Privacy Policy

Who We Are

Papa in Progress ("we", "us") sells digital courses and guides for dads at papainprogress.com. This policy explains what personal data we collect, why, and the rights you have over it. For anything not covered here, email hello@papainprogress.com — a real person reads it.

Information We Collect

We collect only what we need to deliver what you bought:

• Email address — used for purchase delivery, login links, and order confirmation
• Payment information — processed securely by Stripe; we never see or store your card details
• Purchase records — which products you bought, so we can grant you access
• Course progress — which lessons you've completed, so your progress syncs across devices
• Basic technical data — IP address for rate limiting and abuse prevention

We do not run third-party advertising or analytics trackers on this site.

How We Use Your Information

We use the information we collect to:

• Deliver course and guide content you've purchased
• Send transactional emails (receipts, login links, free guides you requested)
• Respond to support and refund requests
• Prevent fraud and abuse of our systems
• Improve our products and website experience

We do not sell or rent your personal data to anyone. We do not send marketing emails unless you explicitly opted in (for example, by requesting a free guide).

Cookies & Local Storage

We do not use advertising or tracking cookies. After you log in, a session token is kept in your browser's session storage (cleared when you close the tab) and your course progress is cached in local storage so it survives connection drops. Stripe may set its own cookies during checkout — see Stripe's privacy policy for details.

How Long We Keep Your Data

• Account and purchase records — kept for as long as your account exists, so your lifetime access keeps working, plus any period required for tax and accounting law
• Login tokens and sessions — short-lived; expired records are deleted automatically
• Rate-limiting data (IP addresses) — deleted automatically within hours
• Free-guide signups — kept until you ask us to remove you

Your Rights

Wherever you live, we honor the core data rights of the GDPR and CCPA for all customers. You can ask us at any time to:

• Access — receive a copy of the personal data we hold about you
• Correct — fix inaccurate data (for example, change the email tied to your purchases)
• Delete — erase your account and personal data (note: this ends your course access, and we may retain minimal purchase records where tax law requires it)
• Export — receive your data in a portable format
• Object — opt out of any non-essential processing

To exercise any of these rights, email hello@papainprogress.com from the address tied to your account. We respond within 30 days. We never discriminate against you for exercising your rights.

Third-Party Services

We use the following processors to operate the site. Your data is shared with them only to the extent needed to provide the service:

• Stripe — payment processing
• Resend — transactional email delivery
• Vercel — website hosting
• Neon — database infrastructure

Each of these services operates under its own privacy policy and security standards. Some are based in the United States; transfers are covered by standard contractual clauses or equivalent safeguards.

Security & Data Breaches

Login links are single-use and expire in 15 minutes; access tokens are stored only as cryptographic hashes; all traffic is encrypted in transit. No system is perfectly secure — if a breach ever affects your personal data, we will notify you by email and the relevant authorities without undue delay, as required by law.

Children

Our products are about raising children, not for them. We do not knowingly collect data from anyone under 16.

Changes to This Policy

If we make material changes, we'll update the date at the top of this page and, for significant changes, notify customers by email.

Contact

For any privacy-related questions or requests, email us at hello@papainprogress.com.