Effective 7 October 2026
This policy explains what personal information kastraresearch.com collects, why, and who processes it. Kastra Research does not sell or rent personal information and does not use advertising or analytics trackers.
Subscribers. When you subscribe, Stripe collects your email address, name, billing address and payment card details to process payment. Kastra Research receives your email address, name, billing location and subscription status from Stripe. It does not receive or store your full card number.
Sign-in. When you request a sign-in link, the email address you enter is used to check for an active subscription with Stripe and, if there is one, to send the link.
Correspondence. If you email Kastra Research, the message and your address are kept to answer you.
Technical data. The site is hosted on Cloudflare, which processes visitors' IP addresses and request details to deliver and protect the site. The home page loads fonts from Google Fonts, which receives your IP address when it does.
The site sets one cookie, kr_s, only when you sign in or subscribe.
It is strictly necessary: it records your email address and which verticals you
subscribe to, is signed to prevent tampering, and expires after 30 days or when you
sign out. No other cookies are set by Kastra Research.
To provide subscriptions and access, process payments, send sign-in links and service messages, answer enquiries, keep tax and accounting records, and prevent misuse. Kastra Research does not send marketing email without your consent.
Stripe (payments and billing portal), Resend (sign-in emails), Cloudflare (hosting and security) and Google Fonts (typography) process data on Kastra Research's behalf or as independent providers under their own privacy policies. Information may be disclosed where required by law.
Subscription and payment records are kept for as long as the subscription is active and afterwards for as long as needed for tax, accounting and legal purposes. Correspondence is kept only as long as needed to deal with it.
You can ask to see, correct or delete the personal information Kastra Research holds about you by emailing [email protected]. Some records must be kept for tax and legal reasons. Depending on where you live you may have further rights under local law, which will be honoured on request.
The site is served only over HTTPS. Payments are handled by Stripe, a PCI DSS Level 1 certified provider; card details never reach Kastra Research's systems.
The site is intended for professional readers and is not directed at anyone under 18.
Changes to this policy will be posted here with a new effective date. Questions: [email protected].