Privacy Policy

1. Overview

MyLuts.com ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

2. Information We Collect

Information you provide directly:

• Email address — provided at checkout, used to deliver your purchase and send transactional emails.
• Payment information — processed entirely by Stripe. We never see or store your card number, CVV, or full payment details.

Information collected automatically:

• Usage data — pages visited, time on site, referring URL. Collected via anonymized analytics (if enabled).
• IP address — logged for security and fraud prevention purposes.

3. How We Use Your Information

• To process and fulfill your order (deliver download links).
• To send transactional emails (order confirmations, download links, subscription updates).
• To send new pack release emails if you are a subscriber.
• To detect and prevent fraud.
• To improve the Site and our products.

We do not sell your personal data to third parties.

4. Third-Party Services

We use the following trusted third-party services to operate the Site:

• Stripe — payment processing. Your payment data is subject to Stripe's Privacy Policy.
• Resend — transactional email delivery. Emails are processed through Resend's infrastructure.
• Cloudflare — file hosting and delivery (R2 storage). File downloads are served via Cloudflare's network.
• Vercel — website hosting. Server request logs may be retained per Vercel's data policies.

5. Cookies

We use minimal cookies necessary for the Site to function (e.g., session state). We do not use advertising or tracking cookies. You can disable cookies in your browser settings, though this may affect Site functionality.

6. Data Retention

We retain your email address and purchase records as long as your account is active or as required by law (e.g., for tax/accounting purposes). Download tokens are stateless and expire after 7 days with no data stored server-side.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (right to erasure).
• Opt out of marketing emails via the unsubscribe link in any email.

To exercise any of these rights, email support@myluts.com.

8. Children's Privacy

Our Site is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with data, contact us and we will delete it.

9. Security

We take reasonable technical and organizational measures to protect your data, including HTTPS encryption, stateless token-based downloads, and not storing full payment details. No method of internet transmission is 100% secure, however, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will update the "Last updated" date at the top. Continued use of the Site after changes constitutes acceptance of the updated policy.

11. Contact

Questions or concerns about your privacy? Contact us at support@myluts.com.