Data policy, plainly.
The archive collects the minimum a small digital shop needs. This page says exactly what and why. Final legal review before launch is pending; the practices below are already how the site behaves.
What we process
Orders. Payment runs entirely on Stripe’s hosted checkout — card details never touch this site. We store the order record Stripe reports back: your email address, country, the items and the amount, in order to deliver files, honour update entitlement and meet bookkeeping obligations.
Free specimen. Your email address, used to deliver the secure link. Marketing consent is a separate, optional, unchecked box.
Field Notes. Your email address with a consent timestamp, only after you opt in. Every dispatch has one-click unsubscribe.
Analytics. First-party, anonymous event counts (page path plus event name, e.g. “add to cart”). No cookies, no fingerprinting, no IP storage, no third-party trackers.
Logs. Standard technical server logs and fulfilment logs, without download tokens or more personal data than necessary, kept briefly for security and debugging.
What we never do
No selling or sharing of personal data, no advertising pixels, no marketing mail without opt-in, no accounts holding data you did not give us.
Third parties
Stripe (payments, under its own privacy policy) and our hosting provider (EU). That is the list.
Your rights
Access, correction and deletion requests: archive@tomorrowsfossils.com. Order records required for bookkeeping are retained for the legally required period; everything else goes when you ask.