Privacy Policy

1. Data we collect

• Order and contact data: the email address you provide at checkout, used to deliver your purchase and provide support.
• Payment data: processed directly by Stripe. We never receive or store your full card details. We receive transaction metadata such as payment status, amount, currency, and payment identifiers.
• Download data: the private download tokens we generate for your order, along with download counts and timestamps.
• Technical data: IP address, request logs, and similar information processed by our infrastructure provider Cloudflare to deliver and secure the service.

2. How and why we use your data

We process personal data on the following legal bases under the EU General Data Protection Regulation (GDPR):

• To fulfil your order and deliver your downloads — performance of a contract.
• To provide customer support — performance of a contract and our legitimate interest in helping customers.
• To prevent fraud and secure the service — our legitimate interest.
• To meet tax and accounting obligations — compliance with a legal obligation.

3. Service providers we share data with

We share data only with providers that help us run the service:

• Stripe — payment processing and fraud prevention.
• Cloudflare — hosting, storage, content delivery, and security.

We do not sell your personal data, and we do not share it for advertising purposes.

4. International transfers

Our providers may process data outside the European Economic Area. Where this happens, the transfer is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

5. How long we keep your data

We keep order and transaction records for as long as required by applicable tax and accounting law (in Portugal, typically up to 10 years). Download tokens expire after the configured period, and technical logs are retained for a limited time before deletion.

6. Your rights

Under the GDPR you have the right to access, correct, delete, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent where processing is based on consent. To exercise any of these rights, contact [email protected]. You may also lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD).

7. Cookies and similar technologies

The site does not use advertising or tracking cookies. We rely on essential functionality only. Web fonts are served from our own servers, so no font requests are sent to third parties. Stripe may set cookies that are necessary to process payments and prevent fraud during checkout.

8. Children

The service is not directed to children under the age of 16, and we do not knowingly collect their personal data.

9. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "last updated" date at the top of this page.

10. Language

This policy is provided in several languages for your convenience. If there is any discrepancy or conflict between the English version and a translation, the English version prevails.

11. Contact

Questions about this policy or your data? Email us at [email protected].