The Allied Arsenal

Privacy policy

Effective 1 August 2026 · Covers thealliedarsenal.com and everything sold on it

The short version: an email address to send you a book, an order record to prove you bought it, and nothing else. No advertising trackers, no data sold to anyone, ever.

1 · What is collected, and why

Your email address — when you ask for the free book, or when you buy. It is used to send you the book, the download links, and notice of revisions to books you own. Subscribers to the free book also receive occasional research notes. Buyers receive notices about their purchase whether or not they are subscribed to anything.

Which part of the site you signed up from — a short label such as arsenal-page, stored alongside your email. It tells us which page earned the sign-up. It says nothing about you.

Your order record — held by Paddle: what you bought, when, the amount, the country used for tax, and the last four digits of the card. We can see this in Paddle's dashboard. We cannot see the full card number, and it is not copied anywhere else.

A name, if you buy the numbered edition — supplied by you, used once, to typeset the edition page of your copy. It is kept with the order record so a replacement copy can be re-rendered if you lose the file, and it is used for nothing else.

That is the complete list. There is no analytics script on this site, no advertising pixel, no session recording, no fingerprinting, and no third-party embed on the sales page.

2 · Who processes what

• Paddle.com Market Ltd — merchant of record. Takes the payment, handles sales tax and VAT, issues receipts and processes refunds. Their privacy notice is at paddle.com/legal/privacy.
• MailerLite — stores the email list and sends the emails. Their privacy notice is at mailerlite.com/legal/privacy-policy.
• Cloudflare — hosts and serves this site. Cloudflare processes standard server request data, including IP addresses, to deliver pages and block abuse.

All three are used as processors for the purposes described above. Your data is not sold, rented, brokered or shared with anyone else, and it is not used to train anything.

3 · Cookies

This site sets no cookies of its own. No consent banner appears because there is nothing to consent to.

Two exceptions, both of which happen only if you act:

• Paddle's checkout. Paddle.js is not loaded when the page loads — it is fetched only when you move towards a buy button. Once loaded, Paddle sets cookies needed to run the checkout and to detect fraud. If you never approach a buy button, the script is never fetched and no cookie is set.
• MailerLite. Submitting a sign-up form posts to MailerLite, which may set a cookie in the process of handling it.

4 · Legal basis

For readers in the UK, EU and other jurisdictions applying similar rules:

• Consent — for marketing email to free-book subscribers. Given by submitting the form; withdrawn by clicking unsubscribe.
• Performance of a contract — for order records and delivery emails to buyers. We cannot deliver a book we have no address for.
• Legal obligation — for transaction and tax records Paddle is required to keep.
• Legitimate interests — for the sign-up source label and basic server logs, used to keep the site working and to know which pages earn sign-ups.

5 · How long it is kept

• Email addresses — until you unsubscribe or ask for deletion. Unsubscribing removes you from mailings; asking for deletion removes the record.
• Order records — retained by Paddle for as long as tax and accounting law requires, typically several years. This is not ours to shorten.
• Names for numbered copies — kept with the order so a lost copy can be re-rendered. Deleted on request.

6 · Your rights

You can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted. Email [email protected] and it will be done — within one month, and usually within two working days.

You can unsubscribe from any email using the link at the foot of it. It works immediately and does not require a reply from anyone.

Deleting your email address does not remove your purchase or your right to a refund; the order record sits with Paddle and stands on its own.

Requests about payment data specifically — the card, the billing address, the tax record — can be made to Paddle directly, since they are the controller of it.

7 · International transfers

Paddle, MailerLite and Cloudflare operate internationally, so data may be processed outside your own country, including in the United States. Each maintains its own transfer safeguards; their privacy notices, linked above, set out the current mechanisms.

8 · Children

These books are written for adults and nothing here is marketed to children. We do not knowingly collect data from anyone under 16. If you believe a child's data has been submitted, write and it will be deleted.

9 · Changes

If this policy changes, the version on this page changes with it and the effective date at the top is updated. Material changes affecting existing subscribers will be sent by email rather than made silently.

10 · Contact

[email protected] — for any question about data held about you, including access and deletion requests.