Privacy Policy
Effective August 7, 2026
What we collect
If you subscribe to the Tumak newsletter, we collect only the email address you submit. Nothing else. The email goes into our newsletter provider so we can write to you when there's something new.
If you buy something, we collect what an order needs: your email address, what you bought, what you paid, and the identifiers Stripe gives us for the payment. We never see or store your card number.
We also log each attempt to use a download link: the time, the IP address it came from, and the browser it reported. This is how we stop a private link being passed around, and how we answer a bank when a payment is disputed. It is the only place on this site where we log an IP address.
Who else touches it
We are a one-person operation using four services, each of which sees only the piece it needs:
- Stripe takes the payment and holds the card details. We only ever receive the result.
- Resend delivers your receipt and download link by email.
- Cloudflare hosts the site, stores the order record, and serves the product file.
- Substack runs the newsletter, if you subscribed to it.
Each of these is a processor acting on our instructions. None of them get your data for their own purposes, and we never sell, rent, or trade it.
How long we keep it
- Download links and their order record: deleted automatically shortly after the download window closes, normally about a week after purchase.
- Purchase and download log: kept 180 days, then deleted automatically. That window exists because a bank can raise a payment dispute months after a sale, and we need to be able to show what was delivered.
- Newsletter email: kept until you unsubscribe.
- Stripe's own records: kept by Stripe under its own policy and its financial record-keeping obligations, which we cannot shorten.
What we don't collect
We don't track you across the web. We don't run third-party analytics, advertising trackers, or cookies beyond what's needed to make the site load and to complete a checkout. We don't sell, share, or rent your information to anyone. We don't build a profile on you, and there is no automated decision-making here.
Your data, your control
You can unsubscribe from the newsletter anytime via the link in every email we send. If you'd like your email permanently removed from our records, write to [email protected] and it will be deleted within 7 days.
You can also ask what we hold about you, ask for a copy, or ask us to correct it. Same address, same 7 days. The one thing we may hold back is the purchase and download log for an order that is under an open payment dispute, until the dispute closes.
Updates
If this policy changes meaningfully, we'll update the date at the top and note what changed.
Contact
Privacy questions? Email [email protected].