Get the OS — $27

Legal

Privacy notice

Effective 2026-09-05.

In short

  • We collect your email to deliver what you asked for (a purchase, the free kit, or a download link), and Stripe handles your payment details — we never see your card.
  • If you opt into the free kit, we send a short welcome series and nothing else, and you can unsubscribe with one click at any time.
  • Our analytics beacon records only page path, UTM parameters, referrer and a salted (non-reversible) hash of your IP. No cookies, no fingerprinting.
  • We never sell your data. Processors: Stripe, Resend, Cloudflare.
  • You can ask to see, fix, delete, or export your data at any time — write to the support address below.

Controller

Sundayclear is operated by [to be supplied] , [to be supplied] (Estonia). For anything on this page, contact [to be supplied] .

What we collect, and why

Purchase data. When you buy a Sundayclear product, Stripe processes your payment and shares with us your email, the product purchased, and the order status. We use this to grant access, send order confirmations, and handle refunds. We never see or store your card details — those stay with Stripe.

Email for delivery and access. Your email is used to deliver the product you bought, send your magic-link download page at /access, and reply if you contact support.

Free-kit email. If you request the free kit at /kit, we use your email to send the kit and a short welcome series of 3 emails. This only happens if you tick the consent checkbox on that form. You can unsubscribe with one click from any of those emails, or by writing to us.

Analytics beacon. The site sends a small, anonymous beacon on page loads: the page path, UTM parameters, the referrer, and a salted hash of your IP address (used only to rate-limit abuse and estimate unique visits — it cannot be reversed to your IP). There are no cookies, no device fingerprinting, and no cross-site tracking.

Legal bases

  • Contract — processing your purchase, delivering the product, and providing access, because you asked us to when you bought something.
  • Consent — the free-kit welcome email sequence, which you opt into with the checkbox at /kit and can withdraw at any time.
  • Legitimate interest — the analytics beacon and rate-limiting, to keep the site secure and understand traffic, in a way that is proportionate and does not identify you.

Who else sees your data (processors)

We use a small number of processors to run Sundayclear, each bound by a data processing agreement:

  • Stripe — payment processing.
  • Resend — sending order, access, and kit emails.
  • Cloudflare — hosting, the API worker, and the anonymous analytics beacon.

We do not use any other company to process your personal data. Tools we use for our own internal writing and content production do not receive or process customer data.

International transfers

Cloudflare, Stripe and Resend may process data outside the European Economic Area. Where that happens, it is covered by the EU Standard Contractual Clauses or an equivalent safeguard recognised under GDPR.

How long we keep it

  • Orders — kept for 7 years, as required for accounting and tax records under Estonian law.
  • Free-kit subscribers — kept until you unsubscribe or ask us to delete your data.
  • Access tokens — the magic link used at /access expires after 30 minutes and is single-use.
  • Analytics beacons — kept for 13 months, then deleted.

Your rights

Under GDPR, you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected (rectification);
  • have your data deleted (erasure);
  • restrict or object to certain processing;
  • receive your data in a portable format;
  • withdraw consent at any time, for anything based on consent (such as the free-kit emails), without affecting processing done before the withdrawal.

How to exercise your rights

Write to [to be supplied] with your request. We'll respond within a reasonable time and may ask you to confirm the email address associated with your data first.

Complaints

If you believe we have mishandled your data, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee), or to the data protection authority in your own EU country, in addition to (or instead of) contacting us first.

Automated decisions

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

No sale of data

We do not sell personal data, and we do not run third-party ad-retargeting pixels beyond what is disclosed on this page.

Children

Sundayclear is not directed at, and is not intended for, anyone under 16.

Changes to this notice

We may update this notice as the product or our processors change. The version on this page is always current; material changes will be reflected in the "effective" date above.