Privacy Policy

What is collected at checkout

A purchase records the buyer's email address (used to deliver the file or member access link), the amount paid, the country derived from billing details, and any optional name or short message attached to a public comment. Card details are entered directly into Paddle's checkout iframe and never reach this server.

How that information is used

The email is used to send the order confirmation, the download link or member access link, and any later support replies. If the buyer chose to leave a public comment, only the first name and the message appear on the public list; nothing else is published. Customer information is never sold, rented, or shared for marketing.

For subscriptions, the customer ID returned by Paddle is stored so the buyer can manage or cancel their membership through Paddle's customer portal.

Tools the cloister relies on

• Paddle.com Inc. — payment processing, sales tax and VAT collection, invoicing, fraud screening (Paddle is the merchant of record);
• Resend — transactional email delivery (order confirmations, member welcome, support replies);
• DigitalOcean — server hosting in the United States;
• Cloudflare — DNS resolution.

Each provider receives only what is required to fulfill the order. Paddle's privacy policy is at https://www.paddle.com/legal/privacy ; Resend's is at https://resend.com/legal/privacy-policy.

Cookies

The only cookies placed by this site are the administrator login session and a short-lived analytics cookie that records the first traffic source for an order so the cloister can tell which channel a sale came from. Public pages run no advertising trackers.

Reader requests

A reader may ask for a copy of any stored personal data, or request that all of it be erased, by replying to an order email or writing through the contact page. Requests are usually handled within a few working days. EU and UK residents have additional rights under GDPR including data portability and the right to lodge a complaint with a supervisory authority.

Retention

Order records are retained for as long as required by tax authorities (typically seven years) for accounting and audit purposes. Public comments are kept until the buyer asks for removal. Membership records are kept while the subscription is active and for one year after cancellation.

Updates

The latest version of this policy is always published on this page. Material changes are noted at the top.