We collect only the email address you provide to create your account and the subscription/entitlement data needed to give you access. The lawful bases are contract (providing the service you pay for) and, for the optional digest email, consent (double opt-in, one-click unsubscribe).
Payments and card data are handled entirely by Stripe acting as a processor under a data-processing agreement; we never see or store card numbers.
You may request access to, correction of, or deletion of your data at any time by contacting us. We do not sell personal data.