Privacy Policy

Who is responsible

Spensr LLC, 7901 4th St N, Ste 300, St. Petersburg, FL 33702, United States (Florida Division of Corporations document number L25000235436) is the data controller for SkyRaun. Contact info@spensr.io for anything in this document.

What we collect

When you buy. The checkout form asks for two things, two optional choices and your agreement to the terms; the payment produces a few more:

Your email address — for the payment receipt Stripe sends, for replies to your support requests, and for proof of purchase if you need it later.
Your GitHub username — because repository access attaches to a GitHub account, not to a card. We also store the numeric GitHub account id, because usernames can be renamed and the id cannot.
Your two marketing choices — whether you opted in to product updates, and separately whether you opted in to news about new products and offerings. Both default to no.
Your acceptance of the terms, with the version and a server-side timestamp.
Stripe transaction identifiers, the amount and the currency.

When you browse. Server logs — IP address, timestamp, requested URL, user agent — for operations and abuse prevention, plus the analytics and advertising data described in clauses 5 and 6.

If you join the community. Discord holds your account and messages under its own policy. We see your Discord profile and what you post in the server, the same as any other member.

What we deliberately do not collect

Card details. Payment happens on Stripe's hosted page. Card numbers never reach our servers, and we could not retrieve them if we wanted to.
Your progress through the course. This one matters: the local workspace stores your last lesson, your layout, your notes and your answers on your own machine, next to the lesson files. None of it is transmitted to us. We genuinely do not know how far through the curriculum you are, or whether you ever opened it.
Special category data. We do not ask for and do not want health, biometric, political, religious or similar data.

Why we hold it

To deliver what you bought — the GitHub username exists solely to grant repository access. Legal basis: performance of a contract.
To support you — the email address and purchase record let us confirm you bought it when you ask for help. Contract, and our legitimate interest in running a supportable business.
To meet tax and accounting obligations — transaction records. Legal obligation.
To send you product updates — only if you ticked that box. Consent.
To send you news about new products and offerings — only if you ticked that separate box. Consent.
To understand how the site is used and which campaigns work — analytics and advertising measurement. Consent where required (EEA/UK); legitimate interest elsewhere.
To keep the site up — server logs. Legitimate interest.

Analytics

We use website analytics to understand which pages people read, where visitors come from, and which paths lead to a purchase. Two providers:

Google Analytics 4 (Google LLC) — traffic sources, campaign attribution and conversions.
PostHog — product analytics on how the site itself is used.

Between them these record: pages viewed and in what order, referring site or campaign, approximate location derived from your IP address, device type, browser and screen size, and whether a visit ended in a purchase.

We use it to decide what to write next and where to spend money — not to build profiles of named individuals. IP addresses are anonymised where the provider supports it.

session replay is off

PostHog is capable of recording your entire session, every click and every keystroke. We have that disabled. If it is ever switched on, this clause will say so first — the checkout form is where you type your email address and GitHub username, and a recording of that is not something we want to hold.

Advertising, pixels and conversion tracking

We intend to advertise SkyRaun and to measure whether those adverts work, using conversion-tracking pixels from Google Ads and Meta.

Not active yet. No advertising pixel currently loads on this site. When one does, it will be named here and in clause 8 before it goes live, and it will only load if you have given advertising consent.

When active, these technologies:

Record that you visited particular pages and whether you completed a purchase;
May pass a hashed identifier, such as a hashed email address, back to the advertising platform to match a conversion to an ad click;
May be used to show you SkyRaun adverts on other sites, and to build audiences of people similar to our customers;
Set cookies or use similar identifiers stored in your browser.

consent

Analytics and advertising technologies load only after you consent through our cookie banner, wherever you are — the banner does not behave differently by region. Essential functionality loads regardless, because the site cannot work without it. You can change or withdraw your choice at any time from the cookie settings link in the footer.

A note for California residents. Sharing data with advertising platforms for cross-context behavioural advertising counts as "sharing", and may count as a "sale", under the CCPA/CPRA — even though no money changes hands for your data. You have the right to opt out. Use the Your Privacy Choices link in the footer, or email info@spensr.io. We honour Global Privacy Control signals.

Cookies and local storage

Category	What it does	Set without consent?
Essential	Remembers that you have seen the opening animation (`sessionStorage`, cleared when you close the tab). Never sent to a server.	Yes
Essential	Remembers your cookie choice itself (`skyraun:consent` in `localStorage`). Never sent to a server.	Yes
Payment	Stripe sets its own cookies on its hosted checkout for payment security and fraud prevention, under Stripe's policy.	Yes — strictly necessary
Analytics	Measures pages, referrers and conversions (clause 5). After you consent, cookies beginning `_ga` (Google Analytics) and `ph_` (PostHog) are set.	No — only after you consent
Advertising	Conversion tracking and audience building (clause 6).	No — only after you consent

The course workspace you run locally uses your own browser's local storage on your own machine, for your progress and layout. It stays there and is not covered by any of the above.

The complete list of third parties involved in running SkyRaun:

Stripe — payment processing. Receives your email and payment details directly. Independent controller for payments and fraud prevention.
GitHub — repository hosting. Receives the username we invite, in order to invite it.
Vercel — website and function hosting. Processes requests and server logs.
Neon — the database holding purchase records.
Discord — community hosting, if you choose to join.
Google Analytics 4 (Google LLC) — website analytics, only with your consent.
PostHog — product analytics, only with your consent.
Google Ads and Meta — advertising and conversion measurement. Planned, not yet active.
Email provider — we do not send marketing email yet. When we start, the provider will be named here before the first send.

We may also disclose information where legally required, or to establish or defend a legal claim. If Spensr LLC is ever sold or merged, purchase records may transfer with the business; you would be told before that happened.

We do not sell your personal data for money, and we do not share your email address with other companies for their own marketing.

How long we keep it

Purchase records — for as long as you hold access, then for as long as tax and accounting law requires (typically seven years). This is also what lets us confirm your purchase years later if you need support.
Marketing consent and email address — until you unsubscribe or ask us to delete it. We keep a minimal record that you unsubscribed, so we do not email you again.
Analytics data — per our provider's retention setting, no longer than 26 months.
Server logs — a short rolling window, in line with our host's defaults.

Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, receive it in a portable format, withdraw consent, and opt out of targeted advertising. If you are in California you also have the right not to be discriminated against for exercising these rights.

Email info@spensr.io and we will respond within 30 days (or any shorter period the law requires). We may ask you to confirm you control the email address on the purchase.

One honest caveat on deletion: we can delete your email address and marketing preferences, but we must keep the minimum transaction record that tax law requires. If you ask us to erase the purchase record entirely, we may no longer be able to verify that you bought SkyRaun, which means we cannot restore your access if you lose it.

If you are in the EEA or UK you may complain to your local supervisory authority.

Where the data lives

Spensr LLC is based in the United States and our vendors process data in the United States and elsewhere. If you are in the EEA or UK, your data is transferred to the US. Our vendors rely on the European Commission's Standard Contractual Clauses or an equivalent transfer mechanism for those transfers.

Security

Traffic is encrypted in transit. Credentials are held as environment secrets and never in the codebase. Access tokens used to grant repository access are scoped to the single repository they need. Payment data is handled entirely by Stripe.

No system is perfectly secure. If we ever discover a breach affecting your data, we will notify you and the relevant authority as required by law.

Children

SkyRaun is aimed at working engineers and is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

Changes

We update this page when what we do changes. The version and effective date at the top always reflect the current document, and the full history is kept in the legal/ directory of the site's source repository.

Contact

Spensr LLC, 7901 4th St N, Ste 300, St. Petersburg, FL 33702, United States. Document number L25000235436.

All enquiries, including privacy requests: info@spensr.io. See also the Terms of Sale and Use.