Privacy & data

Privacy

Last updated: 2026-05-14

What we collect

  • Pageviews: counted by a self-hosted Plausible instance running on our server. No cookies, no cross-site tracking, and the data never leaves our infrastructure.
  • Affiliate clicks: when you click a product link, we record a SHA-256 hash of your IP and User-Agent salted with a key that rotates every 24 hours. Raw IPs are not stored, and after a day yesterday's hash cannot be matched against today's.
  • Email subscribers: just the email address (and optional first name) you give us when you sign up. Stored in a database we control plus Resend, our email provider. Wolfaxen Ltd hosts the verified sender domain.
  • Orders (shop, when it opens): name, email, shipping address, payment status. Stripe processes payment, so we never see your card number. Order records are stored in the cloudmaking shop's encrypted database.

What we don't do

  • No fingerprinting or cross-site tracking beyond standard ad serving.
  • No analytics cookies. (The consent banner sets a cookie only if you opt in to personalised ads.)
  • We do not sell or rent your data.

Advertising

Google AdSense displays ads on some pages. Google may use cookies or similar technologies to serve ads based on your visits to this and other sites. You can opt out of personalised advertising via the consent banner at the bottom of each page or through Google's Ad Settings.

Cookies

One first-party cookie (dino-consent) is set only after you make a choice on the consent banner, storing your preference for one year. If you consent to ads, Google may also set cookies for ad serving and measurement. No other tracking cookies are set by default.

Affiliate disclosure

Some product links are Amazon affiliate links tagged cloudmaking-21. If you buy something after clicking them, Amazon pays us a small commission. The price you pay does not change. Some pages also show Google AdSense display ads.

Your rights

You have the right to access, correct, or delete any data we hold about you. Email hello@dinolibrary.com and we'll respond within 30 days. UK and EU readers can also complain to the ICO or their national DPA.

Who's the data controller

cloudmaking, operating Dino Library at dinolibrary.com. Email infrastructure is provided by Wolfaxen Ltd as a sub-processor.