Privacy notice

Information we use

When you visit, our hosting provider, Vercel, processes technical request information such as your IP address, browser information, requested pages, and request times to deliver and protect the website.

If you email us, we receive your email address, the name you provide, your message, and any attachments. Our support mailbox uses Apple iCloud Mail. We use this information to answer your enquiry and keep relevant support records. Please do not send card details, passwords, private keys, or seed phrases.

We do not load advertising pixels or analytics tracking scripts. Fonts are hosted with the website. We do not sell personal information or share it for cross-context behavioral advertising.

Why we use it and who receives it

We use account and purchase information to deliver the kit, confirm access, send service emails, and handle billing or support requests. We use technical information to operate and secure the website. Where a legal basis is required, we rely on our legitimate interests in running a secure website and answering enquiries, performing our contract with you or steps taken at your request before a contract, or compliance with a legal obligation, as applicable.

Vercel, Stripe, Supabase, Resend, and Apple process information to provide the services described here. Their own privacy notices explain any processing they perform independently, including payment fraud prevention. We may also disclose information when required by law, to respond to lawful requests, or as necessary to protect legal rights and prevent abuse.

Storage and retention

We keep information for as long as reasonably needed for the purpose it was collected, including responding to support requests, maintaining security, resolving disputes, and meeting legal obligations. The appropriate period depends on the type of information and the reason it is held. We keep subscription and consent records while needed to honor your choices, including an opt-out record to prevent unwanted resubscription. Signup abuse limits use keyed hashes of IP addresses in short-lived counters, removed after expiry when subsequent signups are processed. Confirmation links expire after 24 hours.

We use access restrictions and encrypted connections to help protect information. No online service can guarantee absolute security. We operate in the United States, and our service providers may process information in the United States and other countries. Where applicable law requires safeguards for international transfers, the relevant provider agreements and transfer mechanisms apply. You can contact us for information about transfers affecting your data.

Your choices

Depending on the law that applies to you, you may have rights to access, correct, delete, receive a copy of, restrict processing of, or object to the use of your personal information. You may also have the right to complain to your local data-protection authority.

To send a privacy request: Show support email. We may need to verify your identity before acting on a request. Some information may need to be retained where the law permits or requires it.

Payments, sign-in, and kit downloads

Stripe hosts checkout and processes your payment details, checkout email, transaction information, and fraud-prevention data. We do not receive or store your full payment-card number. We store your purchase email, Stripe transaction references, product, amount paid, access status, and service-email delivery status in Supabase.

Supabase provides email-link authentication and private file storage for the kit. It processes your account email, authentication and session information, and requests to download kit files. Essential sign-in cookies keep you signed in; signing out ends the browser session. Private download links expire and require an eligible account to be renewed.

Resend sends sign-in and kit-access emails and processes the recipient address, message content, and delivery information. Email open and click tracking are disabled. Service emails are necessary to provide access and are separate from marketing.

A purchase or support enquiry does not subscribe you to marketing. If you choose to receive updates about new videos, products, and courses, we send a confirmation email. We record your email, where you signed up, the consent wording version, confirmation time, and subscription status in Supabase. We use your consent for these optional updates; you can withdraw it through the unsubscribe link or by contacting support, without affecting your kit access or essential service emails. Resend processes confirmation messages and, when campaigns begin, marketing delivery and unsubscribe information. We do not enable email open or click tracking.