Privacy policy

What we collect

• Account details you provide (name, email, password hash).
• Order and payment metadata needed to fulfill purchases (amounts, currency, Stripe customer/session identifiers). We do not store full card numbers.
• Technical data such as IP address, browser type, and basic server logs used for security and reliability.
• Content you interact with on the service (owned routes, downloads requested).

How we use information

• To create and manage your account.
• To process payments, grant route access, and provide authorized downloads.
• To send transactional messages (purchase confirmations, security notices).
• To improve reliability, prevent fraud, and comply with legal obligations.

We do not sell your personal data.

Payments (Stripe)

Checkout is handled by Stripe. Stripe processes payment details under its own privacy policy. We receive confirmation events (for example checkout completed or refunded) so we can update local orders and access. Access is never granted from the browser redirect alone.

Cookies & sessions

We use essential cookies and session storage to keep you signed in, protect forms (CSRF), and operate the site. We also use Google Analytics (gtag.js) to understand how the site is used. Google processes this data under its own privacy policy. We do not use third-party advertising trackers as part of the core product.

Retention

Account and order records are kept for as long as needed to provide purchased access and meet accounting or legal requirements. You may request account deletion; order history required for compliance may be retained in anonymized or restricted form.

Your choices

You can update profile details in your dashboard. Depending on your location, you may have rights to access, correct, delete, or restrict processing of personal data, and to lodge a complaint with a supervisory authority. Contact us to exercise these rights.

Contact

Privacy questions: hello@thatplacefrom.com