# Privacy at Fieldwork Editions

This notice describes the website implementation as of September 13, 2026. Fieldwork Editions is managed by Jose Contreras; questions about this notice or information associated with a purchase can be sent to pertosqi@gmail.com. The website serves a public catalog and provides private order and download pages after payment.

When you open the catalog, the site sets a recovery cookie named __Host-fw-recovery. It contains a random identifier, is marked Secure and HttpOnly, and can remain in that browser for up to 90 days. Checkout records are linked to a hash of that identifier so the recovery page can locate recent checkouts on the same device. Clearing cookies can remove this recovery access. The 90-day recovery window does not mean that purchase records are automatically deleted after 90 days.

The application stores checkout references, selected guide identifiers, prices, creation times, payment-session references, fulfillment records, and private access tokens in Cloudflare D1. It also records processed payment-event identifiers to avoid duplicate fulfillment, rate-limit counters to control abuse, and short-lived administrator session records. Administrator authentication uses a separate cookie with a four-hour lifetime. The PDF files are stored in private Cloudflare R2 storage and delivered after the application checks the private order token.

Stripe hosts checkout and processes payment details. This application does not receive card numbers or card security codes through its checkout form. It sends Stripe the selected guide and checkout information and receives payment-session and confirmation information used to provide access. Stripe and Cloudflare also handle requests under their own service and privacy practices. Purchase records and private order links are not public catalog content.

The public catalog includes Meta Pixel PageView analytics and externally hosted Google Fonts. Those browser requests can disclose technical connection information to the corresponding providers. In the current implementation, the Meta Pixel is skipped when the browser signals Global Privacy Control or the catalog URL contains a query string or fragment. Private order, recovery, download, and administrator pages do not load that pixel. The About, Contact, and Privacy pages do not load it either.

Private order and PDF links should be treated as access credentials and shared only intentionally. Downloading a PDF saves a separate copy under your control; clearing the website cookie does not delete that local file. For information or access questions, contact the email above and describe the issue without including full payment credentials. This notice may be updated when the website implementation changes.

[Catalog](https://fieldworkeditions.shop/) � [About](https://fieldworkeditions.shop/about) � [Contact](https://fieldworkeditions.shop/contact) � [Privacy](https://fieldworkeditions.shop/privacy)