Privacy Policy

• Account data: email address, name (optional), password (hashed).
• Purchase data: orders, products purchased, timestamps. Card details are handled by Stripe and never reach our servers.
• Newsletter data: email address, consent, source, subscription status.
• Technical data: IP address, browser, device, and log data strictly necessary to run the Site securely.

• Provide and secure your account and library — performance of contract (Art. 6(1)(b) GDPR).
• Process payments and deliver ebooks — performance of contract.
• Send transactional emails (purchase, download, password reset) — performance of contract.
• Send The Ancora Letter — consent (Art. 6(1)(a) GDPR), withdrawable at any time.
• Comply with tax and accounting obligations — legal obligation.
• Prevent fraud and abuse — legitimate interest.

• Stripe — payment processing.
• Supabase — authentication, database and file storage (managed via Lovable Cloud).
• Resend — transactional and newsletter email delivery.
• Cloudflare — hosting and edge delivery.

Each processor operates under a data-processing agreement and provides appropriate safeguards for any international transfer (EU Standard Contractual Clauses where applicable).

Account and purchase data are retained while your account is active and afterwards for the period required by tax and accounting law (up to 10 years in Bulgaria). Newsletter data is retained until you unsubscribe. Logs are kept for up to 12 months.

Under the GDPR you have the right to:

• Access, rectify or erase your personal data.
• Restrict or object to processing.
• Portability of the data you provided.
• Withdraw consent at any time (does not affect prior lawful processing).
• Lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) or your local supervisory authority.

To exercise any right, email info@ancoramethod.com. We respond within 30 days.

We use TLS in transit, encrypted storage at rest, hashed passwords, and row-level access controls. Ebook files are served through signed, time-limited URLs and never publicly exposed.

The Site is intended for adults (parents). We do not knowingly collect data from children under 16.

See our Cookie Policy.

We may update this policy; the effective version is the one published on this page.