Privacy & Data Protection Policy

1. Information We Collect

We collect your name, email address, password hashes (Argon2id/Bcrypt), billing country, and IP addresses when you register, purchase, or download products to prevent fraudulent transactions and comply with digital taxation laws.

2. Two-Factor Authentication Security

For users who activate Google Authenticator (RFC 6238 2FA), secrets and emergency recovery codes are securely stored using cryptographic hashing and encryption standards.

3. Data Sharing and Third Parties

We never sell user data. Information is only shared with authorized payment processors (Stripe, PayPal, banking rails) to complete transactions.