Privacy
In short
- This site has no analytics, no cookies, no forms and no accounts.
- Like any website, its host logs technical data about each request.
- You pay on a checkout run by Stripe. It collects what is needed for payment, VAT and fraud prevention, and shows the seller the order details.
- After payment you get an order confirmation by email. Your download link is checked with Stripe, and the number of downloads is saved on your order.
- If you email me, I use your message only to answer it.
- Higgsfield links take you to Higgsfield’s site, where Higgsfield sets its own cookies, including one for affiliate tracking.
Who is responsible
The controller of the personal data described here is Rudi Rok, who makes the guides and answers support email. “I” in this notice means Rudi Rok.
- Controller
- Rudi Rok
- [SUPPORT EMAIL]
Visiting this site
This site is a set of static pages. It has no user accounts, forms, comments, analytics, advertising pixels or embedded content from other services. It sets no cookies and stores nothing in your browser. The fonts, images and videos come from this site itself.
Hosting and server logs
The site is hosted by Netlify, Inc. in the United States. When your browser asks for a page or a file, Netlify’s servers receive the technical data every request carries: your IP address, the address of the page or file, the time, your browser and device type, and the page you came from. Netlify uses this data to deliver the site and keep it secure, and may keep it in server logs. See Netlify’s privacy statement.
The legal basis is legitimate interest (GDPR Article 6(1)(f)): a website can’t be delivered or protected without this data. I don’t use it to identify visitors.
Downloading a free PDF works the same way. No sign-up is needed, and nothing is recorded beyond the server log.
Buying a guide
Purchases happen on a checkout page run by Stripe (Stripe Payments Europe, Limited in Ireland, with Stripe, Inc. in the United States), not on this site. The checkout collects your email address, name, billing address or country, card details, a VAT ID if you give one and your answer to the withdrawal box, along with technical data such as your IP address and device. Stripe uses this data to take the payment, calculate VAT, prevent fraud and handle refunds, and saves the buyer details as a customer record on the seller’s Stripe account.
Stripe processes this data for the seller. For some purposes, such as fraud prevention and its own legal duties, Stripe acts as a separate controller under Stripe’s privacy policy. If you choose to save your details with Link, Stripe’s quick checkout, Link’s own terms and privacy policy apply.
What the seller sees
The order in Stripe shows your email address, your name, your billing address or country, what you bought and when, the amount and VAT, your VAT ID if given, and that you ticked the withdrawal box. The seller never sees your full card number.
These details are used to deliver the files, send your order confirmation, keep the accounting records, answer support requests and handle refunds or disputes. The legal bases are the purchase contract (GDPR Article 6(1)(b)), legal obligations under consumer and accounting law (Article 6(1)(c)) and legitimate interest in handling disputes (Article 6(1)(f)). You don’t get marketing email unless you have agreed to it separately.
Download and order confirmation
After payment Stripe sends you to a thank-you page whose address holds your order’s checkout reference. The download button sends that reference to a small function hosted by Netlify, which runs in the United States. The function checks the order with Stripe and saves the number and time of your downloads on the order in Stripe. That is how a download link is limited to 90 days and 10 downloads. The legal bases are the purchase contract and legitimate interest in stopping download links from being shared (Article 6(1)(f)).
The seller emails you an order confirmation through Resend (Resend, Inc. in the United States). It holds your order details, the withdrawal confirmation and your download link. Consumer law requires this confirmation (Article 6(1)(c)). Stripe also emails you a receipt.
Emailing support
If you email [SUPPORT EMAIL], I receive your email address, your name if you include it, and what you write. I use it only to answer you and to deal with your request. The legal basis is legitimate interest in answering you, or the purchase contract when your question is about a purchase. My email service provider stores the messages for me.
Higgsfield links and affiliate cookies
Links to higgsfield.ai take you to a site run by Higgsfield Inc. in the United States. From there on, Higgsfield’s privacy policy and its cookie choices apply.
Links marked “Ad link: Higgsfield · 18+” first pass through a short address on this site (for example /go/higgsfield-page). It adds my affiliate code and sends you on to Higgsfield. Netlify logs that request like any other.
Higgsfield’s site stores the affiliate code in a cookie on your device, so that a subscription you take later can be credited to my link. Higgsfield’s affiliate program runs on FirstPromoter, which can also set tracking cookies on Higgsfield’s site. This site sets none itself. In the affiliate program I can see totals such as referrals and commissions. What else Higgsfield shares with affiliates is up to Higgsfield.
Who else gets data
Personal data goes only to the services named on this page: Netlify for hosting and the download function, Stripe for payments, Resend for the order confirmation, and my email service provider for support email. Personal data is not sold or shared for advertising.
Netlify, Inc., Stripe, Inc. and Resend, Inc. are based in the United States. For transfers from the EU they rely on the EU-U.S. Data Privacy Framework and the European Commission’s standard contractual clauses.
How long data is kept
- Server logs: kept by Netlify under its own retention rules.
- Order confirmation email: Resend keeps a record of sent emails under its own retention rules.
- Order details (the order in Stripe, including the withdrawal box, the download count and the order confirmation): kept as long as accounting law requires, in Finland six years from the end of the year of the purchase. Stripe also keeps what its own legal duties require.
- Support email: kept until your request and any follow-up about the same matter are dealt with, then deleted.
Your rights
You can ask for:
- a copy of your personal data
- corrections to it
- deletion, where no legal duty requires keeping it
- restriction of its use
- a machine-readable copy of the data you gave for a purchase
You can also object to any use based on legitimate interest. Email [SUPPORT EMAIL]. You’ll get an answer within one month.
For data Stripe uses as a separate controller, you can also contact Stripe directly: see Stripe’s privacy policy.
If you think your data is handled unlawfully, you can complain to the Finnish Data Protection Ombudsman at tietosuoja.fi, or to the data protection authority where you live.
The guides and Higgsfield are for adults (18+).
Contact
Questions about privacy: [SUPPORT EMAIL]. If this notice changes, the date at the top changes too.