Privacy & data

Privacy

Last updated: 2026-05-02

What we collect

• Pageviews: counted by a self-hosted Plausible instance running on our server. No cookies, no cross-site tracking, and the data never leaves our infrastructure.
• Affiliate clicks: when you click a product link, we record a SHA-256 hash of your IP and User-Agent salted with a key that rotates every 24 hours. Raw IPs are not stored, and after a day yesterday's hash cannot be matched against today's.
• Email subscribers: just the email address (and optional first name) you give us when you sign up. Stored in a database we control plus Resend, our email provider. Wolfaxen Ltd hosts the verified sender domain.
• Orders (shop, when it opens): name, email, shipping address, payment status. Stripe processes payment, so we never see your card number. Order records are stored in the cloudmaking shop's encrypted database.

What we don't do

• No third-party advertising trackers.
• No fingerprinting. No analytics cookies. (A consent banner sets a cookie only if you opt in to ads.)
• We do not sell or rent your data.

Cookies

One first-party cookie (dino-consent) is set only after you make a choice on the consent banner, storing your preference for one year. No tracking cookies are set by default.

Affiliate disclosure

Some product links are Amazon affiliate links tagged cloudmaking-21. If you buy something after clicking them, Amazon pays us a small commission. The price you pay does not change.

Your rights

You have the right to access, correct, or delete any data we hold about you. Email [email protected] and we'll respond within 30 days. UK and EU readers can also complain to the ICO or their national DPA.

Who's the data controller

cloudmaking, operating Dino Library at dinolibrary.com. Email infrastructure is provided by Wolfaxen Ltd as a sub-processor.