Privacy Policy

Last updated: September 28, 2026

1. Data we collect

Seller accounts: your email address and a salted, hashed password (we never store passwords in readable form), plus the ID of the Stripe account you connect to receive your sales.
Buyer emails: collected at checkout and used solely to deliver purchased files and license keys, plus purchase receipts. Buyers do not create accounts.
Download telemetry: when a download link is used we store a one-way SHA-256 hash of the visitor's IP address (salted with an app-level pepper) and a truncated user agent, for fraud prevention and dispute evidence. Raw IP addresses are never stored.
Order records: product purchased, amount, fee, timestamps, and Stripe session references. We never see or store full payment-card numbers — payments are processed by Stripe.

2. Subprocessors

Cloudflare R2 — storage of your uploaded product files.
Neon — hosted Postgres database for accounts, orders, and telemetry.
Stripe — payment processing for buyer checkouts.
Resend — transactional email for delivery links and receipts.

3. Data retention

Order and fee records are retained for seven years for tax and accounting purposes. Download telemetry is retained for 24 months. Account data is kept until you request deletion, after which it is removed except where retention is legally required.

4. Your rights

You may request access to, correction of, or deletion of your personal data by emailing forestblah2011@gmail.com. Buyer data is shared with the seller whose product was purchased (the buyer's email is required for delivery) and is otherwise not sold or shared.

5. Contact

Privacy questions: forestblah2011@gmail.com.