Privacy policy

Jakob Werner, doing business as jxkedevs runs jxkedevs.com and decides how the personal data described here is used. Under EU and UK data protection law, that makes me the controller. You can reach me at hello@jxkedevs.com.

When you buy. Stripe runs the checkout page. Once you pay, Stripe sends me your email address, the amount and currency, Stripe's ids for the payment, and a record that you ticked the checkout box (which version of the wording, which version of the Terms, and when). I keep these to give you access, to send your order confirmation email, to answer billing questions and for my tax and accounting records. If the payment is later fully refunded or lost to a chargeback, the record also notes that and when. I never see your card details.

When you sign in. You type your email and I check it against the purchase records. If it matches, an account is created for that email and a sign-in link is emailed to you. Emails you type that don't match a purchase are not stored.

When you read. When you mark a chapter complete while signed in, I save which pages you finished and when, linked to your account, so your progress follows you across devices.

When you email me. I keep your message and address to answer you.

Logs. Like any website, the server sees your IP address, browser details and the pages you request. My own error logs record things like Stripe event and session ids when something fails. I use these only to run and secure the site.

I use four services to run the site. Each gets only what it needs:

• Stripe (payments) collects your payment details, email and whatever billing details its checkout page asks for. Stripe also uses this data for its own fraud prevention and legal duties, under its own privacy policy.
• Supabase (database and sign-in) stores the purchase records, your account (your email and sign-in times, which can include IP address and browser details) and your reading progress.
• Resend (email) delivers the sign-in emails and order confirmations, so it receives your email address and the message.
• Vercel (hosting) serves every page, so it processes your IP address, browser details and the pages you request, and keeps request logs for a limited time.

These providers may process data outside your country, including in the United States. They do so under their own safeguards, such as the standard contractual clauses approved for EU and UK data.

I don't sell your data and I don't share it with anyone for advertising.

The site only stores what it needs to work. There are no advertising or tracking cookies.

• Sign-in cookies (names starting with sb-) keep you signed in. They are set only after you sign in.
• signin-return remembers which page to send you back to after you click your sign-in link. It lasts up to an hour and is deleted once you sign in.
• playbook-progress and playbook-progress-sync (local storage) hold the chapters you have marked complete and which account they belong to, so progress shows up straight away.
• theme (local storage) remembers light or dark mode.

Stripe sets its own cookies on its checkout page, under its own policy.

There are none. The site runs no analytics, ad pixels or session recording.

Higgsfield links carry my affiliate code in the address. When you click one, you leave this site, and Higgsfield and its referral tracking can see that you came from me. What happens on Higgsfield is covered by Higgsfield's privacy policy.

• Contract: selling you the guide, giving you access, signing you in and saving your progress.
• Legal obligation: keeping purchase records for tax and accounting.
• Legitimate interests: keeping the site secure, preventing fraud and fixing errors.

• Purchase records: for as long as you have access to The Complete Higgsfield Guide, and after that for as long as tax and accounting law requires. This includes purchases that were refunded or charged back. Deleting a purchase record ends the access it gave.
• Your account and reading progress: until you ask me to delete them. Deleting the account deletes the progress.
• Emails with me: as long as needed to deal with your request.
• Server and error logs: a limited time, set by the hosting and database providers.
• Local storage on your device: until you clear it.

You can ask for a copy of the data I hold about you, or ask me to correct or delete it. Email hello@jxkedevs.com from the address you bought with, so I can confirm it is you.

If you are in the EU or the UK, you also have the right to data portability, to restrict or object to processing, and to complain to your data protection authority (in the UK, the ICO). I will answer within one month.

The guide is sold only to people 18 and over, as the terms say. I don't knowingly collect data from children.

If this policy changes, the date at the top of this page changes with it.

Privacy questions and requests: hello@jxkedevs.com.