Privacy Policy

01What we collect

Account data (name, email, and a hashed password), your purchase and booking history, reading and watching progress to sync your library across devices, messages you send through contact forms, and basic technical data such as IP addresses for security and abuse prevention.

If you choose to fill in our optional profile form, we also store what you share there: the programs you are interested in, and any details you provide such as your name, age, marital status, country and city, and phone number. This is entirely optional, and you share only what you wish.

When you use certain features, we also store the details you enter in our contact, corporate, or booking enquiry forms (such as name, email, phone, and organization). If you choose to sign in with Google, we receive your name, email, and profile photo from Google to create or access your account.

02How we use it

To deliver your purchases and run your library, to send transactional emails (email verification, purchase receipts, password resets), and to improve the site.

We only send the newsletter with your explicit opt-in, and you can unsubscribe at any time.

03Payments

Payments are processed by Stripe. We never see or store your card number on our servers.

04Service providers

We rely on trusted providers to operate the service: Stripe for payments, Resend for email delivery, Google for optional sign-in and for analytics, Upstash for rate limiting and abuse prevention (which processes your IP address), and cloud hosting, database, and storage providers for data and content. When you set or reset a password, we also check it against a public breach database (Have I Been Pwned) by sending only a short, irreversible fragment of its hash, never the password itself. Data shared with any provider is limited to what they need to perform their function.

05Cookies

We use essential cookies for signing in and remembering your preferences (such as dark mode and language), and analytics cookies to measure aggregate usage (see Analytics below). We do not use advertising cookies.

06Analytics

We use Google Analytics to understand how visitors use the site in aggregate, such as which pages are read and on what devices, so we can improve it. This sets analytics cookies and shares limited usage data, including a shortened IP address, with Google. It is never used to identify you personally or for advertising.

You can opt out using your browser's privacy settings or Google's opt-out browser add-on.

07Data retention

We keep your account data for as long as your account exists. When you delete your account, its personal data, including your newsletter subscription, is deleted or anonymized, except records we must keep as business or legal records, such as invoices and the messages you send us through contact or enquiry forms. Operational email logs (the rendered copies of transactional emails) are automatically removed after 90 days.

08Your rights

You can view and correct your data from your account settings, and permanently delete your account from settings or by contacting us. We respond to data requests within a reasonable time.

09Security

We use encrypted connections (HTTPS), passwords are stored with one-way hashing, and we check passwords against known breaches at sign-up. That said, no transmission over the internet can be guaranteed absolutely secure.

10Children

The site is not directed at children under 13, and we do not knowingly collect their data.

11Updates & contact

We may update this policy from time to time and will publish the latest version on this page. For any question: Team@drkhaledghattass.com.