privacy policy

- email address (provided by paypal at checkout, used to deliver the file). - paypal transaction id (used to verify ownership for support + refunds). - basic server logs (ip + user-agent on api requests, retained 30 days for abuse prevention). we do not collect: card data, mailing address, phone, browsing history, cross-site cookies.

one functional cookie: `cart` — stores your shopping cart locally. expires 7 days. no analytics or advertising cookies on this site.

paypal is our payment processor. when you check out, you interact with paypal directly. paypal's privacy policy applies to that interaction. we receive only: your email, your name (optional), the transaction id, and the captured amount.

we use resend to send: (a) purchase delivery emails with download links, (b) optional release notes when v1.x skills update. resend's privacy policy applies to email delivery. you can opt out of release notes via the unsubscribe link in any email.

purchase records (email + transaction id + skills bought): retained for 7 years for tax + dispute purposes. server logs: 30 days.

if you live in the eu, uk, or california, you have rights to: access your data, request correction, request deletion (subject to tax retention requirements), export your data, object to processing. email support@skillor.app with the subject 'data request' + your purchase email. response within 30 days.

skillor is sold to professionals. not directed at children under 16. if you believe a minor purchased, contact support@skillor.app for refund + deletion.

download tokens are signed jwts with 24-hour expiry. payment data is handled exclusively by paypal. our hosting (vercel) provides tls in transit. we do not run a database — purchase records are stateless via signed paypal `custom_id`.

material privacy changes will be emailed to past customers. effective date tracks the latest version.

privacy questions: support@skillor.app.