Skip to content
CL
Chris Luengas

Privacy policy

This policy explains what personal data we handle when you buy from or create an account on this store, what we use it for, and who we share it with. Data controller: Chris Luengas, LLC, contact support@chrisluengas.com.

What we collect

  • Your email address. Needed to deliver your product, send your receipt and give you access to your downloads.
  • Name and phone number, if you choose to add them to your account. Both are optional.
  • Your purchase history: what you bought, when, the amount, and the payment identifier.
  • Technical usage data: pages visited, device and browser, and errors that occur on the site.

What we don't collect

We never see or store your card details. The payment form is provided by Stripe and the details go straight to Stripe; our servers never receive them. All we keep of a payment is its identifier and the amount.

Cookies and local storage

We use the bare minimum needed for the store to work, with no advertising or cross-site tracking cookies:

  • A cookie that remembers your preferred language.
  • Your cart, kept in the browser's local storage until you check out or empty it.
  • A short marker in local storage to deliver a free download on the confirmation screen.
  • Clerk session cookies to keep you signed in.

What we use it for

  • Delivering what you bought and keeping your downloads accessible (performance of the contract).
  • Sending receipts and emails about your order (performance of the contract).
  • Answering your questions and technical problems (performance of the contract).
  • Understanding how the store is used and fixing faults (legitimate interest).
  • Sending you the newsletter, with your consent.
  • Meeting tax and accounting obligations (legal obligation).

We do not sell your personal data or hand it to third parties for their advertising.

Who we share it with

We work with the following providers, who process data on our behalf:

  • Clerk: authentication and account management. Receives the identity data you use to sign in, such as your email and name. Clerk's policy
  • Stripe: payment processing. Receives your email and card details. Stripe's policy
  • Convex: database for the store. Holds your account, orders and download permissions. Convex's policy
  • Cloudflare: hosting, security and private storage of downloadable files. Processes technical data such as your IP address when serving the site and files. Cloudflare's policy
  • Resend: transactional and newsletter email, such as receipts, download recovery, welcomes, releases, and offers. Receives your email address. Resend's policy
  • PostHog: site usage analytics under legitimate interest, with no cookies, no device persistence, no session recording and no email address. PostHog's policy
  • Sentry: technical error and site performance monitoring under legitimate interest, with no session recording, request bodies or deliberate submission of identity data. Sentry's policy

We may also disclose data where the law requires it.

International transfers

These providers run servers in the United States, so your data may be processed outside your country of residence, including outside the European Union. Each applies its own contractual safeguards for those transfers; the detail is in the policies linked above.

How long we keep it

We keep your account data while the account is active. We keep your purchase history and payment identifiers for as long as needed to keep your downloads available, handle refunds or claims, and meet applicable tax and accounting obligations.

Technical download events are deleted after 180 days, and expired anti-abuse counters after 7 days. We keep subscription and opt-out records so we can demonstrate and respect your preferences.

Your rights

You can ask at any time to access your data, correct it, delete it, receive a portable copy, or object to certain processing. Email support@chrisluengas.com to exercise any of these rights, including objection, and we will respond within 30 days at most.

If you request erasure, we will delete or anonymize data that is no longer needed and explain anything we must retain for a legal obligation or to resolve claims. Closing account access does not cancel a purchase or by itself invalidate the permanent links in your receipts; if you also ask us to erase the entitlement tied to a purchase, those links will stop working.

If you live in the European Union and believe we have not handled your request properly, you may complain to your national data protection authority.

Children

This store is not aimed at children under 16, and we do not knowingly collect data from anyone that age.

Changes

If we change this policy we will update this page. Substantial changes will be announced here before they take effect.

Contact

Chris Luengas, LLC: support@chrisluengas.com