Privacy policy · Lavanderita Studios

Last updated: 2026-05-17

What we collect

Account data — name, email, hashed password.
Enrollment data — courses you've bought, payment receipts you've uploaded.
Operational data — basic logs (IP, user agent, timestamps) for security and abuse prevention.

How we use it

To run your studio account, deliver courses, send transactional emails (verification, password reset, enrollment status), and prevent abuse.

How we store it

Database hosted on Neon. Files (course materials, payment receipts) stored in S3-compatible object storage. Passwords are hashed with bcrypt. Sessions are stored in signed cookies.

Third parties

We use SMTP to deliver email and S3-compatible storage for files. We don't sell your data, ever.

Your rights

You can request a copy of your data or its deletion by emailing the contact address on /contact.

Cookies

We use a single httpOnly session cookie for authentication. No third-party tracking cookies.