Privacy policy

Information and purposes

• Website use: our hosting and technical providers process connection information such as IP address, browser/device information, requested pages, timestamps, and error or security information to serve and protect the website.
• Optional analytics: when you allow analytics, we use Google Analytics and PostHog alongside our own reporting. Together, we measure public page visits, traffic source and campaign labels, device category, scroll depth, visible engagement time, ebook section views, purchase-button placement, checkout steps, and delivery success or errors. Random visitor and session identifiers connect these steps with confirmed purchase records. We use this information to understand conversion and improve the site. We do not collect form entries, conversation text, payment-card details, customer names or addresses, private purchase/download credentials, full referring URLs, or search queries in analytics.
• Purchases and delivery: we receive contact and billing information made available through checkout, order and payment identifiers, amounts, currency, payment/refund/dispute status, and purchase-access and delivery records. We use this information to process purchases, provide downloads and order details, send purchase-related emails, provide support, and maintain business and legal records. Stripe handles payment-card information; we do not receive full card numbers or security codes.
• Sample preview: the sample instructor chat at /app/ holds typed messages in the browser page and clears them on reload. That preview does not send the typed messages to Chiron Studio. Purchase and delivery information is handled separately, as described above.
• Communications: we receive the contact information, messages, and attachments you send to respond and handle the request.

We receive information directly from you, automatically through use of the services, and from providers processing purchases, delivery, or other service operations.

Providers and disclosures

Providers include Hostinger for hosting, Stripe for payments, Supabase for database, our own analytics, and service functions, Google Analytics and PostHog for optional usage measurement, and Resend for purchase-related email. Some pages request Google Fonts, which exposes connection information to Google.

We disclose information to providers for these functions, where required by law or valid legal process, to address fraud, security, or legal claims, and in connection with a business transfer where permitted by law. Providers may also process information under their own applicable privacy notices. Information may be processed in the United States and other countries where the relevant providers operate.

Browser storage and embedded providers

The ebook checkout stores private purchase-access information in your browser so you can return to your purchase. Optional analytics starts only after you choose Allow analytics. Choose Essential only to decline, or use Analytics preferences in the footer to change your choice. We honor Global Privacy Control and Do Not Track signals by disabling optional analytics. Our analytics uses browser storage for a random identifier and source attribution. Google Analytics may also store analytics cookies after consent. We do not enable advertising features, automatic form capture, or session recordings in this implementation. Our own event records and source attribution expire after 90 days; provider-held usage data follows the providers’ configured retention settings and privacy practices. See Google’s Privacy Policy and PostHog’s Privacy Policy. A browser session expires after 30 minutes of inactivity; direct returns may retain the last known source for up to 30 days. Essential purchase and delivery records remain separate. Stripe and other embedded providers may process device and usage information for service, security, and fraud-prevention functions, including across sites where their tools operate. Stripe describes its own practices in its Privacy Policy.

Authorized social publishing

Our private publishing workspace processes connected-account identifiers and profile details, authorization tokens, selected media and captions, scheduling information, and publishing or error records to manage authorized posts. Hostinger hosts the workspace; connected platforms receive the information needed for authorized platform functions. Connecting a platform does not give us its account password.

Authorized operators can disconnect an account in the workspace or revoke access through the platform. Revocation does not remove already-published content or records already retained. To request deletion of connected-platform information we control, contact us using the address below. Requests are handled subject to applicable law, platform requirements, and permitted retention exceptions. Published posts must also be managed on the relevant platform.

Retention and security

Retention depends on the information and the need to fulfill ebook orders, provide support, operate authorized connections, maintain accounting and transaction records, address fraud or security, resolve disputes, and comply with law. Purchase, support, legal, and backup records may be kept for those purposes. No online service can guarantee absolute security.

Requests and changes

Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of personal information, or to object to or restrict certain processing. Contact albert@chironstudio.co to make a request. We may verify identity and apply exceptions permitted by law. Applicable legal response periods govern. Do not send passwords, access tokens, full card details, or unnecessary sensitive information.

We may revise this notice by posting an updated version and effective date, with additional notice or consent where required by law.

Chiron Studio LLC, 741 S Bruner St., Hinsdale, IL 60521, United States. Email: albert@chironstudio.co.