Privacy policy

This is a stub. Replace with your real privacy policy before going live. The shop, as scaffolded, collects only the email address you enter at checkout and the payment metadata Stripe forwards to us (last-4 of card, country, billing zip — not the full card number).

What we collect

• The email you enter at checkout — used to send your download link.
• Stripe checkout session metadata — used to mark your order as paid.
• Server logs (IP, user-agent, timestamp) for ~30 days for abuse mitigation.

What we don’t collect

• Full card numbers — Stripe handles all card data on their PCI-DSS-compliant infrastructure.
• Tracking cookies, ad pixels, third-party analytics — none ship with the scaffold.

Your rights

To request deletion of your order data, email support@example.com (replace this address before launch). We’ll remove the row from the database and confirm in writing within 30 days.