Privacy Policy

Email Address — Required for license key delivery. Used to send your CS360-XXXX license key and any future license-related communications.

Device Fingerprint — A SHA256 hash of your hostname and username, used to count devices against your 3-device limit. This is not personally identifiable; it only maps to your license key.

IP Address — Logged for rate limiting and fraud prevention during license validation. Not stored long-term; logs rotate weekly.

Analytics Data — GA4 analytics cookies to understand site traffic (page views, referrers, session duration). No advertising IDs or cross-site tracking.

We explicitly do NOT collect, store, or have access to:

• Passwords or authentication credentials
• Credit card numbers or payment details (Stripe handles all payment processing)
• Full device information or hardware specs
• Your Claude Code conversations, prompts, or generated content
• Personal information beyond what's strictly necessary for license delivery

Stripe is your payment processor. We never see your card details. All payment data is handled by Stripe under their privacy policy.

• License Delivery — Your email is used to send your license key and setup instructions immediately after purchase.
• License Validation — Your device fingerprint is checked against your license when you use Claude Code skills, to enforce the 3-device limit.
• Fraud Prevention — IP address and device fingerprint help us detect license sharing and unauthorized access patterns.
• Support — Your email is used to reach you if we detect license issues, security concerns, or if you contact us with questions.
• Analytics — GA4 data helps us understand which skills, blog posts, and landing pages are most useful to our community.

We use Google Analytics 4 (GA4) to understand site traffic, popular content, and user journeys. GA4 uses cookies and collects:

• Page views and session duration
• Referrer source (where you came from)
• Device type and browser (not full device ID)
• Geographic region (city-level, not precise)

GA4 does NOT use advertising IDs, does NOT enable cross-site tracking, and does NOT sell data to advertisers. See Google's Privacy Policy for more.

You can opt out of GA4 tracking via your browser's privacy settings or by installing an analytics blocker.

Claude Skills 360 uses the following third-party services. We share only the minimum data necessary:

• Stripe — Payment processing. They see: email, name, billing address, payment method. See Stripe Privacy Policy.
• Resend — Transactional email (license delivery). They see: your email address and license key for sending. See Resend Privacy Policy.
• Cloudflare — Hosting and CDN. They see: your IP, traffic patterns. See Cloudflare Privacy Policy.
• Supabase — Backend database for license validation. They see: email, device fingerprint, license key. See Supabase Privacy Policy.

License Data — Kept for the lifetime of your license. If you stop using Claude Skills 360, you can request deletion at any time.

IP Logs — Rotated weekly. We keep 7 days of IP logs for fraud detection, then permanently delete them.

Analytics Data — GA4 data is retained for 14 months, then automatically deleted by Google.

Support Data — If you contact us, we keep your email and support conversation for 2 years to handle follow-up inquiries.

You have the right to:

• Request your data — Email us and we'll provide all data we hold on you in 30 days.
• Request correction — If your email or license information is incorrect, we'll fix it immediately.
• Request deletion — We'll delete your email, device fingerprints, and support history. Your license key will be revoked.
• Opt out of analytics — Disable GA4 tracking in your browser settings or use an analytics blocker.

If you're in the EU, UK, or any jurisdiction with data protection laws (GDPR, CCPA, etc.), these privacy rights apply:

• We process your data only with your consent (by completing a purchase)
• We don't store more data than necessary to deliver your license
• We don't sell or share your data with advertisers
• You can request deletion at any time

We're based in the United States but comply with GDPR, CCPA, and similar regulations.

We take data security seriously:

• All data in transit is encrypted with HTTPS/TLS
• All data at rest is encrypted in our Supabase database
• Access to your data is restricted to essential team members only
• We do not store payment data (Stripe does)

If we discover a data breach, we will notify you within 24 hours via email.

To request your data, ask for deletion, or report a privacy concern, email:

[email protected]

We'll respond within 7 business days.