Legal
Privacy Policy
How we collect, use and protect your personal information.
Last updated: October 6, 2026
Template text, not legal advice. Replace everything in [brackets] and have a qualified lawyer review this page for your business and country before publishing.
1. Data controller
[Legal business name], [registered address], is responsible for your personal data. Contact: [privacy email].
2. What we collect
Email address, and optionally your name, when you download a free product, subscribe to the newsletter, create an account or contact us.
Account data managed by our authentication provider (FrameAuth): email, name, profile photo, sign-in timestamps and access tags such as “pro”.
Purchase data processed by our payment provider: billing name, country, tax details and transaction history. We never see or store full card numbers.
Usage data: pages visited, device and browser type, collected through privacy-friendly analytics provided by Framer.
Messages you send through the contact form.
3. Why we use it
To deliver free downloads and products you’ve unlocked (contract / legitimate interest).
To run your account and verify your access level (contract).
To process payments and comply with tax law (contract / legal obligation).
To send the newsletter, if you subscribed (consent; unsubscribe anytime).
To reply to your messages and provide support (legitimate interest).
To keep the site secure and improve it (legitimate interest).
4. Who we share it with
We use trusted processors who handle data on our behalf: Framer (website hosting, forms and analytics), FrameAuth (authentication and membership), [Lemon Squeezy / Stripe] (payments), [email provider] (newsletter). Some of these are located outside your country, including the United States; where required, transfers are protected by appropriate safeguards such as Standard Contractual Clauses. We never sell your personal data.
5. How long we keep it
Account data is kept while your account is active and for up to 24 months after your last sign-in. Purchase records are kept as long as tax law requires. Newsletter data is kept until you unsubscribe. Contact messages are kept for up to 12 months.
6. Your rights
Depending on where you live (for example under the GDPR, UK GDPR, CCPA or India’s DPDP Act), you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent. To make a request, email [privacy email]. You can also complain to your local data protection authority.
7. Cookies
We use essential cookies and local storage to keep you signed in. See the Cookie Policy for details.
8. Children
The site is not directed at children under 16 and we don’t knowingly collect their data.
9. Changes
We’ll post any changes to this policy on this page and update the date above.