people get stuck on, the page reports a handful of events, such as “opened the sample”, “opened export” or “bought a Case Pass”, with the referring site and rough size buckets (for example “4–10 exhibits”). No cookies, nothing stored on your device, and never anything about your documents or file names. To tell visits apart for a single day, our server combines your IP address and browser type into a code that changes every day and can’t be traced back to you; the IP address itself is not stored. We keep these counts for 13 months.
- Server logs: our host, Cloudflare, processes your IP address and basic request details to deliver the site and protect it from abuse, under its own privacy policy.
We don’t use cookies for advertising or analytics, and we don’t track you across sites. Because of that, Do Not Track signals change nothing here.
Why we use it (UK/EU legal bases)
- To perform our contract with you: delivering and checking your license, and support.
- To meet legal obligations: tax and accounting records.
- Our legitimate interests: keeping the service secure, preventing abuse, and counting anonymous usage to improve the product.
How long we keep it
Order and license records: 7 years, as Hong Kong tax rules require. Support emails: as long as needed to help you, then deleted. Server logs are kept by Cloudflare for a short period under its policy.
Where it goes
We are based in Hong Kong. Our providers, Stripe and Cloudflare, process data in the United States and elsewhere under their standard safeguards. We don’t sell or share your personal information.
Your rights
You can ask to access, correct or delete your information, object to its use, or receive a copy, by emailing support@your-domain.example. You can also complain to the Information Commissioner’s Office (UK), your EU data protection authority, or the Office of the Privacy Commissioner for Personal Data (Hong Kong).
Children
Bindery is not directed at children under 16.
Changes
If we change how we handle personal information, we’ll update this page and the date above, and email paying customers about material changes.