Privacy notice

Purchase policies. The version accepted at checkout applies to your purchase. Mandatory consumer rights remain protected. Request a refund.

Who to contact

Core Stack handles purchase and delivery information for this download store. Contact osetek01@gmail.com for privacy requests. The seller and purchase-data contact is Core Stack, reachable at osetek01@gmail.com. The site runs on Cloudflare Workers and Cloudflare D1. Transactional email is processed by Resend. Providers may process data internationally under their applicable data protection terms.

Data and purposes

We store your checkout email, order reference, product and version, amount and currency, payment state, provider transaction identifier and purchase timestamps to process orders, verify payments, provide receipts and restore downloads. We also store delivery-job state and email content needed to send purchase messages. Refund reasons, explanations, submission times, eligibility and review status are stored for return processing and disputes. Support correspondence is processed to answer requests and investigate problems.

Payment and email providers

Payment details are entered with Flutterwave. Core Stack does not ask for or store your full card number or security code. Flutterwave processes payment information under its own privacy terms. Purchase and recovery emails are sent through Resend, which processes recipient addresses and message content. Replies and support correspondence go to our Google/Gmail support address. Cloudflare hosts the website, purchase database and protected downloads and processes network requests and stored order records. We do not sell purchase information.

Sessions and security

Essential HttpOnly session cookies protect order and download access. Purchase and restored sessions last up to seven days. Receipt links expire after 24 hours; recovery links after 15 minutes, and both can be redeemed once. Access-link tokens are hashed for verification; queued message content is encrypted at rest. Hashed email and source-IP keys limit recovery abuse. These operational cookies are not advertising cookies. Do not share access links.

Product data and credentials

Offline tools process your inputs on your own device as described in their guides. Customer-hosted integrations use your own service accounts and credentials on your infrastructure and contact the providers you configure. These inputs are not automatically sent to Core Stack. If you choose to send diagnostic files to support, remove secrets and personal data first. Third-party providers have their own terms and privacy practices.

Retention

Order and entitlement records are retained while needed to fulfil purchased access and meet applicable accounting, dispute and legal obligations. Essential session validity expires after seven days; link validity expires as stated above, but expired database rows are not yet automatically erased. Delivery records, support correspondence and backups require a documented production retention/deletion schedule before launch. We will not describe an automated deletion process as active until it is implemented.

Your choices and rights

You can request access, correction, deletion or restriction of your information, and exercise other rights available under applicable law, by emailing support. We verify requests proportionately and explain any information we must retain for legal or contractual reasons. Processing needed to fulfil purchases is based on the purchase contract; security and fraud prevention on legitimate operational interests where permitted, and legal retention on applicable obligations. Marketing requires a separate choice; purchase email is not marketing consent. You may complain to your relevant data protection authority.

External content and changes

The storefront may load externally hosted images or other assets, which exposes normal network request information to their hosts. A final production asset/provider inventory is required before launch. Optional analytics or advertising tracking must be disclosed and any required consent obtained before activation. We will date changes to this notice.