Your privacy
Privacy Policy
Last updated: 19 September 2026
What we collect
This policy covers two things: the free, public site, and the paid members area.
On the public site, we do not ask you to create an account and we do not collect any personal information directly from you.
When you join the members area, we collect a small amount, because a membership needs a way in and a way to be billed:
- Your email address, used to send your sign-in links, your welcome email, and to talk to you about the membership.
- The membership record itself: which plan you are on, the price you pay, when your current period runs to, and whether it is set to renew.
- Session records and audit records, described below.
We do not hold card details. Payment is taken by Payhip, and the card numbers, the receipts and the renewals all stay with them; none of it reaches us.
Sessions and audit records
There are no passwords in the members area. When you sign in, we email you a link that works once and expires after fifteen minutes. Signing in starts a session that lasts up to thirty days, held in a cookie in your browser so you do not have to sign in again. Sign-in links are stored in a scrambled form, so a copy of the database would not hand out anyone's ways in.
We keep a record of the things that happen on a membership - sign-ins, payments, cancellations, refunds - so there is a trail to look at if something goes wrong. These audit records hold the email address, and a scrambled, non-reversible form of the IP address and device used, never the raw address itself.
The emails we send are plain text with no tracking: nothing in them tells us whether you opened one.
Who processes your data
A small number of services handle your data for us, and each has its own privacy policy for the part it plays:
- Payhip takes the payments, runs the subscription renewals, sends the receipts, and passes us the events we need to keep access working.
- Cloudflare hosts the site and the members area (Cloudflare Pages), the database (D1) and the audio files (R2).
- Resend delivers the sign-in and welcome emails.
We do not sell or rent personal information to anyone, and we do not use your data for advertising.
How long we keep things
We keep membership and audit records for as long as they are needed to run the service and to sort out payment, refund or billing questions. There is no fixed shelf life written into the system beyond that.
Cookies and analytics
Like most websites, we or our hosting provider may collect limited, non-identifying data (such as pages visited and general usage patterns) to understand how the site is used and to keep it running reliably. This does not identify you personally.
The members area sets its own session cookie so you stay signed in. It is a small, single-purpose cookie, and it does not track you across other sites.
What you can ask us
You can ask us at any time what we hold about you, ask for it to be corrected, or ask for it to be removed, and we will sort it out for you. Stopping the renewal also stops us from collecting anything more from you.
Third-party links
This site may contain links to other websites (for example, affiliate product pages). Those sites have their own privacy policies, and we are not responsible for their content or practices.
Contact
If you have any questions about this policy, please use the contact information on our About page, or write to members@nightlysleeping.com about anything to do with the members area.