Privacy policy

This policy explains what personal data HoloStock collects, why, and what you can do about it. We collect as little as we need to run the store.

What we collect

• Account: your email address, and your name and profile picture if you sign in with Google.
• Sign-in sessions: a session cookie, plus the IP address and browser of each session for security.
• Purchases: the credits you buy and spend, the items you license, and your downloads.
• Payments: handled entirely by Paddle, our merchant of record. We never see or store your card details; we receive a confirmation of the order.
• Technical logs: our hosting provider records standard request logs (such as IP address and pages requested).

How we use it

• To sign you in, deliver your licensed downloads and keep your credit balance.
• To send emails you need: sign-in links, receipts and important account notices.
• To prevent fraud and abuse, and to keep the site secure.

We don’t sell your data, and we don’t use advertising or cross-site tracking cookies.

Cookies and local storage

We use one essential cookie to keep you signed in. Your cart is saved in your browser’s local storage on your device. Neither is used for tracking.

Service providers

We use these providers to run the site. They process data on our behalf:

• Vercel: website hosting
• Neon: database (United States)
• Cloudflare: file storage and delivery
• Resend: sending email
• Paddle: checkout, payments and tax (as merchant of record)
• Google: optional sign-in with Google

Some of these providers process data outside your country, including in the United States, under appropriate safeguards such as standard contractual clauses.

How long we keep it

Account and license records are kept while your account is open, so you can download your purchases again. Purchase records are kept as long as tax and accounting law requires. Expired sessions and sign-in links are deleted automatically.

Your rights

Depending on where you live (for example under the GDPR or the CCPA), you can ask to access, correct, export or delete your personal data, and object to certain processing. Email us and we will respond within 30 days. You can also complain to your local data protection authority.

Children

The site is not directed at children under 16, and we don’t knowingly collect their data.

Contact

Privacy questions or requests: hello@holostock.io.