Website privacy

Account and licence records

A customer account records your name, email address, organisation and, if configured, a password hash. Licence administration records products, purchases, assigned people, expiry dates, computer references and issued licence keys.

Computer references organise licence allocations. Do not enter raw hardware serial numbers, client names or confidential work details in those fields.

Sessions and security records

The site uses a necessary session cookie to keep you signed in and protect forms. It records administrative actions and payment notifications. Customer email sign-in uses hashed, short-lived, one-use tokens tied to the requesting browser. Queued sign-in messages are encrypted and their contents are erased after delivery, failure or expiry. Administrators must use a password and authenticator code. Short-term sign-in and enquiry rate limits use hashed identifiers; Experdition’s website hosting provider may keep separate server access logs.

Payments

Card details are entered on Stripe’s hosted checkout. This site keeps an order reference, amount, product and payment state, not your card number. Stripe receives the account email and order information required to process payment.

Application data

The website does not need your timer narrations, client lists, invoice contents or application database credentials. It is not a backup service for those records.

Contact enquiries

The enquiry form records your name, email, selected product and message in a private inbox on our hosting server. The message content is encrypted in the website database and can be read by the website administrator. No enquiry email is sent automatically. Please do not submit confidential client records, passwords or licence keys. Direct email is handled by the mail services used by you and Experdition.

Retention and requests

Sign-in delivery content expires or is erased after delivery or failure. Account, order, enquiry and security records have different purposes and retention needs. Contact us to request access, correction or removal; we will assess the request and explain any record that must be retained. Removing access is separate from deleting purchase history or copies retained in backups.

Privacy enquiries

For account correction, a privacy question, complaint or a record-retention request, use our privacy enquiry form, or email the address shown below.

For a complaint, explain the issue and the outcome you are seeking without including confidential client material. We will use your contact details to handle the request.

Hosting, payment and accounting records may have separate retention requirements.