Privacy notice.

What we use and why

We use your purchase email, order references and payment status to deliver purchases, recover access and provide support. Stripe processes billing and card details; Skillfolio does not store full card numbers. Processing needed to supply a purchase is based on performing our contract with you. Records needed for tax and other legal duties are processed to comply with those duties.

If you choose email sign-in, we store your email, verified status and account sessions. Security controls process limited technical information, including IP address and browser information, to prevent abuse. These controls support our legitimate interest in protecting the service. Sign-in links expire after 10 minutes and are single-use. Expired verification and session records are cleaned up by a scheduled job.

Saved courses, basket, progress, project checklists, notes and playground code are stored locally in your browser. If you choose Back up this browser, a copy of saved learning state is stored in your account. Cloud backups and automatic learning sync are optional. Automatic sync sends changes while enabled on a signed-in browser; manual backup and restore are also available. They do not contain card details or create purchase entitlements.

Refund, withdrawal, support and privacy requests store your email, statement, purchase details and submission time so we can handle and evidence the request. Avoid including sensitive personal information in notes or messages.

Providers and transfers

Vercel hosts the website and server functions. Neon stores account, recovery, delivery and request records in the configured Frankfurt region. Resend sends transactional messages using the configured Ireland sending region. Stripe processes payments. A selected service region does not guarantee that every processing operation stays in the EEA. Providers may process data elsewhere; applicable transfer safeguards and provider agreements govern those transfers.

Cookies and measurement

Measurement preferences

Necessary cookies maintain signed-in sessions and bind purchases to the correct browser. Local storage retains learning state and basket contents. We do not use advertising cookies. Optional first-party measurement is off unless you allow it through Measurement preferences on this page. We count course views, free lessons engaged with for at least 15 visible seconds, checkout starts and verified completed initial purchases. Counts are grouped by day and course or package and contain no names, email addresses, learning notes, visitor identifiers or full URLs. They describe events rather than unique people. Connection information is needed to serve requests but is not stored in our analytics tables; hosting security logs are separate. Your choice stays in this browser until changed or cleared. Global Privacy Control overrides an opt-in. At checkout your choice is included in payment metadata; a resulting purchase may be counted even if you later change this browser preference. You can stop future measurement at any time. Aggregate counts cannot be linked back to you for individual removal. Transactional emails are not marketing subscriptions. No email tracking links or tracking pixels are intentionally enabled.

Retention

Measurement is based on your optional consent. Daily aggregate counts are retained for up to 13 months. A keyed hash of a counted checkout reference is retained for up to 35 days to prevent duplicate counting; raw order references are not stored in analytics tables. Email delivery monitoring records contain provider message identifiers, event types and timestamps, rather than message contents or recipient addresses. These monitoring records are removed after 90 days by the scheduled maintenance check. Browser data remains until you remove it. Account learning backups remain until you replace them or request deletion. Purchase and request records are retained for supplying access, resolving claims and applicable statutory recordkeeping. We review retention when handling deletion requests and distinguish records that must be retained by law. Contact us for the retention period applicable to a specific record.

Your choices and rights

You can export or clear local learning data, sign out, and ask for access, correction, deletion, restriction, portability or objection where applicable. Send a personal data request or email info@xperiencedsign.com. We may need proportionate verification before releasing or deleting information. Deleting an account does not cancel a paid subscription; cancel renewal separately in Manage plan or ask us for help.

You may complain to the Hellenic Data Protection Authority at dpa.gr or your competent supervisory authority. We do not make solely automated decisions with legal or similarly significant effects about you.