Legal
Privacy policy
What we collect, why we collect it, and how to make us stop. Last updated 23 August 2026.
What we collect
Very little, and nothing that identifies you personally unless you hand it to us.
What we collect
- Analytics: aggregate page views and referrers, used to see which reviews get read. No profiles are built and nothing is sold.
Cookies
We set one cookie of our own: a record of your choice on the cookie banner, so we do not ask again on every page. It contains your answer and the date, nothing else.
Analytics cookies are only set if you accept them on that banner. Declining is a single click and the site works identically either way.
Digistore24 sets its own tracking cookie when you click an affiliate link and land on their checkout. That cookie is what tells them the sale came from us. It is governed by Digistore24's privacy policy rather than ours, and it is set on their domain, not on this one.
Legal basis and retention
Under the GDPR, analytics and non-essential cookies rely on your consent, given through the banner and withdrawable at any time by clearing your browser storage for this site.
We do not sell, rent or share personal data with anyone, for any price.
Your rights
If you are in the EU, the UK, California or any jurisdiction with comparable law, you may ask us what data we hold about you, ask for a copy, ask us to correct it, or ask us to delete it, and we will respond within 30 days.
Because we deliberately collect almost nothing, in most cases the honest answer to a data request will be that we hold nothing that identifies you at all.
The checkout checker
When you use the checkout checker, the link or product ID you enter is sent to our server, which extracts the numeric Digistore24 product ID and an optional voucher code, requests the public Digistore24 order form for that product and returns the result to your browser. Nothing else you type is kept.
The result for each product ID is cached on our server for six hours so repeat checks do not reach Digistore24 again. To limit checks to 30 per hour per connection, your IP address is stored only as a one-way hash, never in readable form, and that record is deleted after one hour. The legal basis is our legitimate interest in keeping the tool available and protecting it from abuse (Article 6(1)(f) GDPR).
Third parties
Three external services can receive a request from your browser on this site: Google Fonts, which serves the two typefaces the site uses; Google Analytics, which counts page views (it loads on every page, but it is held in a consent-denied state and stores no analytics cookie unless you accept them on the banner); and Digistore24, but only at the moment you click an affiliate link. No advertising networks, ad trackers or social widgets are embedded on this site.
If a review embeds an image, that image is hosted on our own server. We do not hotlink vendor assets, which also means vendors cannot see who is reading a review of their product.
Changes to this policy
If this policy changes materially we will update the date at the top of the page. Continued use of the site after a change means you accept the revised policy.
Looking for Digistore24, not us?
This policy describes what Worthorpass collects. If you are trying to find out whether Digistore24 is a legitimate company, why it appears on your card statement or how to cancel a subscription, read our buyer guide instead.