Privacy policy
drywallDB (drywalldb.com) · effective 20 July 2026
Who we are
drywallDB is based in the United Kingdom. The operator is the data controller responsible for the personal data described in this policy, referred to here as “we” or “us”. The best way to reach us about anything in this policy, or to exercise your rights, is by email at support@drywalldb.com.
What we hold
Your account is your email address. Around it we hold: sign-in sessions; the projects and saved views you create; daily usage counters (how many times your account loaded the catalogue or generated documents); product-search telemetry (which filter states found nothing or were abandoned — used to decide what data to add next); and, if you subscribe, a record of your subscription status. Our hosting and email providers also process basic technical information, such as IP addresses and browser or device type, in server logs, to deliver the service and keep it secure. We never see or store your card details — payment is handled by Stripe.
Why we use it, and our legal bases
We use your account email, projects, saved views, sign-in and subscription record to provide the service you’ve asked for — our legal basis is performance of our contract with you. We use usage counters, product-search telemetry, technical logs and cookieless analytics under our legitimate interests in keeping drywallDB reliable and secure and deciding what data to add next; this information is minimal and is not used to build a profile of you. Where we must keep records — for example the transaction records Stripe retains — the basis is legal obligation.
What we deliberately don’t do
No advertising, no tracking cookies, no sale or sharing of your data for marketing. Site analytics use Fathom, a cookieless, privacy-first service that records page paths only — your searches and filters inside the product stay in the query string and never reach it.
Cookies and sessions
We use only what is strictly necessary to run the service: a sign-in session so you stay logged in between pages. That is essential to how drywallDB works and can’t be switched off, but it isn’t used to track you. We set no advertising or tracking cookies, and our analytics are cookieless.
Who processes data for us
Netlify (hosting), Neon (database), Resend (sign-in and service email), Stripe (payments), and Fathom (cookieless site analytics). Each processes only what its role requires, and is not permitted to use your data for its own purposes.
Where your data is processed
Most of our providers are based in the United States, and the data they handle for us is processed there: Netlify (hosting and server logs), Neon (the database that holds your account), Resend (sign-in email) and Stripe (payments). Fathom, our analytics provider, is a Canadian company.
Where personal data leaves the UK we rely on the safeguards UK data protection law recognises. Canada has UK “adequacy” status, so transfers to Fathom need no further safeguard. For the US providers, Stripe is certified under the EU–US Data Privacy Framework and its UK Extension, and Netlify, Neon and Resend each transfer under the UK International Data Transfer Agreement, or EU Standard Contractual Clauses with the UK Addendum, as set out in their data-processing terms. In every case only the data a provider needs for its role is transferred.
Your rights and the self-service guarantee
From your account page you can export everything drywallDB holds about your account as JSON, sign out all devices, and delete the account — a real deletion that removes your data and cancels any subscription (Stripe retains the transaction records it is legally required to keep). These controls remain available regardless of subscription or account status. Your UK GDPR rights — access, rectification, erasure, restriction, portability, and objection — apply; most are self-service above, and the rest we handle on request, normally within one month. We don’t make automated decisions that produce legal or similarly significant effects about you — drywallDB’s equivalence assessments are about products, not people. If you’re unhappy with how we’ve handled your data you can complain to the Information Commissioner’s Office (ico.org.uk), though we’d appreciate the chance to put things right first.
Security
We protect your data with measures appropriate to a service of this kind: encryption in transit, access limited to what is needed to run drywallDB, and reputable processors under data-processing agreements. No system is perfectly secure, but we take reasonable steps to keep your data safe and to respond promptly if something goes wrong.
Retention
Account data is kept while the account exists and deleted when you delete it. Sign-in links expire within 24 hours; sessions expire automatically.
Changes to this policy
We may update this policy. If we make a material change, we’ll notify you by email to your account address before it takes effect. The effective date at the top of this page shows the current version.
Contact
Data questions and requests: support@drywalldb.com.