Privacy Policy
Effective date: 2026-09-09
STRATEGY ISLAND LTD is the data controller for personal data processed through strategyisland.shop. This policy explains what is processed, why, for how long, and what you can do about it. It is written under the UK GDPR and the Data Protection Act 2018.
What we process
Account data
- Email address.
- A password, stored only as a one-way hash.
- A display name, if you choose to set one.
What you write about your setup
The few sentences you write describing devices, household, whether you have moved and similar. This is processed to sort your description into the scene categories the list is built from.
- It is not used to train any model, ours or anyone else’s.
- On the free plan it is processed in your browser and not sent to us at all.
- On a paid plan, if you save a list, the description is stored with it so you can see it again. You can delete a saved list at any time and the description goes with it.
What we deliberately do not process
- No bank or payment account data. There is no connection route.
- No transactions, balances, amounts, card numbers, sort codes or account numbers.
- No files, documents, statements or screenshots. There is no upload route.
- No account credentials for any other service.
If something you type looks as though it came off a statement, it is discarded rather than processed. It is not written to a database, not written to a log, and not sent anywhere. You get a message telling you not to paste that here.
Billing data
Payments are handled by an external payment provider configured by whoever operates this deployment. We receive a record that a payment succeeded or failed, and the last four digits and card type where the provider supplies them. We never see or store a full card number.
Technical data
- IP address, browser and device type, and pages requested.
- Error records, for fixing faults.
Why we process it, and on what legal basis
- To provide the service — performance of our contract with you.
- To take payment and keep tax records — contract, and legal obligation.
- To prevent abuse and keep the service up — our legitimate interests in running a service that works.
- Optional cookies and any marketing email — your consent, which you can withdraw at any time.
We do not sell personal data and we do not share it for cross-context behavioural advertising.
Model training
What you write is not used to train any model. Where a language model is used at all, its only job is to sort a description into the scene categories the list is built from — it never writes the list, and nothing is retained by it for training. Aggregate, anonymous signals such as error rates and how often a feature is used may be used to improve the service; those signals cannot be traced back to you.
How long we keep things
- Account data: until you delete your account, then removed within 30 days.
- Saved lists and the descriptions attached to them: until you delete them.
- Unsaved descriptions: not retained at all.
- Billing records: six years, for tax purposes.
- Technical logs: 90 days.
Who else sees it
- Our hosting and database providers, as processors under contract.
- The payment provider, for payments only.
- Our email provider, for account and renewal emails.
- Anyone we are legally required to disclose to.
International transfers
Some processors operate outside the United Kingdom. Where personal data is transferred outside the UK, we rely on the UK International Data Transfer Agreement, or on the UK Addendum to the European Commission’s Standard Contractual Clauses, together with a transfer risk assessment. You can ask us for details of the safeguards used.
Your rights
Under the UK GDPR you have the right to:
- be told what we hold about you, and get a copy;
- have inaccurate data corrected;
- have data erased;
- restrict or object to processing;
- have data ported to another service;
- withdraw consent at any time, where we relied on consent.
Write to support@strategyisland.shop. We reply within one month.
If you are in California, you have the right to know what is collected, to have it deleted, to correct it, and to opt out of any sale or sharing of personal information. We do not sell or share personal information, and we honour Global Privacy Control signals.
Complaining
You have the right to complain to the Information Commissioner’s Office, the United Kingdom’s data protection regulator, if you think we have handled your personal data badly.
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
ico.org.uk · 0303 123 1113
We would rather you told us first so we can put it right, but you do not have to and it does not affect your right to complain.
Children
The service is not intended for anybody under 13. Between 13 and 17 you need a parent or guardian’s consent to hold an account.
Cookies
See the cookie policy.
Changes
We will tell registered users about any material change at least 14 days before it takes effect.
Contact
support@strategyisland.shop · postal address on the legal information page.