Privacy
Last updated: October 30, 2026.
We process account and service information: your email and name when you create an account, payment metadata from our processor (Polar.sh), and any quiz answers you choose to submit.
What we store
- Account data (email, name, hashed password)
- Subscription state (received from Polar.sh webhooks)
- Lessons you mark as complete
- Quiz submissions and email delivery status
What we don't do
- We don't sell your data.
- We don't run third-party advertising trackers.
- We don't sell your quiz answers or use them for advertising.
Our own product analytics
When enabled, we operate our own analytics in the application database to understand use of general pages and improve the service. We do not send these events to PostHog or advertising platforms. Measurements include page views, sessions, return visits, broad traffic sources, browser and viewport categories, scroll milestones, selected navigation clicks, and active time on visible pages with recent interaction.
For eligible detected US regions, this general-page analysis may operate by default. For other or unknown regions, we ask first. California, Connecticut, Maryland, Nevada and Washington are excluded from automatic mode. Location is estimated by our hosting provider, not determined from a stored IP address. Existing refusals, Do Not Track and Global Privacy Control take priority. Use “Privacy choices” at the bottom of general pages to allow analysis or turn it off and erase this browser’s measured history. No advertising data sale or sharing is enabled.
Browser analysis uses a random first-party browser cookie for up to 90 days and a session cookie that expires after 30 minutes without a measured event. Preferences are stored for 180 days and also in browser storage. Stored identifiers are protected by a server-side keyed hash. These are pseudonymous records, not anonymous data. We do not attach account IDs, email addresses, quiz answers, search terms, URL query strings or specific lesson names. Individual tracking is excluded from quiz, course, lesson, intimate article and game pages, including after permission is given.
Measured events are retained for 90 days and removed by scheduled maintenance. A minimal hashed revocation record is retained for up to 90 days after turning analysis off so that pending requests cannot restore an erased history. If erasure fails, we stop analysis and show an error with the option to retry. Other browsers or cleared identifiers cannot be linked to this browser’s erasure request. We do not record sessions as video or capture form contents. Standalone games have no individual browser analytics; their old automatic third-party trackers are disabled.
Account and course statistics
We summarize existing registration, verification, account-session and lesson-completion records to operate the service. These summaries do not join browser histories to named accounts. Registration does not overwrite an analytics refusal or serve as blanket permission for optional tracking.
Basic server statistics
Independently of optional analytics, when enabled, our server adds ordinary page requests to hourly totals by broad page category. This happens without accessing browser storage or creating a visitor identifier. These counters contain no IP addresses, user IDs, referring domains, browser details or individual request records and are not sent to PostHog. They continue when optional analytics is declined, and help us monitor demand and operate the website. Totals are retained for up to 90 UTC calendar days and removed by daily maintenance. Reloads and bots may be included, so request totals do not represent unique visitors.
Service providers
We use Supabase for application data and file storage, Polar.sh for checkout and subscriptions, and Resend for transactional email. These providers process only the data needed to deliver their service.
Your rights
You can delete your account at any time from your account page or by emailing hello@bondamour.com. Deletion removes your data within 30 days.