Legal
Privacy policy
Last updated 9 October 2026
This policy explains what personal data The Sceptic’s Desk collects, why, and what you can do about it. It is written to be read rather than skimmed past, which is the whole point of a policy.
1 · Who is responsible for your data
The Sceptic’s Desk is a trading name of Omelia Ventures. Correspondence address: Suite 723, 80A Ruskin Avenue, Welling DA16 3QQ. For the purposes of UK data protection law, Fiona Soares is the data controller for the personal data described here.
You can reach us at info@scepticsdesk.com about anything in this policy.
2. What we collect and why
Email sign-ups (Starter Pack and Weekly Brief)
- What: your email address, an optional first name, which list you joined, a record of your consent (date, time, and IP address of sign-up), and whether you open our emails or click links in them.
- Why: to send you what you asked for, and to see which emails are useful so we can improve them.
- Lawful basis: your consent. You can withdraw it at any time with the unsubscribe link in every email.
If you don't give a first name, emails greet you generically. Open tracking is unreliable (some email apps report opens that never happened), so we judge emails mainly by clicks.
Purchases
- What: Gumroad is the merchant of record for all sales and handles payment, tax, and receipts. We never see or store your card details. Gumroad shares your email address, name if given, and what you bought with us, so we can deliver the product and provide access to the toolkit.
- Lawful basis: performing our contract with you, and our legal obligation to keep business records.
Website visits
- Server logs: our hosting and network providers (GitHub Pages and Cloudflare) automatically log technical data such as IP address, browser type, and the pages requested, to keep the site running and secure. Lawful basis: our legitimate interest in operating a secure website.
- Analytics (only if you accept): see section 3.
- Fonts: our fonts are loaded from Google Fonts. When a page loads, your browser connects to Google's servers, which receive your IP address and browser details in order to deliver the font files. No cookies are set. Google's privacy policy applies. Lawful basis: our legitimate interest in displaying the site consistently across devices.
3. Cookies and analytics
When you first visit, a banner asks whether you accept analytics cookies. Nothing loads unless you click Accept. Rejecting has no effect on how the site works. You can change your choice at any time using the Cookie settings link in the footer.
What we use
- Server logs: our hosting and network providers (GitHub Pages and Cloudflare) automatically log technical data such as IP address, browser type, and the pages requested, to keep the site running and secure. Lawful basis: our legitimate interest in operating a secure website.
- Analytics (only if you accept): see section 3.
- Fonts: our fonts are loaded from Google Fonts. When a page loads, your browser connects to Google's servers, which receive your IP address and browser details in order to deliver the font files. No cookies are set. Google's privacy policy applies. Lawful basis: our legitimate interest in displaying the site consistently across devices.
Cookies and storage on this site
| Name | Set by | Purpose | Duration |
|---|
sd-consent | The Sceptic's Desk (stored in your browser, not a cookie) | Remembers whether you accepted or rejected analytics, so we don't ask on every page. Strictly necessary. | Until you clear it or use Cookie settings |
_ga | Google Analytics | Distinguishes one visitor from another. Only set if you accept. | Up to 2 years |
_ga_<ID> | Google Analytics | Keeps track of your current visit. Only set if you accept. | Up to 2 years |
Advertising trackers
We do not currently use advertising pixels, such as those from Meta (Facebook and Instagram) or X. If that changes, we will update this policy first, and those trackers will also only load if you accept.
Our store and toolkit
Our store at store.scepticsdesk.com is run by Gumroad, which sets its own cookies under Gumroad's privacy policy. Where we have enabled it, Gumroad may also report purchases to our Google Analytics. The toolkit at tools.scepticsdesk.com sets a single cookie to keep you signed in after verifying your licence key. It is strictly necessary and lasts 30 days.
4. Who we share data with
We do not sell, rent, or share your data for anyone else's marketing. We use these service providers, who process data on our instructions:
- MailerLite: mailing lists and email delivery
- Gumroad: sales, payments, tax, and licence keys
- Google (Google Analytics): website analytics, only with your consent
- GitHub Pages and Cloudflare: website hosting, security, and DNS
Otherwise, we only disclose data where the law requires it.
5. Where your data is processed
MailerLite processes data within the European Economic Area. Gumroad, Google, GitHub, and Cloudflare are US-based and may process data outside the UK. Where they do, they rely on safeguards recognised under UK law, such as the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Agreement.
6. How long we keep it
- Email list: until you unsubscribe or your address stops working. After unsubscribing, we keep your address in a suppressed list so you are never re-added by mistake. If you'd rather it was deleted completely, ask us.
- Purchase records: six years, as required for tax.
- Analytics: 14 months.
- Server logs: as set by GitHub and Cloudflare, typically short-term.
7. Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you
- have it corrected if it's wrong
- have it erased (subject to the retention needs above)
- restrict or object to how we use it
- receive it in a portable format
- withdraw consent at any time: unsubscribe from emails, or use Cookie settings for analytics
To make a request, email hello@scepticsdesk.com. It's free, and we will reply within one month.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put it right first.
8. Children
Our material is for adults. We do not knowingly add anyone under 18 to our mailing lists. If we learn that we have, we will remove them.
9. Changes to this policy
When we make a material change, we update the date at the top and tell mailing-list subscribers by email.