Last updated: 16 October 2026
We want you to know what we do with your information. This page explains it in plain words.
1. Who we are
CubsCrate (legal name: [Business legal name]), based in [City], Pakistan, sells digital products for children. We decide how your personal information is used, so we are the “controller” under UK and EU data protection law. Contact us at [email protected].
2. What we collect and why
- When you order: you check out on Gumroad, which collects your email address, payment details, country and IP address to take payment, send your files and prevent fraud. Gumroad shares with us the details we need to look after your order, such as your name, email address, country and what you bought. We use these to help you with your order, handle refunds and keep order records.
- If you get a free story through Gumroad: your email address, which is added to our list of followers on Gumroad so we can send you updates.
- If you contact us: your name, email and message, so we can reply.
- When you browse: cookies and, if you agree where required, usage statistics so we can improve the website.
We never see or store your full card details. They are handled by Gumroad, our payment processor.
3. Our legal reasons (UK and EU readers)
- To carry out your order (contract): taking payment and delivering your downloads, through Gumroad.
- To follow the law (legal duty): keeping accounting and tax records.
- For our legitimate interests: keeping the site secure, preventing fraud, answering questions and backing up our data, in ways that don’t override your privacy.
- With your consent: analytics cookies where the law requires consent. You can withdraw consent at any time.
4. Who we share your information with
We don’t sell your personal information. We use, or plan to use, these kinds of service providers, who only get what they need to do their job:
- Gumroad (Gumroad, Inc., USA) runs our checkout: it takes payment, emails your receipt and download link, and deals with sales tax and VAT where it applies. Gumroad also uses your information for its own purposes, such as fraud prevention and its legal duties, as explained in Gumroad’s privacy policy.
- Web hosting to run the website.
- Email delivery service (for example WP Mail SMTP) to send emails from our website, such as replies to contact messages. Order emails come from Gumroad.
- Analytics (for example Google Analytics through Site Kit), only with consent where required.
- Security (for example Wordfence), which logs IP addresses to block attacks.
- Backups (for example UpdraftPlus) to keep a safe copy of the site.
We may also share information if the law requires it.
5. Cookies
Cookies are small files saved on your device. Our website uses a few cookies it needs to work properly, for example to keep it secure.
Our pages also load a small script from Gumroad so that the Buy now button can open Gumroad’s checkout on top of our page. When your browser loads it, Gumroad receives technical details such as your IP address and browser type. Gumroad’s checkout may set its own cookies. See Gumroad’s privacy policy for details.
We plan to use analytics cookies to see which pages are useful. Before we turn them on we will add a cookie banner so you can choose.
6. How long we keep information
- Order records: for as long as tax and accounting law requires us to keep them.
- Contact messages: up to 24 months.
- Free story sign-ups: until you unsubscribe or ask us to remove you.
7. Sending information abroad
We are based in Pakistan and our providers may be in other countries, including the US. Your information may therefore be processed outside your country. Where the law requires, we use safeguards such as standard contract terms or providers that follow recognised data protection rules.
8. Your rights
Depending on where you live, you can ask us to:
- show you the information we hold about you
- correct anything that is wrong
- delete your information
- stop or limit how we use it, or object to certain uses
- give you a copy of it in a portable format
Email [email protected] and we’ll respond within one month. Some information, such as order records, we must keep by law. For information that Gumroad holds about you, you can also contact Gumroad directly (see its privacy policy). You can also complain to your local data protection regulator, for example the Information Commissioner’s Office (ICO) in the UK.
9. Children
Our website and checkout are for adults. We don’t knowingly collect personal information from children under 13 (US) or under 16 (UK and EU). If you think a child has given us information, contact us and we’ll delete it.
10. Keeping information safe
We use sensible security measures, such as secure connections, backups and security monitoring. No website can be 100% secure, but we take care of what you give us.
11. Changes to this page
We may update this policy. The date at the top shows when it last changed.
12. Contact us
Privacy questions or requests? Email [email protected] or use our contact page.