Privacy Policy

Last updated: 22 July 2026

1. Who controls your data

This policy explains how Library.md handles your personal data. The data controller is Jay Alcock, trading as E10 Solutions (“we”, “us”), the operator of librarymd.com. You can contact us at [CONTACT EMAIL].

2. What we collect and why

  • Account data (via Clerk). Your email address and name, and if you sign in with Google or GitHub, basic profile information from them. We use this to create and run your account. Lawful basis: performance of a contract.
  • Purchase data (via Stripe). Which packs you bought, the amount, and a Stripe reference. We do not receive or store your full card number; Stripe processes the payment. We use this to give you access and to keep records. Lawful basis: contract and legal obligation (tax records).
  • Your activity. The files and packs you save, your votes, and your comments. We use this to provide those features. Lawful basis: contract and legitimate interests.
  • Analytics. Google Analytics 4, loaded through Google Tag Manager, and Vercel Analytics collect usage data such as pages viewed, approximate location, and device and browser type, using cookies or similar technologies. We use this to understand and improve the site.

3. Cookies

We use essential cookies for sign-in and security, which are always on because the site needs them to work. Analytics cookies (Google Analytics, loaded through Google Tag Manager) load only if you accept them in the cookie banner, and are not set if you reject. You can change your choice at any time from the Cookie settings link in the footer.

4. Who we share it with

We share data with the processors that run parts of the service on our behalf: Clerk (accounts), Stripe (payments), Vercel (hosting and analytics), and Google (analytics). We do not sell your personal data.

5. International transfers

Some of these processors are based outside the UK and the EEA, for example in the United States. Where data is transferred, they rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

6. How long we keep it

We keep account data while your account exists, purchase records for as long as tax and accounting law requires (typically six years), and analytics data according to the provider’s retention settings.

7. Your rights

Under UK data protection law you have the right to access, correct, erase, restrict, or port your data, to object to certain processing, and to withdraw consent. To exercise these rights, email [CONTACT EMAIL]. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

8. Children

The service is not aimed at children under 16, and we do not knowingly collect their personal data.

9. Changes

We may update this policy from time to time. The “last updated” date above shows when it last changed.

10. Contact

For any privacy question, contact us at [CONTACT EMAIL]. Library.md is operated by Jay Alcock, trading as E10 Solutions, [SERVICE ADDRESS].