What is stored is what a shop needs to work: your account, what you own, and a count of what pages get opened. This page says what that is, who else sees it, and how to have it deleted.
Last updated 15 October 2026
Mohamed Ahmed El Kalawy, trading as M III D O and based in the United Kingdom, is the data controller for this site. The postal address is in the terms. Anything on this page, including a request to delete your account, goes to [email protected].
| What | When | Why |
|---|---|---|
| Your email address | When you make an account (free packs come with one) | To sign you in, to confirm the account, and to tell you about new packs — making an account puts you on the mailing list, as the sign-up form says, and one click in any email takes you off it |
| Display name, producer name, country | If you fill them in | They are optional. They are yours to edit or empty at any time |
| Your orders and your library | When you buy or claim a pack | So a pack you own is still there next year, and so a receipt exists |
| A log of downloads | Each time a download link is issued | To spot a link being shared around, and to know which packs get used |
| Page, listening and reading counts | As people browse | To see which packs people actually open and listen to, which sounds get played, and which guides get read to the end. Stored as counts against a random browser token — not a name, not an address, and never joined to your account |
Your password is never stored on this site in any readable form — sign-in is handled by Supabase Auth, and I cannot see it. Card details are never stored here at all; see below.
Signing in keeps a session in your own browser's storage so you are not asked to sign in on every page. Clearing your browser data signs you out; nothing else is affected.
A random browser token is kept the same way, so a page view is counted once instead of twice. It is not a name, and it is never joined to your account.
Google Analytics and Google ads set cookies of their own. They are not loaded until you press Accept on the banner, and saying no leaves them off for good — the shop, your account and the downloads all work either way. .
If you accept cookies, two Google services run here:
Neither loads until you press Accept. If you press no, no Google script is fetched at all — not blocked afterwards, simply never requested. On a page that carries no ads the AdSense script is not requested either way.
You can also switch off personalised advertising inside your Google account at myadcenter.google.com, which applies everywhere you go and not only here.
Running a shop means a handful of services see some of this. These are all of them:
| Service | What it handles |
|---|---|
| Supabase | The database and the sign-in system. Hosted in the EU (Ireland) |
| Netlify | Serves the pages you are reading |
| Cloudflare | Sits in front of the site, and stores the pack files and cover art |
| Stripe | Takes the payment. Card details are entered on Stripe's own page and never reach this site |
| Resend | Delivers the emails — sign-in, confirmation and password resets, and the newsletter. Resend keeps the newsletter list and handles its one-click unsubscribe |
| Analytics and the ads — only if you accepted cookies. Never loaded if you did not |
Some of these are outside the UK. Where that happens the transfer runs on the standard contractual clauses those companies publish. Your account details are not handed to anyone on this list for their own marketing. Google is the one exception, and only in a narrow way: if you accept cookies, it uses what its own cookies record to choose which ads to show you.
Under UK GDPR you can ask for a copy of what is held about you, ask for it to be corrected, ask for it to be deleted, or object to it being used. Email [email protected] and I will deal with it within 30 days. There is no charge, and you do not have to give a reason.
Deleting your account removes your profile and your library. Where a record has to be kept for tax purposes, what is left is the order itself, not your profile.
If you think this has been handled badly you can complain to the Information Commissioner's Office at ico.org.uk.
This shop is not aimed at children, and accounts are not intended for under-16s. If you believe a child has made an account here, email me and I will remove it.