Legal
Privacy Policy
Last updated 21 September 2026
This site sells and hosts two books. It keeps the minimum needed to sign you in, remember your place, and record what you bought — nothing else. There is no advertising, no tracking, and no analytics.
Who we are
This site is operated by Think Heart Apps AB. The books are published under the pen name Alex Brandt. For anything in this policy, contact texting@thinkheart.co.
What we collect
Only what the site needs to function:
- Your email address and account credentials. Handled by Firebase Authentication. If you sign in with Google, we receive your email address and nothing further from your Google account. We never see or store your password.
- Which editions you have purchased. Recorded against your account so your books unlock.
- Your reading position and bookmarks, per edition, so you can pick up where you stopped.
- A Stripe customer reference and checkout session ID for each purchase, so a payment can be matched to your account and to any refund request.
- A creator code, if you use one. We record the code with your purchase; the creator sees sales counts, never your name or email.
We never receive your card details. Payment happens on Stripe's own checkout pages; your card number never reaches this site.
What we do not do
- We do not sell, rent, or share your data with anyone for marketing.
- We do not run advertising or third-party trackers.
- We do not run analytics, so there is no record of which pages you visit.
- We do not build a profile of you from your reading behaviour.
Cookies and local storage
There are no advertising or analytics cookies, so there is no consent banner. The site uses exactly two things:
- A sign-in cookie (
__session) — strictly necessary, set only after you sign in, readable only by the server, and valid for 14 days. It is what keeps a purchased chapter from being served to someone who has not bought it. - Your light/dark preference, kept in your browser's local storage. It never leaves your device.
Who processes your data
- Google Firebase (Authentication and Firestore) — accounts, purchase records, reading progress.
- Stripe — payment processing. Stripe is the controller of your payment data; see their privacy policy at stripe.com/privacy.
- Resend sends account emails, including welcome messages, email confirmations, and password resets. It processes the recipient address, message content, and delivery information. Creating an account does not subscribe you to marketing emails.
These services may process data outside your country. Their own privacy policies describe how they handle that data.
How long we keep it
Account details, purchase records, and reading progress are kept while your account exists. If you ask us to delete your account we remove it and your reading data. We keep a minimal record of the transaction itself where tax or accounting law requires it — typically the amount, date, and Stripe reference, without your reading history.
Your rights
You can ask us to show you the data we hold, correct it, export it, or delete it. Write to texting@thinkheart.co from the address on your account and we will respond within 30 days. If you are in the UK or EU you also have the right to complain to your data protection authority.
Deleting your account removes your access to any edition you have purchased, and we cannot restore it afterwards.
Age
These books are written for adults and discuss dating and sexual communication. The site is not intended for anyone under 18, and we do not knowingly collect data from children.
Changes
If this policy changes materially we will update the date at the top and, where the change affects how your data is used, email account holders. Continuing to use the site means the current version applies.