methodforge

Privacy Policy

Last updated 18 September 2026

This policy explains what personal data methodforge collects, why, and what you can do about it. The short version: we collect only what we need to sell and deliver the product, and we never sell your data.

Who is responsible

The data controller is KaubadTeenused OÜ (registry code 17076007), Estonia. For anything about your data, email hello@themethodforge.com.

What we collect

  • Purchase data: your name, email address, billing country, what you bought, the amount, and payment references. Stripe handles your card details. We never see or store them.
  • Delivery data: the email address your purchase is tied to, a unique download token, and when the download email was sent.
  • Support and refund emails: what you send us, including the screenshots and links in a guarantee claim.
  • Instagram interactions: if you comment on or message our Instagram account, your username and the content of that comment or message, which may be handled by our messaging automation.
  • Server logs: IP address, browser type, the page requested, and the time, recorded when you visit the site.

Cookies and tracking

The sales page sets no cookies and runs no third-party analytics, ads, or tracking pixels. A small script of our own reports which sections of the page were viewed, how long the page stayed open, and whether a buy button was clicked; it stores nothing in your browser, and the reports are kept with the server logs above. There is no login and no account. Stripe sets its own cookies on its checkout page, for fraud prevention.

Why we use it, and on what legal basis

  • To deliver what you bought, give you access, and answer support requests. Basis: performing our contract with you.
  • To keep accounting records. Basis: legal obligation.
  • To keep the site secure, prevent fraud, handle chargebacks, and trace shared access. Basis: our legitimate interest in protecting the business and the product.
  • To reply to Instagram comments and messages. Basis: our legitimate interest in answering people who contact us.
  • To send product updates you signed up for. Basis: contract (for updates to what you bought) or your consent. You can unsubscribe at any time.

Who we share it with

We do not sell or rent personal data. We share it only with the service providers that run the business, each bound to protect it:

  • Stripe (payments and checkout)
  • Supabase (purchase records, file storage, and download links, in the EU)
  • Resend (sending the purchase email)
  • OVHcloud (server hosting, in the EU)
  • Cloudflare (domain name services)
  • Google (email)
  • Zernio (Instagram comment and message automation)

Instagram itself is run by Meta, which handles your data under its own privacy policy. We may also disclose data where the law requires it, or to a payment provider during a chargeback.

Some of these providers process data outside the European Economic Area. Where they do, the transfer is covered by the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

How long we keep it

  • Purchase and accounting records: 7 years, as Estonian accounting law requires.
  • Delivery data: for as long as your download link is active, then up to 1 year.
  • Support and refund emails: up to 2 years after the conversation ends.
  • Instagram interaction data: up to 12 months.
  • Server logs: up to 30 days.

Your rights

Under the GDPR you have the right to:

  • get a copy of the personal data we hold about you,
  • have it corrected if it is wrong,
  • have it deleted, unless we must keep it by law,
  • restrict or object to how we use it,
  • receive it in a portable format,
  • withdraw consent at any time, where we rely on consent.

Email hello@themethodforge.com to use any of these. We answer within one month. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at aki.ee, or to the data protection authority where you live.

Children

methodforge is not meant for anyone under 18, and we do not knowingly collect data from children.

Changes to this policy

If we change this policy, we update the date at the top. If the change is significant, we will tell customers by email.