Privacy Policy

PLACEHOLDER — replace with your approved Privacy Policy (POPIA / GDPR basis) before going live.

What we collect

Buyer email, order and purchase records, and limited request metadata (e.g. IP for security).

How we use it

To process payments, deliver purchases, provide library access, and prevent abuse.

Processors

Payments via Stripe; data + storage via Supabase; transactional email via Resend.

Analytics

We count visits with our own analytics, on our own server in South Africa. It sets no cookie and involves no third party. Your internet address and browser details are turned into a code that changes every day, then thrown away. We see totals: the pages visited, where visits came from, the type of device and the country. We can't tell who you are. Joining a waitlist, signing up and paying are counted too, without your name or email address. Visit records are deleted after 90 days; daily totals are kept. We rely on our legitimate interest in knowing how the site is used (POPIA section 11(1)(f)). To object, let your browser send Do Not Track or Global Privacy Control, or open any page with ?ea=off. Nothing is counted then.

Your rights

Access, correction, deletion, and how to exercise them.

Retention

How long records are kept.

Contact

How to reach the operator about privacy.