YOUR INFORMATION / WITH INTENTION

Effective October 24, 2026 · Operated by two2six Media.

Browsing the store

Browsing does not require an account. The site uses no advertising trackers or third-party fonts. Hosting providers may process technical connection information to serve and protect the site.

Optional Google Analytics

We use Google Analytics 4 (G-3CJBKE8YZR) to understand visits, engagement, public product interest, checkout starts and purchases. Google receives a browser identifier, technical connection information and the limited events described here. This is measurement, not advertising; Google signals and ad personalization are disabled.

For visitors in the United States, Analytics may run after notice unless you opt out. Elsewhere, including the EEA, United Kingdom and Switzerland, or when your location is unknown, Analytics waits for your explicit opt-in. We use Cloudflare’s country signal only to select this rule; we do not store your location for Analytics. Global Privacy Control, Do Not Track and saved refusals keep Analytics off. Use Cookie settings in the footer to reject Analytics or withdraw consent at any time. Choices and Analytics cookies last up to 180 days; withdrawal removes accessible Analytics cookies.

Page addresses omit query strings and fragments; outbound events include only the destination domain. We do not send names, email addresses, inquiry contents, payment details, recovery keys, private prompts, photographs or raw order IDs to Google. Private receipt and recovery pages do not load Google Analytics. Email clicks record contact intent, not successful messages.

With Analytics permitted, a return to a public store page in the same browser session can record a purchase only after our protected order API confirms paid status. This uses the verified amount, currency, public product ID and a separate opaque transaction identifier for deduplication. Pending, expired, failed, refunded or disputed orders do not produce a new purchase event. Purchase reporting can miss visits blocked by privacy tools or buyers who do not return to the public store; it is not a complete accounting ledger. No recovery credentials are sent to Google. A local record of reported transaction identifiers prevents repeated attribution; clearing browser storage or visiting another device may rely on Google’s transaction deduplication.

Google may process information outside your country. See Google’s privacy policy and Analytics opt-out information. We do not sell this Analytics data or use it for targeted advertising. You can browse, buy and recover purchases with Analytics off.

Purchases

Stripe processes payment details on its hosted checkout. PromptsReady does not receive or store your full card number. Order records include a generated order ID, product and purchased content version, price and currency, Stripe session and payment references, payment state, purchase email supplied through Stripe, and timestamps.

The server stores a hash of your recovery key. Your recovery kit is private: anyone with its order ID and key can request a download after verified payment. Delivery tokens expire after ten minutes and can only be used once. A valid recovery kit can request a fresh token. This site may keep a key temporarily in your browser’s session storage to reopen your purchase. It is not used for advertising.

Policy acceptance and delivery records

Private order records include the accepted policy version and wording, acceptance time, immediate-delivery request, and delivery/access events. We record when a protected response was prepared and any browser-reported receipt, copy, download or print request. These limited records support delivery, customer service and payment disputes. A browser request does not prove that a file was saved or a PDF printed.

We do not collect full card numbers, raw IP addresses, device fingerprints or general browsing history for this evidence. Recovery and delivery secrets are stored as hashes. Access to order evidence is restricted to private operations, under the retention approach described below.

Email inquiries

Our contact links open your email application. When you email Brody or Ash, your address and message are used to answer your inquiry. This is not a mailing-list subscription. Please leave out sensitive information and confidential references.

Abuse prevention and access logs

When APIs are enabled, rate limiting uses a short-lived keyed hash derived from connection information. The rate-limit table does not store raw IP addresses. Technical logs held by hosting or payment providers may contain connection details. API responses and private delivery use no-store headers, and recovery keys are kept out of query strings.

Service providers and notifications

Cloudflare hosts the site and configured database. Stripe processes payments and related fraud prevention. When configured and tested, Cloudflare sends limited purchase notifications to the store owner containing the order ID, products, amount, time and fulfillment status. Notification records distinguish pending, accepted and confirmed delivery; prompts, payment-card details and recovery keys are excluded. Purchase notifications are transactional and contain no protected prompts or access keys. Automatic purchase recovery emails are not provided. Providers may process information in other countries according to their own arrangements.

Retention and choices

For access, correction, deletion, and privacy questions, email brody@two2six.net. Email correspondence is kept while needed to answer inquiries and provide support. Expired abuse-limit and delivery-token records are removed within 48 hours. Purchase records and content snapshots are retained while needed to provide purchased-content access, handle support or disputes, and meet accounting or legal obligations. Retention is reviewed annually; requests to delete information are assessed against these purposes and applicable requirements.

You may browse without submitting information. Mandatory rights under applicable privacy law remain available. Contact support to request access, correction or deletion.