Privacy policy

Written to describe what this site actually does. If you find a discrepancy between this page and the site's behaviour, that is a bug — tell us and we will fix one of them.

Last updated 7 August 2026

Who we are

PairFoundry operates pairfoundry.com. For anything in this policy, contact contact@pairfoundry.com.

What we collect, and why

If you never create an account

Nothing is stored on your deviceuntil you choose “Accept analytics” in the cookie banner. Decline, or ignore it, and no analytics identifier is created.
If you accept analytics:a random session identifier in your browser’s sessionStorage (gone when you close the tab), and a first-touch referrer record in localStorage kept for 30 days. Our server records the page path, referrer, any UTM parameters, approximate country and city from the request (never the IP address itself), and a device category.
If you accept analytics, we also load FlowGlance, a second analytics tool that runs on flowglance.com. It writes a random visitor identifier to localStorage that persists across visits, plus a session identifier that expires after 30 minutes of inactivity, and sends page views, clicks, scroll depth and the sections you read to its own servers. It sets no cookies. Choose “Essential only” and the script is never loaded at all — and if you had accepted before, those identifiers are deleted the moment you change your answer.
Our servers and our hosting provider produce ordinary request logs. These may contain your IP address and are retained by the provider for a short period. We do not query or analyse them except when debugging an incident.

If you create an account

Your email address. That is the entire account. There is no password, no name field, no profile.
Authentication is handled by Clerk. They store your email, verification codes, session tokens, and security metadata (IP and user agent for each sign-in) to detect abuse. We never see or store a credential.

If you buy something

We store: which product, the amount, the currency, the Stripe identifiers, and the resulting access grant. We keep these for accounting and so we can honour refunds.
We never see your card details. Payment is processed entirely by Stripe, who collect your payment details, billing address and any tax information directly. Stripe is the data controller for that information.

If you use the contact form

We store the name, email, topic and message you enter, a one-way hash of your IP address (for abuse prevention — the original IP is never stored), and your browser user agent. This is kept for two years so we can honour refund claims and see the history of a conversation.

Errors

When something breaks, our own error recording stores the error message, a stack trace, the page it happened on, your browser user agent, and your user id if you are signed in. We use this to fix bugs. It is deleted after 90 days.

Who else processes your data

These are the only third parties involved. There is no advertising network, no data broker, no Google Analytics, and no Meta pixel anywhere on this site. FlowGlance is our own analytics product, run by the same people who run PairFoundry — but it is a separate service on a separate domain, so we list it here like any other processor rather than pretending it does not count.

Processor	What for	What they receive
Clerk	Authentication and verification emails	Email address, sign-in IP and user agent, session tokens
Stripe	Payments and subscriptions	Email, payment details, billing address, purchase records
Vercel	Hosting	Request data including IP address, in transient logs
Neon	Database (United States)	Everything described above that we store
FlowGlance	Analytics, only after you accept	Page views, clicks, scroll depth, a random visitor and session identifier, and a device category. No IP address is stored and no cookies are set.
Cloudflare	DNS, email routing, file storage, bot check on sign-up	DNS queries; email sent to our addresses; when you create an account, your IP address and browser signals for the human-verification step

Our infrastructure is located in the United States. If you are in the UK, EEA or Switzerland, your data is transferred there under the relevant standard contractual clauses maintained by each provider.

Cookies and local storage

Name	Type	Purpose	Lifetime
`__session`, `__client_uat`	Cookie (Clerk)	Keeps you signed in. Strictly necessary.	Session / 1 year
`pf_consent`	Cookie	Remembers your answer to the cookie banner. Strictly necessary.	1 year
`pf.sid`	sessionStorage	Groups page views into one visit. Only if you accept analytics.	Until the tab closes
`pf.attrib`	localStorage	Remembers where you first arrived from. Only if you accept analytics.	30 days
`_fw_vid`	localStorage (FlowGlance)	Recognises a returning visitor across visits. Only if you accept analytics.	Until you clear it or choose “Essential only”
`_fw_sid`, `_fw_la`	sessionStorage (FlowGlance)	Groups page views into one visit. Only if you accept analytics.	30 minutes of inactivity, or until the tab closes
`pf_internal`	Cookie	Marks our own visits so they are excluded from statistics. Only ever set deliberately by us.	5 years

More detail on the cookies page, including how to change your answer.

How long we keep things

Account and purchases: while your account exists, and for 7 years after a purchase where tax law requires it.
Analytics events: 25 months.
Error records: 90 days.
Contact messages: 2 years.
Test mailbox: emails sent to our internal test address, 30 days.

Your rights

Wherever you are, you can ask us to show you what we hold, correct it, delete it, or send it to you in a portable format. Email contact@pairfoundry.com and we will respond within 30 days. We do not require you to explain why.

If you are in the UK or EEA, our legal bases are: contract (account and purchases), consent (analytics), and legitimate interests (security, abuse prevention, fixing errors). You may withdraw consent at any time and you may complain to your data protection authority.

If you are in California: we do not sell or share personal information as those terms are defined by the CCPA, and we never have.

Deleting your account deletes your email address from our records. Purchase records are retained in anonymised form where tax law requires it.

Children

This site is not intended for anyone under 16 and we do not knowingly collect their data.

Changes

If this policy changes materially, the date at the top changes and we describe what changed rather than silently editing. Anyone with an account gets an email for a change that affects them.