Privacy Policy
Draft, not yet legally reviewed — see the notice below.
Introduction
This Privacy Policy explains how eyalkless.com (“this site,” “we,” “us”) collects, uses, and discloses personal information when you visit the site, create an account, purchase a course, subscribe to the newsletter, or contact us. This site is operated by Eyal Kless. For questions about this policy or your data, contact eyalkless@gmail.com.
By using this site, you acknowledge this Privacy Policy. If you don't agree with it, please don't use the site.
Information we collect
Information you provide to us
- Contact form: name, email, subject, and message — stored so we can respond to you, and emailed directly to Eyal so he sees it.
- Accounts: if you register (e.g. to access a purchased course), we store your name, email, and a securely hashed password (we never store your actual password).
- Purchases: what you bought and when. We do not collect or store your card details — payment is processed directly by our payment provider, Grow.
- Newsletter: if you subscribe, your email (and which topic prompted the signup) is stored with us, and — where Mailchimp is connected — also with Mailchimp.
Information collected automatically
Like most websites, we automatically collect some technical information when you visit: pages viewed, approximate location derived from your IP address, browser and device type, referring page, and how you interact with the site. This is collected through Google Analytics — see Cookies below.
Cookies and similar technologies
We use a small number of cookies and browser storage technologies, grouped by category:
| Category | Provider | Purpose |
|---|---|---|
| Strictly necessary | This site (Auth.js) | Keeping you signed in; required for the site to work |
| Analytics | Google Analytics 4 | Understanding traffic and how the site is used |
| Preferences (local storage, not a cookie) | This site | Remembering accessibility settings and whether you dismissed the newsletter popup — stored only on your device, never sent to us |
We don't use advertising or retargeting cookies, and we don't sell personal information.
How we use your information
- To create and manage your account, and give you access to purchased courses
- To process orders and respond to contact form messages
- To send newsletter emails, if you've subscribed
- To understand and improve how the site is used (Google Analytics)
- To keep the site secure and prevent abuse
- To comply with legal obligations
Where your data is stored
Site data (accounts, orders, contact messages, newsletter signups) is stored in our own database, hosted on a server we control (Hetzner, Germany). Depending on what you use, some data also passes through: Mailchimp (newsletter, if connected), Grow (payment processing), Resend (emailing us your contact form message), and Google Analytics (site usage). None of those providers' systems are covered by this policy — see their own privacy policies. Some of these providers may process data outside Israel or the EU/EEA (e.g. Google's and Resend's servers).
Data retention
We keep account and order data for as long as your account exists, and contact form messages indefinitely unless you ask us to delete them. We don't yet have an automated data-retention/deletion schedule — this is a known gap flagged for the legal review below, not something already implemented.
Your rights
You can ask us to access, correct, or delete the personal data we hold about you by emailing eyalkless@gmail.com. If you're in the EU/EEA, this includes rights under GDPR; if you're in Israel, this includes rights under the Protection of Privacy Law.
Children's privacy
This site isn't directed at children, and we don't knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we'll remove it.
Changes to this policy
If we make material changes to this policy — like adding a new data collection practice or a new third-party service — we'll update this page before the change takes effect, not after.
This page is a draft, not legal advice.
It was written to accurately describe what the site actually does today, but it has not been reviewed by a lawyer. Known open items for that review: (1) GDPR and Israel's Protection of Privacy Law compliance generally; (2) whether EU visitors legally need a cookie-consent banner before Google Analytics loads — right now analytics loads for everyone, with no opt-out mechanism; (3) a real data-retention schedule. Get this reviewed before the site processes real payments or personal data at meaningful scale.