Privacy policy

If you subscribe to the newsletter we store your email address, the language you were reading in, which page you subscribed from, the date you confirmed, and a one-way hash of your IP address as proof of consent. The raw IP is never stored.

If you answer the optional questions about paid membership, we store those answers alongside your subscription. Skipping them changes nothing.

If you create an account we store your email address, the display name you choose, and what you tick off in the tracker. Your password is hashed by Supabase and is never stored, logged or readable in plain text — not by us either, which is why resetting it is the only way to recover it. If you pay, we store your Stripe customer and subscription identifiers, your tier and its renewal date. We never see or store your card details.

Without an account, everything you track is stored in your browser and never sent to us. With a membership that includes sync, the same entries are stored against your account so they follow you to another browser and to the app. Deleting your account deletes them.

We do not require an account to read anything. We do not build advertising profiles. We do not sell, rent or share your address with anyone.

We email you the newsletter on the basis of your consent, given by submitting a form whose only purpose is to subscribe, and then confirming via the link we send to that address. Nothing is sent to you until you click that link. You can withdraw your consent at any time using the unsubscribe link in any email, which takes one click.

Account and membership data is processed to perform the contract you entered into when you created the account or paid. Records required by tax and accounting law are kept on that basis.

Subscriber and account data is stored with Supabase in the European Union. Emails are delivered by Resend. Payments are processed by Stripe, which is the controller of its own payment records. Hosting is provided by Vercel. Spam protection uses Cloudflare Turnstile, which is designed to work without tracking cookies.

This site is free and intends to carry advertising through Google AdSense. When it does, a consent banner will appear for readers in the EU and the UK, and you will be able to refuse. Members on a paid plan will see no advertising and no consent banner at all.

If you have an account, you do not have to ask us for either of these. Your account page has a button that downloads everything we hold about you as a single file, and another that closes the account and deletes your profile, your tracker and your collections for good — immediately, and cancelling any subscription on the way.

For anything else, including newsletter data if you have no account, write to leonidaclub.com@gmail.com. We will act within 30 days, and normally within a couple of days.

Unconfirmed subscriptions are deleted after 30 days. Confirmed subscriptions are kept until you unsubscribe, and deleted within 90 days after that.

Account data is kept until you close the account, and is deleted at once when you do. Your newsletter subscription is a separate consent and survives closing an account — it has its own one-click unsubscribe. Invoices are kept by Stripe for as long as tax law requires.