Privacy Policy

When you create an account: your email address, and your name if you choose to give it. Your password is never seen or stored by us — it is hashed by our authentication provider.

If you sign in with Google: Google tells us your name, your email address and your profile picture URL. That is all we ask for and all we receive. We never see your Google password, and we cannot read your Gmail, Drive, Calendar or contacts.

When you use the site: the resources you buy, the files you download and when, and anything you save to your favourites. The download record exists so that a shared account is visible to us, and so you can always find what you already own.

We do not run analytics, advertising or third-party tracking of any kind. There is no tracking pixel on this site, and that is why you have not been asked to accept cookies.

We never see your card details. When payments are switched on, they are handled entirely by our payment provider; your card number does not pass through our servers and is not stored by us.

Two, both necessary, neither used for tracking:

• A session cookie, set when you sign in, so the site knows it is still you on the next page.
• A cart cookie, holding the list of resources you have added, so your cart survives a refresh.

We use a small number of services to run the site. Each one sees only what it needs to do its job.

• Supabase — the database and the sign-in system. Holds your account and your purchase records. Hosted in Frankfurt, in the EU.
• Cloudflare — hosting, and the private storage the resource files sit in.
• Google — only if you choose to sign in with Google.
• Whop — payments, once payments are switched on.
• Resend — receipt emails, once payments are switched on.

We do not sell your data, and we do not share it with anyone outside that list.

Your account and your purchase records are kept for as long as your account exists. That is deliberate: the whole point of the account is that you can re-download a resource years later, when you teach the unit again on a different laptop.

Download records are kept for two years, then deleted.

You can ask us for a copy of everything we hold about you, ask us to correct it, or ask us to delete your account and everything in it. Email englishbitesbyghada@gmail.com and we will do it.

Deleting your account removes your access to anything you have bought. We will say so before we do it.

This site is sold to teachers, not to students. It is not intended for anyone under 16, and we do not knowingly create accounts for them.

If this policy changes we will change the date at the top. Questions about any of it go to englishbitesbyghada@gmail.com.