Privacy Policy

1. Overview

superpudding.art ("superpudding.art," "we," "us," or "our") provides online art courses, video lessons, purchase access, and optional questions and feedback through superpudding.art (the "Service"). This Privacy Policy explains what personal information we collect, why we use it, when we disclose it, and the choices available to you.

2. Information we collect

We may collect the following categories of information:

• Account information: your name, email address, account identifier, and authentication information. If you sign in with Google, we receive basic profile information that Google makes available with your permission, such as your name and email address.
• Purchase information: the course or service purchased, price, currency, transaction status, purchase date, and Stripe transaction identifiers. Stripe processes payment-card details; we do not receive or store your complete card number.
• Course and service information: course entitlements, requests to access lessons, and information you send when asking questions or requesting feedback, including messages or artwork you choose to share.
• Technical information: IP address, browser and device information, timestamps, referring pages, request logs, and security or diagnostic information generated when you use the Service or stream a video.
• Communications: messages and support requests you send to us, along with the information needed to respond.

3. How we use information

We use personal information to:

• Create, authenticate, secure, and maintain your account.
• Process purchases and record the course and feedback access you own.
• Deliver video lessons and provide questions, feedback, and customer support.
• Send transactional messages such as account confirmation and service notices.
• Prevent fraud, abuse, unauthorized sharing, and security incidents.
• Operate, troubleshoot, maintain, and improve the Service.
• Comply with legal, tax, accounting, and regulatory obligations.

Where applicable law requires a legal basis, we process information as necessary to perform our contract with you, pursue legitimate interests such as operating and securing the Service, comply with law, or based on your consent.

4. Service providers and disclosures

We disclose information only as reasonably necessary for the purposes described here:

• Supabase provides account authentication and database infrastructure.
• Google provides optional Google account sign-in.
• Stripe processes payments and helps prevent payment fraud.
• Cloudflare hosts and delivers course videos and related network services.
• Render hosts the application and processes operational logs.

We may also disclose information when required by law, to protect rights and safety, to investigate misuse, or as part of a merger, financing, acquisition, reorganization, or sale of assets. We do not sell personal information or share it for cross-context behavioral advertising.

5. Cookies and local storage

The Service uses browser storage and similar technologies that are necessary for authentication, security, checkout, and video delivery. For example, Supabase stores session information in your browser so you remain signed in. Our service providers may also set or read necessary cookies or similar identifiers when providing their services. We do not currently use third-party behavioral advertising cookies.

6. Data retention

We retain account and entitlement information while your account remains active and as reasonably necessary to provide the Service. We may retain transaction, tax, fraud prevention, dispute, and security records for longer where required or permitted by law. When information is no longer needed, we take reasonable steps to delete or de-identify it.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. Authentication credentials are processed through Supabase, and readable passwords are not available to us. No internet service or storage system can be guaranteed to be completely secure, so we cannot promise absolute security.

8. Your privacy choices and rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of your personal information; to object to or restrict certain processing; or to withdraw consent. You may also sign out of your account and choose not to use Google sign-in. To submit a privacy request, email us using the address below. We may need to verify your identity before completing a request, and legal exceptions may apply.

9. International processing

We and our service providers may process information in the United States and other countries. Those locations may have data-protection laws that differ from the laws where you live. Where required, appropriate safeguards are used for international transfers.

10. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information without appropriate permission, contact us so we can review and delete it.

11. Changes to this policy

We may update this Privacy Policy as the Service or applicable requirements change. We will post the updated policy here and revise the effective date. If a change is material, we may provide additional notice where appropriate.

12. Contact us

For privacy questions or requests, contact superpudding.art at 57025376hl@gmail.com.