Privacy.

What we store

• Your email address, if you subscribe to the free edition or create an account. It is the only identifier we hold.
• Your tier (free, Premium or Pro) and, when you pay, the customer reference Stripe gives us. Never your card details.
• Your watchlist and passes: the deals you saved or set aside.
• Your alert preferences (states, business types, an asking-price ceiling) and the requests you send the desk.
• Events: sign-ins, subscriptions, code redemptions, checkouts, downloads, with a timestamp. We use them to keep the account working and to see which parts of the publication are read.

We do not buy, enrich or sell data, and we do not profile readers. The desk never asks for your name.

Cookies

One session cookie (uw_s) keeps you signed in for 30 days. It is signed, HttpOnly and set only when you sign in. There is no advertising cookie, no third-party tracker and no cross-site identifier. Site traffic is measured with Cloudflare Web Analytics, which uses no cookie and no persistent identifier.

Who processes it

• Cloudflare hosts the site and the database (EU and US infrastructure) and serves the analytics beacon.
• Resend delivers the sign-in links and the edition emails.
• Stripe processes payments and holds your billing details under its own privacy terms.

Each processor acts on our instructions. We share nothing else with anyone, and never for marketing.

How long

For as long as you have an account or a subscription to the edition, and for 12 months after it closes so a billing question can still be answered. Unsubscribing from the edition stops the emails at once; closing the account deletes the watchlist, the alerts and the requests.

Your rights

You may ask what we hold about you, have it corrected or deleted, and object to a use of it. Write to desk@underwrittenlistings.com from the address on the account; we answer within 30 days. If you are in the EU or the UK you may also complain to your data-protection authority.

Contact

The desk: desk@underwrittenlistings.com.