Privacy policy

Data collected

No user accounts. Payments are handled by Stripe (Payment Link / Checkout). Card data never hits our servers.

Checkout session

After payment, /succes receives a Stripe session_id. It is used only to verify payment status via Stripe’s API (server-side with STRIPE_SECRET_KEY) and authorize pack downloads.

Cookies & analytics

No ad cookies in the current version. The host (Vercel) may keep technical logs (IP, user-agent) for security and operations.

Retention

This MVP does not store an application database. Payment records remain with Stripe under their policy.

Your rights

For payment-data requests, contact Stripe and/or the publisher via GitHub. Access, rectification and erasure rights may apply under GDPR.