Privacy.
The email goes to Stripe and the mailer for the download, a failed payment, or a refund. We keep the Stripe ids.
Checkout runs on Stripe. Stripe collects the card, the billing address, and the email. We do not receive the card number. Card details are handled by Stripe and are never stored by us. The email is passed to Stripe and to Cloudflare Email Sending. A Stripe customer id lets us open the billing portal.
Three emails are sent. The download email carries the file link after a paid checkout. The failed-payment email says the payment did not complete and no file was sent. The refund email says the payment was refunded and the download link no longer works. When a voided invoice matches a download record, the email says the invoice was voided, no payment was taken, and the download link has been turned off. A partial refund does not send it.
Our download record does not store the name, the email, or the amount. It stores the tier, the file key, how many downloads are left, when the link expires, whether the link was revoked, whether the mail was sent, and, when Stripe sends one, the customer id. Separate keys store the checkout session, payment intent, invoice, and charge ids so a refund can find that record. The link in the email is a signed token. Opening the confirm page does not spend a download. The manage and download pages remove that token from the address after reading it, so it is not left in the URL. We keep that record for 90 days.
Cloudflare Web Analytics counts page visits. Mail is sent with Cloudflare Email Sending, from data@tickmarkbench.com. If that send does not succeed, the same message may go out through a fallback email provider. We do not sell an address list.
A separate table stores the Stripe event id for each webhook and the delivery claim key for that order, including the checkout session id when Stripe sends one. Those rows are deleted on the next webhook after 90 days.
Order and payment records (name, email, amount, and date) are held in Stripe and kept for 7 years for tax and accounting.
Effective date: 20 October 2026.
To ask for deletion of anything that is not legally required, write to data@tickmarkbench.com. Stripe's own privacy notice covers the payment data they hold.