Privacy Policy

1. Payment Information

When you purchase the course, checkout is handled entirely by Stripe. We never see or store your full card number, expiration date, or CVC — that information goes directly to Stripe. We do receive your email address and confirmation that payment succeeded, which we use only to grant you access to the course.

2. Access Cookie

After a successful purchase, we set a single signed, httpOnly cookie (sat_access) in your browser to remember that you’ve paid, so you don’t have to pay again each visit. This cookie lasts up to 180 days, contains no personal information beyond your email, cannot be read by other websites, and is not used for advertising or tracking.

Because access is tied to this browser cookie rather than a user account, it will not automatically follow you to a different browser or device.

3. Progress Data (Stays on Your Device)

Lesson-completion checkmarks and any “why did I miss this” tags you select on quiz questions are stored using your browser’s localStorage — this data stays on your device and is never sent to our servers. Clearing your browser data or switching devices will reset it.

4. What We Don’t Do

• We do not currently use third-party analytics, advertising, or tracking scripts.
• We do not sell or rent your information to anyone.
• We do not maintain user account profiles beyond the access cookie described above.

5. Data Retention

The access cookie expires automatically after 180 days. Payment records are retained by Stripe according to their own policies (often required for tax and fraud-prevention purposes). Progress data lives only in your browser’s local storage and is retained until you clear it yourself.

6. Your Choices

You can clear your progress data at any time by clearing your browser’s site data for this domain. You can end your access session by using the “Log out” link, which deletes the access cookie. To request deletion of any payment-related information we hold, contact us using the details below — we’ll also need to check with Stripe, since they are the primary holder of that data.

7. Children’s Privacy

The Service is intended for users aged 13 and older, consistent with our Terms of Service. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, contact us and we will delete it.

8. Security

The access cookie is signed to prevent tampering and marked httpOnly so it can’t be read by page scripts. Payment processing uses Stripe’s PCI-compliant infrastructure. No method of transmission or storage is 100% secure, but we take reasonable steps appropriate to the limited data we handle.

9. Changes to This Policy

If this policy changes, we’ll update the “Last updated” date above. Material changes will be reflected here before they take effect.

10. Contact

Questions about this policy or your data? Contact us at support@satchamber.example.