Privacy policy

Who this policy covers

This policy describes how ekgstrips.com ("we", "us") handles information when you use the website at ekgstrips.com. Questions go to [email protected].

Using the site without an account

You can read the site, answer the free daily strips and take the free quiz without creating an account or giving us any personal information.

• Your answers stay in your browser. When you answer the daily strips, your choices are saved in your browser's local storage so that the page can show your results if you come back the same day. They are not sent to us. Clearing your browser's site data removes them.
• Server logs. Like every website, the servers that deliver this site receive your IP address, browser type, the page requested and the time. Our hosting provider keeps these records for security and to keep the service running. We do not use them to identify you.
• No advertising and no cross-site tracking. We do not run ads, and we do not use advertising cookies or tracking pixels. Fonts are served from our own domain, not from a third party.

If you create an account

• Email address and password. We store your email address, so that you can sign in and so that we can reach you about your account. Your password is stored only as a salted one-way hash: we cannot read it, and nobody who works here can tell you what it is. After you sign up we send one message asking you to confirm the address; the account works whether or not you do.
• Signing in with Google. If you choose “Continue with Google”, Google sends us your name, your email address and your profile picture. We keep your name, your email address and the identifier Google uses for your account, so that we can recognize you next time. We do not keep the picture, we never see your Google password, and we keep no access to your Google account.
• Your plan. We store which plan you bought, when, for how much, and the dates it covers, so that we can give you access and show you your purchases.
• Signing in. While you are signed in, your browser holds two cookies from this site: one that identifies your session and one that only records that you are signed in, so the page can show the right menu. They last up to 30 days and are removed when you log out. To slow down password guessing, we keep a short-lived count of failed sign-in attempts by email address and IP address; it is discarded after 15 minutes.
• Practice statistics stay in your browser. Which strips you answered, your missed strips and your weak rhythms are kept in the local storage of the browser you practise in. They are not sent to us, and they do not follow you to another device. This is practice data, not health information.

If you buy a plan

• Payment. Card payments are handled by Stripe. Your card details go directly to Stripe; we never see or store your card number. We receive a record that the payment succeeded, the amount, and the account it was for. Stripe's own privacy policy describes how it handles payment information.

Cookies

The only cookies this site sets are the two sign-in cookies described above, and, if you sign in with Google, a short-lived one that carries you through the trip to Google and back. They are needed for an account to work, and they are not used to follow you around the web. Visitors who do not sign in get no cookies from us.

If you email us

We keep your message and your email address so that we can reply and keep a record of the conversation.

How we use information

• To provide the service you asked for and to keep it secure.
• To answer your messages and to send messages about your account or purchase.
• To find and fix problems, and to understand in aggregate how the site is used.

We do not sell personal information, and we do not share it for advertising.

Who we share it with

Only with the companies that help us run the site, and only as far as they need it: our hosting provider, our payment processor and our email provider. We may also disclose information if the law requires it.

How long we keep it

We keep account data while your account exists. You can delete your account yourself, at any time, from your account page: that removes your email address, your password hash and your record of purchases from our database at once. Our payment processor keeps its own records of payments for as long as tax and accounting rules require.

Your choices

You can delete your account from your account page. You can also ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it, by writing to [email protected]. Depending on where you live, you may have further rights under laws such as the California Consumer Privacy Act or the GDPR; we will honor a valid request wherever you are.

Children

The site is intended for adult learners and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Changes

If we change what we collect or how we use it, we will update this page and the date at the top before the change takes effect.