Privacy Policy

This Policy explains how Michael Brenndoerfer, based in Singapore, handles personal information when you use mbrenndoerfer.com, academy.mbrenndoerfer.com, and related services (the "Services"). Michael Brenndoerfer is responsible for this information.

Information We Collect

Depending on how you use the Services, we may collect:

• account and profile information, including sign-in and preference information;
• content and activity, such as comments, progress, subscriptions, and form submissions;
• purchase, entitlement, delivery, and support information;
• newsletter subscription, delivery, and engagement information, including the list selected, the time of the choice, and the form, account signup, or purchase that recorded it; and
• device, usage, location, cookie, security, and diagnostic information.

We collect information from you, your device, your use of the Services, and providers you choose to use, such as Google, GitHub, or Stripe.

How We Use Information

We use personal information to:

• provide, personalize, maintain, and secure the Services;
• manage accounts, purchases, access, downloads, and support;
• send requested, transactional, and marketing communications, and to record and honor your communication preferences;
• measure and improve our content, Services, and communications;
• show and measure advertising where enabled;
• prevent fraud, abuse, and unauthorized distribution; and
• comply with law and protect legal rights.

Purchased files may be personalized and may include copy-identification measures for delivery, support, and protection against unauthorized distribution.

Payments

Digital-product payments are handled through Stripe Managed Payments. Stripe or its designated affiliate is the merchant of record and collects the information needed to process the transaction, tax, support, refunds, and disputes. We do not receive or store complete payment-card or bank-account details. We receive the purchase and customer information needed to deliver and support the product. Stripe handles information under its Privacy Center and the terms shown at checkout.

Cookies and Analytics

We use cookies and similar technologies for account access, security, preferences, and analytics. Essential technologies support requested features. Where required by law, we ask for consent before using non-essential technologies and allow you to change your choice.

We use Google Analytics through Cloudflare Zaraz. Google may process device, usage, and cookie information. You can learn more from Google's partner-site information.

With your analytics consent, we also use PostHog through Cloudflare Zaraz to understand page, account sign-up, newsletter sign-up, and PDF purchase journeys. These events use a random anonymous browser identifier and structured details such as the page, CTA placement, product, and campaign. We do not send names, email addresses, payment-session identifiers, download tokens, or form text to PostHog, and we do not create PostHog person profiles in this implementation. PostHog explains its processing in its Privacy Policy.

Email

We use Amazon Simple Email Service for transactional email and newsletters. Newsletter messages may measure opens and link clicks. Individual newsletter engagement events are deleted after 12 months, while aggregate results and records needed to honor subscription choices may remain.

Subscribing to a newsletter, creating an account, or buying a digital product adds your address to our newsletter, general updates, book announcements, and Academy announcements lists. We keep a record of each of those choices, including which list it applied to, when it was made, and the form, signup, or purchase it came from, so that we can show you why you are on a given list and honor your choices accurately.

You control each list separately. Every marketing message contains an unsubscribe link, and the preference page it leads to lets you turn off an individual list, a category, or all marketing email at once, without signing in. A list you have turned off stays off: a later account or purchase does not switch it back on.

Service messages are not marketing and are sent regardless of those settings. These messages include email verification and sign-in, receipts and order information, product delivery and download links, replies to messages you send us, and legally required notices.

Service Providers and Disclosures

We disclose information as needed to operate the Services, including to:

• Cloudflare for hosting, storage, security, and infrastructure;
• Stripe or Link for payments and transaction support;
• Amazon Web Services for email;
• Google for sign-in, analytics, and advertising, and GitHub for sign-in;
• PostHog for consented, anonymous product analytics;
• professional advisers and operational service providers;
• authorities or other parties when required by law or needed to protect rights and safety; and
• a successor in connection with a business or service transfer, subject to appropriate safeguards.

Cloudflare also provides bot and abuse protection, including Turnstile, and may process device and network signals for that purpose. See Cloudflare's Privacy Policy.

We do not sell personal information for money. Some analytics or advertising activity may be treated as a sale, sharing, or targeted advertising under certain laws. Where those laws apply, you may use available controls or contact us to exercise the relevant right.

Legal Bases

Where applicable law requires a legal basis, we rely on performance of a contract, consent, compliance with legal obligations, and our legitimate interests in operating, securing, improving, and protecting the Services. You may withdraw consent at any time. You may also object to processing based on legitimate interests where applicable.

Retention

We keep information only as long as reasonably needed for the purposes described in this Policy, including to provide purchased access, honor preferences, maintain security and business records, resolve disputes, and comply with law. Retention depends on the nature of the information and applicable requirements. Information may remain for a limited period in backups or where continued retention is legally permitted or required.

International Transfers

We operate from Singapore and use providers in other countries. Where required, international transfers are protected through applicable contractual, adequacy, or other lawful safeguards. Contact us for more information.

Security

We use reasonable safeguards designed to protect personal information. No method of transmission or storage is completely secure.

Your Choices and Rights

You can update your profile and communication preferences, delete your account, and unsubscribe from marketing through the Services. Depending on where you live, you may also have rights to access, correct, delete, restrict, or obtain a copy of your information; withdraw consent; object to processing; or opt out of certain advertising-related uses. Legal exceptions may apply, and we may need to verify your identity.

Where applicable, you may complain to your local data protection authority, including Singapore's Personal Data Protection Commission or the relevant EU, EEA, or UK authority.

Children

The Services are not directed to children under 13, and we do not knowingly collect their personal information. Users who cannot independently consent under local law should use the Services only with a parent or guardian's authorization.

Changes

We may update this Policy as the Services or legal requirements change. We will post updates here and provide any additional notice required by law.

Contact

Michael Brenndoerfer is the data protection contact. Send questions or requests to contact@mbrenndoerfer.com or use our contact page.