Applantic

Legal

Privacy Policy

Effective Sep 4, 2026

The short version

  • We collect the minimum a store needs: your order details, your emails to us, and aggregate site stats.
  • Advertising measurement runs only with your consent where the law requires it, and you can switch it off any time from the footer. No personalized ads, ever.
  • Payments are processed by Stripe; we never see your card number.
  • We don’t sell your data. Email ask@applantic.co to access or delete it, honored wherever you live.

The summary helps you read; the sections below are the agreement.

Who’s responsible

Applantic, a Delaware C corporation, operates applantic.co and is the data controller for the processing this policy describes. Address: Delaware, United States. Contact: ask@applantic.co.

What we collect, and where it comes from

  • Orders. When you buy, Stripe collects your name, email, billing country, and payment details, and passes us everything except the payment details. We see who bought what, never your card number. We use this to deliver your purchase, send receipts, handle refunds, and calculate tax.
  • Delivery. We generate your personal download links, email them to you through Resend, and record download events (time, IP address) to run and protect delivery.
  • Campaign parameters. If you arrive from a link that carries campaign parameters (an ad click ID or campaign tags), we keep them in one first-party cookie for 30 days and, if you buy, record the click ID with your order, so we know which campaign led to a sale. Where the law requires consent, that cookie exists only after you accept advertising measurement.
  • Advertising measurement. With your consent where the law requires it, Google’s advertising tag runs on this site so Google Ads can count a purchase against the ad click that led to it. Google sets its own cookies for that, and when you buy, your order email goes to Google’s tag in hashed form to match the purchase to the click. We use this for measurement only, never to personalize ads, and it involves nothing you do on other sites.
  • Your choice. When you accept, decline, or change advertising measurement, we keep a record of the choice: the time, the choice, the version of this policy, your country, your IP address, and your browser, so we can show the choice was yours.
  • Email. Whatever you send to ask@applantic.co (hosted on Google Workspace), used to answer you.
  • Done For You intake. The brand details you give us in the questionnaire (collected via Google Forms), used only to deliver the service.
  • Site analytics. Vercel Analytics and Speed Insights, which are cookieless and aggregate: page views and performance metrics, no individual profiles, no cross-site tracking.
  • Hosting logs. Vercel keeps short-lived server logs (IP address, user agent) for security and operations.

Cookies and tracking

We set two cookies ourselves. The consent cookie remembers your advertising measurement choice: 12 months after Accept, 6 months after Reject, 12 months after an opt-out. The campaign cookie holds the click ID and campaign tags from the link you arrived on, for 30 days, only to attribute a purchase to its campaign; it carries nothing about you beyond that link. Google’s advertising tag sets Google’s own cookies, under Google’s privacy policy, while advertising measurement is on.

In the EEA, the UK, Switzerland, Canada, and Brazil, none of the advertising cookies exist until you accept on the consent card, and declining stores nothing but the decline. Everywhere else, measurement runs until you switch it off from the footer’s privacy choices. If your browser sends the Global Privacy Control signal, we treat it as no, everywhere, without asking.

Vercel Analytics and Speed Insights are cookieless. Stripe’s checkout, on Stripe’s own pages, uses cookies for payment and fraud prevention under Stripe’s privacy policy. If a live in-browser demo is offered on a product page, it loads from Appetize only after you tap to start it, under Appetize’s privacy policy. When we add a measurement partner, this policy changes first; the date at the top tells you.

Why we process it

Four reasons, which are also our legal bases where the GDPR applies:

  • Contract. Delivering what you bought: the download, updates, refunds, the Done For You service.
  • Legal obligations. Tax and accounting records of sales, and the record of your consent choice.
  • Legitimate interests. Securing the site and delivery, preventing abuse, answering your messages, understanding aggregate site usage, and, outside the countries where consent is required, advertising measurement, which you can switch off at any time.
  • Consent. Advertising measurement in the EEA, the UK, Switzerland, Canada, and Brazil. Withdraw it from the footer at any time, as easily as you gave it.

Who we share it with

Processors that run the store, under their data-processing terms: Stripe (payments and tax), Vercel (hosting, analytics, file storage, and the delivery and consent records), Google (Workspace email and Forms), and Resend (delivery emails).

One measurement partner: Google Ads receives the advertising measurement described above, including the hashed order email, only while measurement is on for you. We don’t sell personal information. Under California law, sending measurement data to Google may count as sharing; the footer’s Do Not Sell or Share link turns it off, and we honor the Global Privacy Control signal as the same request. Beyond these, we disclose personal information only if the law compels us, in which case we’ll tell you unless we’re legally barred.

Where it lives

We’re a US company and processing happens primarily in the United States. Our processors and Google may process data in other countries under their own safeguards, such as standard contractual clauses.

How long we keep it

  • Order and receipt records: 7 years, for tax and accounting.
  • Campaign cookie: 30 days. The click ID recorded with an order stays with that order record.
  • Consent cookie: 12 months after Accept, 6 months after Reject, 12 months after an opt-out.
  • Consent records: 3 years.
  • Google’s advertising cookies: 90 days, set and expired by Google.
  • Download links: valid for 12 months after purchase.
  • Support email: up to 2 years after the conversation closes.
  • Done For You intake: deleted 12 months after your launch, or earlier on request.
  • Analytics: aggregate only; nothing personal is retained.

Your rights

Wherever you live, you can ask us to show you the data we hold about you, correct it, delete it, restrict or object to processing, or hand it over in a portable format. Email ask@applantic.co. We verify the request against your order email and respond within a month. We never treat you differently for exercising your rights. Your advertising measurement choice is yours to change at any time from the privacy choices link in the footer.

For California readers: you have the right to opt out of the sale or sharing of personal information. We don’t sell it; to stop the sharing that measurement may involve, use the Do Not Sell or Share My Personal Information link in the footer, or turn on Global Privacy Control in your browser, which we honor. For EEA and UK readers: you can also complain to your local supervisory authority.

Children

Buyers must be 18 or older. The site isn’t directed at children, and we don’t knowingly collect their data. If you believe we hold some, email us and we’ll delete it.

Changes and contact

Updates to this policy appear on this page with a new date at the top; material changes get flagged on the site. Questions, requests, complaints: ask@applantic.co, or by mail at the address in section 1.