Privacy Policy
Last updated: August 16, 2026
Privacy Policy
HabitDex ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, why we collect it, who we share it with, and the rights you have over it.
HabitDex is operated by SOLO VENTURES S.R.L., who acts as the data controller for the personal data described below. You can reach us at [email protected] or through our About page.
Information We Collect
- Email address. We collect your email address when you subscribe to our newsletter, when you purchase an Implementation Kit (via Stripe Checkout), or when you request recovery of past download links.
- Payment information. Payments are processed entirely by Stripe. Stripe collects your card details, name, and billing information directly — we never see or store your card number. We receive from Stripe only your email address and a record of what you purchased.
- Usage data. We use PostHog for product analytics in cookieless mode: it records pages visited, time on page, referring URLs, and general device/browser information, without setting cookies or storing identifiers on your device.
- Technical logs. Like most websites, our server keeps short-lived request logs (including IP addresses) for security monitoring and debugging.
How We Use Your Information
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Delivering purchased kits: sending your download links by email, re-sending them on request | Email address, purchase record | Performance of a contract |
| Sending the weekly newsletter you signed up for | Email address | Consent (withdraw anytime by unsubscribing) |
| Understanding how the site is used so we can improve it | Anonymous usage data | Legitimate interest |
| Operational alerts to ourselves (see Discord below) | Masked email address, purchase/signup details | Legitimate interest |
| Security, fraud prevention, and debugging | Technical logs | Legitimate interest |
We do not sell personal data, and we do not use advertising or remarketing services.
Third-Party Service Providers
We share data with the following processors, each only to the extent needed to run the site:
- Stripe — payment processing. Receives your payment details, name, and email when you buy a kit. Stripe also acts as our record of purchases: when you request download recovery, we look up your past purchases in Stripe by email address.
- Resend — email delivery. Stores newsletter subscriber email addresses and sends our transactional emails (purchase delivery, download recovery) and newsletters.
- PostHog — product analytics, configured cookieless as described above.
- Discord — internal operational notifications. When someone subscribes, purchases, or requests a recovery, a notification is posted to a private channel we operate so we can respond quickly to problems. These notifications contain a masked version of your email address (e.g.
al***@example.com), never the full address.
Cookies
We do not set analytics, advertising, or tracking cookies. Our analytics runs in cookieless mode and stores nothing on your device. If you purchase a kit, the checkout takes place on Stripe's own site, which sets cookies necessary for payment processing and fraud prevention under Stripe's privacy policy.
International Transfers
Our service providers (Stripe, Resend, PostHog, Discord) are based in the United States. Where data is transferred outside the EU/EEA or UK, it is protected by recognized safeguards such as the EU–U.S. Data Privacy Framework and/or Standard Contractual Clauses maintained by each provider.
Data Retention
- Newsletter emails: kept until you unsubscribe or ask us to delete them.
- Purchase records: kept in Stripe for as long as required for accounting, tax, and legal obligations.
- Analytics data: anonymous and not tied to your identity.
- Operational notifications: contain only masked email addresses and are periodically cleared.
Your Rights
Depending on where you live, you have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict its processing, and to withdraw consent at any time (for example, every newsletter includes a way to unsubscribe, and you can always reply to any email from us to be removed).
To exercise any of these rights, email [email protected]. We will respond within 30 days. If you are in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.
Children
HabitDex is not directed at children under 16, and we do not knowingly collect personal data from them.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
Contact
If you have questions about this Privacy Policy, email [email protected] or reach out through our About page.