Template: edit before launch. Replace everything in [brackets] and have this reviewed for your country (e.g. GDPR/UK GDPR, CCPA). This template is a starting point, not legal advice.
Last updated: [date]
What we collect
Account: your email address and a securely hashed password. Course progress: completed modules, checklist ticks, quiz self-marks and lab notes you type, so they sync across your devices. Billing: handled by Stripe. We receive your Stripe customer ID and subscription status, but never your full card number.
How we use it
To provide your membership, keep your progress, process payments, send essential account emails (such as password resets) and respond to support requests. [We do / do not send marketing emails, and you can opt out anytime.]
Cookies
One essential, secure session cookie keeps you logged in. Your light/dark preference is stored in your browser. Fonts load from Google Fonts. [List any analytics you add.]
Sharing
Stripe (payments), [your hosting provider] (hosting), [your email provider] (account emails). We don't sell your data.
Retention & your rights
We keep your account while it exists. Email support@yoursite.com to access, correct, export or delete your data.
Contact
[Your business name], [address], support@yoursite.com.