PRIVACY POLICY

// WHO

This site is run by Jakub Szuminski, an individual based in Poland. Not a registered company. Contact: jszuminski@pm.me.

// WHAT WE STORE

The only personal data this site stores is:

• Your email address, used to grant course access and send the 6-digit sign-in codes you type on the site to log in. Codes expire after about an hour.
• A session cookie set by Supabase after you log in. It keeps you signed in.

We use PostHog (EU region) for product analytics: anonymous pageviews, scroll depth, and which sample lessons people try. After you log in, the session is linked to your account so we can debug issues. No ad pixels. No third-party advertising. URL parameters that may carry secrets (`token`, `code`, `email`) are stripped client-side before being sent.

// PAYMENTS

Payments are processed by Lemon Squeezy, the merchant of record. They collect and store your billing details (name, address, card data). We never see your card number. We only receive your email and the fact that you paid, in order to grant access.

// SUBPROCESSORS

• Supabase - auth and database hosting (EU region).
• Lemon Squeezy - payments and invoicing.
• Vercel - site hosting.
• PostHog - product analytics (EU region).

// YOUR RIGHTS

Under GDPR you can request a copy of the data we hold on you, or ask us to delete it. Email jszuminski@pm.me and we'll handle it within 30 days. Deleting your account also revokes your access to the course.

// RETENTION

Account data is kept as long as you have access. Payment records are kept by Lemon Squeezy according to their retention policy and tax law obligations.