Privacy Policy

• Your email address if you sign in or join the waitlist. We need it to log you in and to email you about product changes.
• Lesson progress and saved code if you're signed in. Stored against your account so you can pick up where you left off on another device.
• Payment information if you subscribe. Card details are handled entirely by Stripe; we never see or store them. We store your Stripe customer ID and which plan you're on.
• Usage analytics: pages you view, features you use, session recordings of how you interact with the platform. This is used to improve the product, never to sell.
• Technical data: your IP address, browser type, referring URL. Standard server-log information.

These are the services we send your data to, and only for the purposes listed:

Supabase: Database + authentication.

Stripe: Payment processing and subscription management. Stripe's privacy policy: stripe.com/privacy

PostHog: Product analytics and session replay. Self-hostable, we use their EU cloud. Posthog's privacy policy: posthog.com/privacy

Resend: Transactional and product emails (waitlist welcome, purchase confirmation). Resend's privacy policy: resend.com/legal/privacy-policy

Anthropic: The AI mentor inside lessons. When you click 'Get a hint,' we send Claude the current lesson context, your code, and a small attempt-history payload. Anthropic does not train on our API traffic. Anthropic's privacy: anthropic.com/legal/privacy

Vercel: Hosting and deployment. They process server logs and edge function executions.

We use cookies for: (1) keeping you signed in, (2) the PostHog analytics + session recording. We don't use third-party tracking cookies for advertising.

You can block analytics cookies with any standard ad-blocker extension. The platform works fine without them; we just won't see your usage in PostHog.

You have the right to:

• Request a copy of all data we hold about you.
• Have any of your data corrected.
• Have your account and all associated data deleted, within 30 days of the request.
• Export your lesson progress and saved code at any time.

To exercise any of these, email hello@learnshopify.dev. We do not require a specific format; just tell us what you want.

Account data is retained for as long as your account is active. When you delete your account, we delete the data within 30 days.

Payment records are retained for as long as legally required for tax purposes (typically 7 years in the Netherlands), even after you delete your account. We only retain what's strictly required by law (invoice number, amount, date, your name on the receipt).

Supabase: EU region. PostHog: EU cloud. Stripe: EU + US (your payment processing region depends on Stripe's routing). Resend: US. Anthropic: US.

Data transferred outside the EU/EEA is covered by standard contractual clauses with the relevant processors.

If we change this policy in a way that materially affects what we collect or how we use it, we'll email anyone with an account before the change takes effect. Smaller updates (clarification, new sub-processor in the same category) just update the "last updated" date.

Questions, requests, or complaints? Email hello@learnshopify.dev. If you're not satisfied with how we handle a complaint, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).