Privacy
Scope
This notice describes how heap.page handles personal information when you browse the website, create or use an account, purchase a membership, manage alerts, contact support, or interact with editorial and administrative systems.
It does not govern the independent privacy practices of websites and services linked from heap.page. Those third parties control their own collection and use of information under their respective notices.
Information collected
heap.page may receive account identifiers, email addresses, authentication state, membership and entitlement status, selected plan and billing interval, transaction references, alert preferences, support messages, and records of editorial actions taken by authorized staff.
When you use the service, infrastructure may process IP address, request time, requested URL, device and browser information, language, referral data, security signals, approximate region, response status, and other limited diagnostic data needed to deliver and protect the service.
Payment information
Stripe processes payment-card and checkout information for purchases. heap.page does not intend to receive or store full payment-card numbers, card security codes, or payment-account credentials.
heap.page may receive transaction identifiers, customer and subscription identifiers, plan, amount, currency, payment state, renewal state, cancellation state, and limited billing contact information needed to provide membership and respond to billing questions.
How information is used
Information is used to deliver pages, authenticate accounts, provide membership access, process and reconcile purchases, remember requested alerts, send service communications, respond to requests, maintain editorial records, prevent abuse, investigate security events, and comply with legal obligations.
heap.page may also use aggregated or de-identified measurements to understand page performance, feature use, and service reliability. It does not use payment credentials, authentication tokens, private member notes, or source bodies as free-form analytics fields.
Retention
Personal information is retained for as long as reasonably necessary to provide the service, maintain account and transaction records, enforce suppression and security controls, resolve disputes, satisfy accounting or legal duties, and preserve authorized editorial audit records.
Retention periods vary by record type and obligation. When information is no longer required, heap.page will delete, anonymize, or isolate it where reasonably practicable, subject to backups, fraud prevention, legal holds, and records that must be retained by law.
Security
heap.page uses administrative, technical, and organizational safeguards intended to protect personal information, including restricted administrative access, encrypted transport, managed secret storage, request validation, audit records, and separation of public, account, billing, and administrative surfaces.
No online system is completely secure. You are responsible for protecting account credentials and should notify support@heap.page if you believe an account or session has been compromised.
Choices and privacy rights
You may update available account settings, cancel a membership, unsubscribe from optional email, or ask heap.page to access, correct, delete, restrict, or provide information associated with you. Rights and exceptions depend on your location and applicable law.
Send a request to privacy@heap.page and describe the request and relevant account email. heap.page may verify your identity and authority before responding. Do not send passwords, authentication tokens, full payment-card details, or unrelated identity documents.
Children
heap.page is not directed to children under 13, and the service is not intended to knowingly collect personal information from a child under 13. If you believe a child has provided personal information, contact privacy@heap.page.
Where local law requires a higher age for independent consent to an online service, a person below that age should use account or paid features only with authorization from a parent or legal guardian.
International processing
heap.page and its providers may process information in countries other than the country where you live. Those countries may have data-protection laws that differ from local law.
Where required, heap.page will rely on an available legal mechanism and appropriate safeguards for cross-border transfers. Provider locations and transfer terms may change as the infrastructure used to deliver the service changes.
Changes and contact
heap.page may update this notice to reflect service, provider, legal, or security changes. A material update will be identified by a new version and date, and additional notice will be provided where required by law.
Questions and privacy requests may be sent to privacy@heap.page. This document is a draft and does not state an effective privacy commitment until an effective date is published.