Privacy

We collect the email you type at Checkout, Stripe payment metadata (we do not store full card numbers), contact-form messages, and a signed access cookie. Stripe’s privacy policy applies to the payment step.

The access cookie is httpOnly, SameSite=Lax, and lasts 30 days. It stores email, plan, and session id so this browser can open /guide.

We do not sell personal information. Analytics are not bundled in this repo. Hosting (Vercel) and payment (Stripe) processors will see standard request and payment data.

This is a stub. Replace before collecting real customer data at scale.