Privacy policy
Last updated 14 August 2026
The short version
We collect your email address so we can send you what you paid for. We don't sell your data, we don't run advertising trackers, and we never see your payment credentials.
What we collect
- Your email address, which you give us at checkout so we can deliver your files and send future editions. To be exact: it is recorded when the order is created, which is a moment before you pay — so if you start a purchase and abandon it, that record exists. Ask us and we'll delete it.
- Order records — order ID, payment ID, amount, currency, status and timestamps.
- Your browser's user agent, stored with the order to help us diagnose failed payments.
- What you open once you are signed in — which pages of the book you read and which files you download, each with the time and your browser's user agent. This is kept against your email address and is visible to us. It exists so we can answer “did my download work?” without asking you to reproduce the problem, and so we can see whether the book is being read. Repeat views of the same page within half an hour count once; every download is recorded separately.
We do not collect your name unless you give it, and we never receive your card number, CVV or bank credentials — those go directly to Razorpay and never touch our servers.
Why we collect it
To take payment, deliver your download, honour refunds, send the free updates your purchase entitles you to, and keep the financial records we are legally required to keep. The record of what you have opened is used for support and to understand which parts of the book people actually reach — nothing else. It is never combined with anything from outside this site, because there is nothing from outside this site.
Who we share it with
One processor, and only one:
- Razorpay — payment processing and checkout. They receive your email and payment details under their own privacy policy. Some purchases made during August 2026 were processed by Gumroad under theirs.
The site runs on Cloudflare, which processes requests on our behalf. We do not currently use any email provider — your files are delivered on screen, not sent. If that changes we will name the provider here before it starts handling anything of yours.
We do not sell, rent, or trade your data with anyone, for any purpose.
Cookies and tracking
We set no advertising or analytics cookies, and this page loads no third-party code at all — card details are entered in Razorpay's own secure frame, under their privacy policy.
We should be exact about what that does and does not mean. There is no Google Analytics, no advertising pixel and no third party watching you here. There is a record, in our own database, of which pages you opened and which files you downloaded once you are signed in — described above. Nobody outside this site can see it, and it goes no further than us.
How long we keep it
Order records are kept for as long as tax and accounting law requires. Your email stays on the updates list until you ask us to remove it — write to us and you're off it. The record of what you have opened is kept while your account exists; ask us and we will delete it, which costs you nothing — your access comes from the order, not from that log.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email hello@crisisblueprint.shop and we'll action it within 30 days. Deleting your record ends your access to future updates, and we may need to retain order data where the law requires it.
Security
Your files are stored privately and served only to a signed-in account with a completed purchase, checked on every request. Payment credentials never reach us, and traffic is encrypted in transit.
Children
This product is not directed at anyone under 18, and we do not knowingly collect their data.
Contact
The Crisis Preparation Blueprint
hello@crisisblueprint.shop