Privacy Policy

1. What we collect

Account data: your name, email address and password hash. Purchase data: what you bought, when, and the last four digits of the card. Usage data: which pages you visited, in aggregate.

We do not collect your full card number. Payments are processed by our payment provider and the card never reaches our servers.

2. Why we collect it

To deliver what you paid for, to let you log back in, to send the emails you asked for, and to answer you when you contact us. That is the complete list of purposes.

3. Analytics and cookies

We use one privacy-respecting analytics tool that sets no cookies and stores no personal identifiers. There is no advertising pixel on this site and no third-party tracking script.

The only cookies we set are the ones that keep you logged in and the one that remembers whether you chose the light or dark theme.

4. Email

Newsletter emails include an unsubscribe link that works in one click, with no confirmation step and no retention offer. Transactional emails — receipts, password resets, cohort logistics — are sent regardless of newsletter status because you need them.

5. Who we share it with

Our payment processor, our email provider and our hosting provider, each only with what they need to do their job. We do not sell data, we do not rent lists, and we do not share anything with advertisers because we do not have any.

6. How long we keep it

Account and purchase records are kept for seven years, because tax law requires it. Analytics data is aggregated after ninety days and holds nothing identifying. Everything else is deleted when you ask.

7. Your rights

You can ask for a copy of everything we hold about you, ask us to correct it, or ask us to delete it. Email hello@byline.studio and it will be done within thirty days, usually within two.

Deleting your account removes your data but not your purchase records, which we are legally required to retain.

8. Security

Everything is served over TLS, passwords are hashed with a modern algorithm, and access to production data is limited to two people. If a breach ever affects you, you will hear it from us within seventy-two hours.

9. Children

Nothing here is directed at anyone under sixteen and we do not knowingly collect their data.

10. Changes and contact

Material changes are emailed to account holders before they take effect. Questions, requests and complaints go to hello@byline.studio.