What we collect and why
We store the email address you enter, the checklist fields you submit on dryerventdue.com, your order history, and a first-party attribution cookie that lasts one year so we can see which page referred a purchase.
The checklist fields are the vent location, the next date you want to remember, and the optional property label. They exist so the PDF can be tailored to one property and so the reminder schedule knows which date to count back from. The order history records the plan, the amount, the status, and the times of each change so a delivery can be proved and a refund can be checked.
We do not ask for a phone number, a mailing address, or a date of birth, and there is no field on any purchase form where a card number could be typed. If a message ever asks you to send card details by email, it did not come from us.
Sign-in, sessions, and the six-digit code
When you sign in to /account, we send a 6-digit verification code to your email and set an encrypted HTTP-only session cookie. We do not use advertising or cross-site tracking cookies.
The code expires after 5 minutes, the resend control waits 60 seconds, and only a hash of the code is stored on our side. Sign-in sessions are HTTP-only, Secure, SameSite=Lax, and slide forward for 7 days while you keep using the account. There are no passwords on this site, and there is no Google or social sign-in button, so there is no third-party identity provider involved in the account.
If someone asks you for a six-digit code, do not share it. The code lets the holder reach the order history and the PDF files attached to the paying address, which is exactly why support will never ask you to send one.
Payment data and what we never see
Payment card numbers are handled directly by our card payment processor. We never see or store your card number.
What our order record contains is the plan key, the amount in cents, the currency, an internal order identifier, the processor reference, the payment status, and the timestamps of creation and confirmation. It also carries the first landing page, the first referrer, any campaign tag, and the country reported by the network, because those fields explain which page produced a sale when we review the site as a whole.
A refund is sent back through the same processor to the original payment method. To do that we need the processor reference that is already attached to the order, not your card number, which is why a refund request only needs the email address that paid.
Cookies, attribution, and analytics
The site sets one first-party attribution cookie that lasts one year. It records an anonymous visitor identifier, the first page that brought you here, the first external referrer, any campaign tag in the address, and a coarse label for whether the session came from an AI assistant. It exists so a purchase can be credited to the page that introduced the site instead of being treated as anonymous.
There is no advertising cookie, no cross-site tracking cookie, no social embed, and no third-party pixel that profiles you across other websites. The checkout script that renders the payment window is loaded from the payment processor and is used only to display and confirm the transaction you started.
Emails we send and how to stop them
Transactional emails and scheduled reminders are sent from support@dryerventdue.com.
There are four kinds. The first is a sign-in code, sent only when you request one. The second is the delivery email with the PDF, sent after a confirmed payment. The third is the reminder series at 30, 7, and 1 day before your stored date, and it exists only on the annual and lifetime plans. The fourth is a short checkout follow-up, at most four messages, sent only when an order was started with an email address and never paid.
Every reminder and follow-up carries a one-click unsubscribe header and a visible unsubscribe link that works without signing in. Using it stops future reminder and follow-up email to that address. A hard bounce or a spam complaint also suppresses the address automatically, so a broken mailbox is not retried indefinitely.
Who we share with, retention, deletion, and contact
We do not sell, rent, or share your email address or checklist answers with contractors, lead brokers, or advertisers.
Email support@dryerventdue.com to delete your reminder schedule or your account profile; we complete deletion within 7 days while retaining required payment accounting records.
Deleting a profile covers the login and the reminder schedule attached to it. Payment records themselves are kept as long as bookkeeping rules require, because a refund or a tax record has to remain provable after a customer leaves. The site is intended for adults 18 and older, and we do not knowingly collect information from anyone younger.
What a support email contains, and how we handle it
We read support email and use it to answer the message that was sent. That means the address you write from, the text you include, and any details you attach are visible to the person handling the request, and they stay in the mailbox while the issue is open so a reply can refer back to it.
Do not send a card number, a card expiry, a security code, or a six-digit sign-in code. None of them is needed to find an order, and an inbox is not a safe place for them. If a message claiming to be from Dryer Vent Due asks for those details, it did not come from us, and you should not reply with them.
Where the records live and who handles them
The site runs as a Cloudflare Worker, and the order, account, and reminder records are stored in a Cloudflare D1 database bound to that Worker. Email is sent through the email service configured for the site, with a fallback transactional provider, and card payments are handled by the payment processor that opens the checkout window.
Those providers process the data needed for their part of the transaction. We do not pass them your checklist answers for advertising, we do not keep a separate marketing list with a third party, and we do not add an address to a list because someone wrote to support.
An address you can open yourself
Delivery and sign-in both go to the address on the order, so an address you cannot open is an address that cannot receive the file or a sign-in code. A shared workplace inbox or a family address is not forbidden, but anyone with access to it can open the delivery email and request a code for the account.
Use an address you control if the order history and the file should stay with you. A support message sent from a different address can still be matched to an order only when it names the paying address, which is why the account is keyed to the email rather than to a name or a phone number.