How we handle your data

Who we are

Edgelands is an independent project. The data controller is Guardline Ltd, a company registered in England and Wales (company number 13323382).

Questions about this policy or about your data: email hello@edgelands.app .

What we collect

• Account data, your email address, name, and a hashed password. Provided by you when you sign up.
• Billing data, handled by Stripe. We see a customer ID and your subscription status. We never see your card details.
• Saved sites and notes, anything you create inside the app. Stored against your account.
• Email preferences, which categories you've opted in or out of for marketing emails.
• Usage analytics, only if you accept analytics cookies. See the Cookie Policy for the full list of events and parameters we send to Google Analytics.
• Server logs, Cloudflare logs IP address, request URL, and a timestamp for every request, retained briefly for abuse prevention.

What we use it for

• Running your Edgelands account and showing you your saved sites.
• Billing you, sending invoices, and handling cancellations.
• Sending you transactional emails (receipts, password resets, cancellation confirmations).
• Sending you product emails, only if you opt in. Unsubscribe link in every email.
• Measuring how the site is used so we can improve it (subject to your cookie choice).
• Crediting your referrer when you become a paying subscriber.

Legal bases: contract (running your account), legitimate interest (security, fraud prevention, anonymous analytics if you've consented), consent (marketing emails, analytics cookies), and legal obligation (keeping financial records).

Who we share it with

• Stripe, payment processing.
• Cloudflare, hosting (Workers, D1, R2).
• Resend, sending transactional and marketing email.
• Google Analytics, anonymous usage data, only with your consent.
• HM Land Registry, we use their open INSPIRE dataset, no personal data flows back to them.

We never sell your data. We don't share it with anyone for advertising purposes.

Where it lives

Your account, sites, and preferences live in a Cloudflare D1 database (a SQLite database replicated across Cloudflare's edge network). Files live in Cloudflare R2. Backups are taken automatically by Cloudflare. Stripe stores billing data in their own infrastructure under their own policy.

How long we keep it

• Active accounts: indefinitely while you're a subscriber.
• Cancelled accounts: dormant data retained for 90 days, then permanently deleted on request or after 12 months.
• Financial records: 6 years (UK statutory requirement).
• Server logs: rolling 7 days at the Cloudflare edge.

Your rights

Under UK GDPR you can:

• Ask for a copy of the data we hold about you.
• Ask us to correct anything inaccurate.
• Ask us to delete your account and the data attached to it.
• Withdraw consent for analytics or marketing at any time (via the cookie banner or the unsubscribe link).
• Complain to the ICO (ico.org.uk).

Email hello@edgelands.app to exercise any of these.

Changes to this policy

If we make material changes we'll email signed-in subscribers and update the date at the top of this page. Minor wording changes happen without notice, the live version here is always the authoritative one.