Privacy

De-identified by design.

Corriden’s analysis works on de-identified census data: ages rather than birthdates, no names, no government identification numbers. However the census reaches us — email today, secure upload at launch — identifier-style columns are rejected and birthdates are converted to ages and discarded on intake. If you prefer, send the census as a password-protected attachment and share the password separately. Census contents are never written to logs, analytics, or error reports.

What we collect.

If you email us, we keep the correspondence and your email address to respond and provide the service. If you purchase, payment is processed by Stripe; Corriden does not store card numbers. That is the extent of personal data we handle today.

Analytics without cookies.

We use Plausible, a privacy-first analytics service that uses no cookies and collects no personal data. We see aggregate page counts, not individuals.

No selling, no sharing.

We do not sell or share data with advertisers or data brokers. Service providers (hosting, email, payments) process data only to run the service.

Retention and deletion.

Census source files are deleted within 30 days of report delivery; the report itself retains only aggregate results, never member-level rows. Reports are reproducible from their printed ID, engine version, and seed, which lets us keep the minimum. Email support@corriden.com to request deletion of anything we hold about you.

Who we are.

Corriden is operated by Aurelian Syndicate L.L.C. Questions: support@corriden.com — a person reads it.