Privacy notice

Privacy

HPAlways keeps the personal data it stores to the minimum needed to save your collection, to send any order you place and to tell you when a product you asked about is back in stock.

What we store

• A stable sign-in identifier from our sign-in service (for example google-oauth2|1234…). This is an opaque ID, not your email address.
• How many copies of each card variant you have recorded.
• Identifiers and timestamps of the changes you make, so that a retried save is never applied twice.
• If you create a share link, the random code in that link.
• If you ask to be emailed when a product is back in stock, your email address, the product and when you asked (see Stock alerts).

What we do not store

Our database does not store passwords, sign-in tokens, date of birth, address or other profile details, and your email address is only stored if you ask for a stock alert. There are no passwords at all: you sign in with Google, Microsoft or a one-time code sent to your email.

Sign-in service

Sign-in is provided by Auth0 (part of Okta), which holds your sign-in details on our behalf: your email address, and for Google or Microsoft sign-in your name and profile picture as shared by that provider. One-time codes are emailed through Microsoft Azure Communication Services. Neither is used for marketing, and we never see your Google or Microsoft password.

On your device

Changes you have not yet saved are kept in your browser's local storage until they reach our server, so they are not lost if you go offline. A few display preferences (such as whether parallels are shown) are also stored locally. When you sign in, your sign-in session is kept in local storage so you stay signed in. There is no advertising, and no cookies are used for tracking.

Usage and performance statistics

To see which pages are used and to spot errors and slow responses, the site sends anonymous usage data to Microsoft Azure Application Insights: the pages you view, the page you came from, how long pages take to load, errors, and your browser, device type and approximate location (country and city). Your approximate location is worked out from your IP address, which is then discarded and not stored. No cookies are set, nothing is linked to your sign-in, and share-link codes are removed before anything is sent. Data waiting to be sent may be held briefly in your browser's session storage. The data is kept for 30 days. Our API also records each request it handles (the address, how long it took and whether it failed) for the same purpose. If your browser blocks this, the site works exactly the same.

Sign-in statistics

To see whether signing in works smoothly, we count how many sign-ins are started and completed each day, per provider. These are anonymous totals only: nothing about you, your device or your IP address is recorded.

Buying from the shop

Shop orders are paid for on Stripe's secure checkout page. Stripe handles your card or other payment details and we never see them. To send your order and deal with any return, Stripe passes us your name, email address, delivery address and what you bought. We use these only for that order: never for marketing, and they are not stored in our collection database. Royal Mail receives your name and address to deliver the parcel. We keep order records for six years, as UK tax law requires. Stripe's own use of your data is covered by its privacy policy.

Stock alerts

If a product is out of stock you can ask us to email you when it is back. We store your email address, the product and the date you asked, and use them for that one email only: no newsletters, no marketing, and never shared or sold. We rely on your consent, which you give by asking. Once the email is sent we delete your address; if the product does not come back within 12 months, we delete it then. If you are signed in, we use the email address you signed in with, but the request is not linked to your sign-in or your collection. The email is sent through Microsoft Azure Communication Services. If you are under 13, please ask a parent or carer before signing up. To cancel a request at any time, email us and we will delete it.

Visibility

Your collection is private unless you create a share link. Anyone you give the link to can see how many of each card you have recorded, without signing in, but cannot change anything. The shared page does not show your name, email address or sign-in identifier, and is hidden from search engines. You can turn the link off at any time from the Collection page; a link that has been turned off stops working for good.

Deleting your data

You can ask for your saved collection to be deleted at any time and all records linked to your sign-in identifier will be removed. Email us to request deletion. As your collection is not linked to an email address, we will reply explaining how to confirm which sign-in is yours.