What we collect
We collect the minimum information needed to provide the service:
- Email address — to create your account and send you login links.
- Course progress — which steps you have completed, so you can pick up where you left off on any device.
- Personal notes — text you type into the notes feature, stored against your account.
- Purchase record — whether you have paid for full access (a boolean flag). We do not store card details; payments are handled entirely by Gumroad.
Why we collect it
- Account — your email is your identity. Without it we cannot send you a login link.
- Progress saving — so the course remembers where you are.
- Transactional emails — login links, purchase confirmation, and occasional course updates. No marketing unless you join the waitlist.
Processors we use
Your data passes through the following third-party services, each of which has its own privacy policy:
- Supabase — database and authentication (EU region).
- Resend — transactional email delivery.
- Gumroad — payment processing. We receive only your email and purchase confirmation.
- Vercel — hosting and edge infrastructure.
What we do not do
- We do not sell your data to anyone.
- We do not use advertising networks or tracking pixels.
- We do not share your data with third parties beyond the processors listed above.
Your rights
You can request deletion of your account and all associated data at any time by emailing hello@passwordcare.co. We will action the request within 30 days.