Privacy Policy
What we collect, why, who processes it, and how to get it removed.
LAST UPDATED 2026-08-02
PENDING LEGAL REVIEW
Requires review for GDPR/UK GDPR and CCPA applicability, lawful basis wording, and the data-deletion commitment.
What this covers
This policy describes what Red Cardinal Research collects when you read the site, subscribe to the newsletter, create an account, or become a member.
What we collect
When you just read. Nothing that identifies you. We do not run advertising trackers or third-party analytics. Necessary cookies keep the site working — see the Cookie Policy.
When you subscribe to the newsletter. Your email address, and the fact that you subscribed. Delivery is handled by Beehiiv, which processes your address on our behalf.
When you create an account. Your email address, and — only if you choose to set them — a display name and reading preferences. We use Supabase for authentication and storage. We never see or store a password, because we do not use passwords.
When you use the product. Which company dossiers you have unlocked, and which articles you have saved. Both exist so the product works for you across devices.
When you become a member. Stripe handles payment. Card details go to Stripe and never touch our servers. We store your subscription status, plan, billing period end, and Stripe customer and subscription identifiers.
When you contact us. Your name, email, chosen category, and message.
What we do not do
We do not sell personal data. We do not share it for advertising. We do not build advertising profiles. We do not track you across other websites.
Who processes data for us
Supabase (authentication and database) · Stripe (payments) · Beehiiv (newsletter delivery) · our hosting provider. Each processes data only to provide its service.
How long we keep it
Account data for as long as the account exists. Newsletter subscriptions until you unsubscribe. Billing records for as long as tax and accounting rules require.
Your rights
You can ask for a copy of your data, correct it, or ask us to delete it. Email the address on the Contact page.
Requires review. The specific deletion timeline, the lawful basis for each processing purpose, and whether GDPR, UK GDPR or CCPA apply to Red Cardinal have not been confirmed by a qualified reviewer.