REVIEW DRAFT · SEPTEMBER 18, 2026

Privacy policy

What this website stores and why.

Scope and responsibility

This policy describes the current website and its prepared checkout/member service. Nik Vanderkamp operates the website and is responsible for personal information. Contact hello@nikvanderkamp.com or write to 1000 Rue De la Gauchetière O, Montréal, QC H3B 5A7, Canada. See the contact page. It does not cover websites you visit through external links.

Information and purposes

• Purchases and access: purchase email, selected course, price, currency, provider/order references, payment status and access expiry are used to fulfill orders, restore access, handle refunds and keep transaction records.
• Security: session tokens, single-use sign-in links and rate-limit records support account security. The application hashes the IP address used for rate limits; hosting services may separately process IP addresses and request logs.
• Offers: a random browser identifier and offer record keep the displayed offer consistent and validate checkout. Offer records include the page, assigned variant and time. These records are created when the offer loads, independently of optional interaction measurement.
• Optional measurement: with your choice to allow it, page views, clicks, scroll depth, time on page and course interaction labels help evaluate the website. This is pseudonymous, not guaranteed anonymous. Typed form contents are not included in these events.
• Learning work: lesson progress, notes, prompt drafts, digital-product offer drafts, cost estimates, plans and saved project briefs are stored in your browser. Comparison images selected in the practice tool remain temporary in that browser. Saving a project brief does not send it to us.
• Correspondence: information you send to support would be used to respond and resolve your request. Do not include unnecessary sensitive information.

Providers and transfers

The payment provider identified at checkout processes payment details under its own terms. The prepared integration supports Stripe and Lemon Squeezy; only the configured provider handles an order. Our application does not receive your full card number or security code. The prepared access-email service uses Resend when enabled. Hosting and email providers may process data outside Québec and Canada, where local authorities may have lawful access. Final hosting, processing locations and the transfer assessment remain to be confirmed before live launch.

External AI and website tools receive the material you choose to give them; buying this course does not automatically send your exercises to those tools. No Meta advertising pixel or Google Analytics integration is currently installed in this build. Adding advertising tracking requires an updated disclosure and appropriate consent controls.

Retention and protection

Browser notes remain until you delete them or clear site storage. Sign-in links expire after 15 minutes and member sessions after 30 days; offer cookies can last up to one year. The prepared email worker removes expired sessions and old link records and clears dispatched access links. Purchase, offer, interaction and webhook records currently have no automated retention purge. A documented retention schedule and deletion procedure must be put in place before live launch, including tax-record obligations and backups.

The member service uses HTTPS-only session cookies, hashed access tokens and access checks for paid content. These measures reduce risk; no system is completely secure. Access to records should be limited to the operator and service providers who need it.

Your choices and rights

You can decline optional measurement or withdraw permission at Cookie settings. Export your work before clearing browser storage. For access, correction, deletion where applicable, portability where applicable, withdrawal of consent or a privacy complaint, email hello@nikvanderkamp.com. Describe your request and the email associated with your purchase, if relevant. We may request proportionate identity verification before sharing or changing personal information; do not send identity documents unless requested through an appropriate channel. Some transaction information may need to be retained by law. You may contact the Commission d’accès à l’information du Québec or your applicable privacy authority.

Marketing and children

Buying or requesting an access email is not a newsletter signup. No marketing email signup is currently connected. A future marketing signup must explain its purpose and provide consent and unsubscribe controls. The courses are directed to adult creators and business owners, and are not designed to collect information from children.

Updates

This draft was reviewed on September 18, 2026. Material changes to data practices will be described here and brought to your attention where required; new uses requiring consent will not be enabled simply by changing this page.

Landing page comparisons

We use the offer identifier to keep your assigned page copy and price consistent, and associate that assignment with checkout and order records. Aggregate reports compare course purchases between versions. Page context includes a broad device category and a campaign source label from the link you followed. Optional click, scroll and time measurements remain off until you allow them. The private owner dashboard does not display customer emails or access links.

Optional Meta advertising measurement

With your advertising consent, we share course views, checkout activity and confirmed purchase events with Meta Platforms through Meta Pixel and Conversions API. Data can include course ID, value and currency, browser user agent, Meta click/browser identifiers and your normalized purchase email hashed with SHA-256 for matching. We do not send payment card details, lesson answers, phone numbers or invented customer attributes. You can decline or withdraw future sharing in cookie settings. See Meta’s Privacy Policy.