Privacy Policy

1. Data controller

Đinh Văn Triển, Phi Liet - Van Giang - Hung Yen, Việt Nam, is the controller of the personal data described here. Contact: htmt.slh@gmail.com.

2. What we collect

When you create an account: your email address, your name if you provide one, and a password. Passwords are stored as bcrypt hashes — we never store or see your actual password.

When you buy: email, name, order details and payment status. We never receive or store your card details — those go directly to the payment provider.

When you request the free sample: your email address and the language you were browsing in.

When you visit: standard server logs such as IP address, browser type and time of request.

Traffic statistics, when enabled: public page paths with sensitive query parameters removed, referring hostnames, screen-size groups and view timestamps. A random per-tab session ID is held in sessionStorage and is not linked to an account. The statistics system stores no IP addresses, emails or full referrer URLs, excludes account, payment and admin pages, and respects Do Not Track / Global Privacy Control.

3. Why we use it

To process orders, deliver products and unlock re-downloads.

To authenticate you and keep you signed in.

To send transactional email: order confirmations, download links, password resets.

To send news about new templates and offers — only where you gave us your email for that purpose. Every such email includes an unsubscribe link.

To provide customer support and handle complaints.

4. Who we share it with

We rely on the following providers to run the service. Each receives only the data it needs:

Paddle.com Market Ltd (United Kingdom) — processes international payments as merchant of record; receives your email and payment details.

PayOS (Vietnam) — processes domestic bank-transfer payments.

Resend (United States) — sends our transactional email; receives your address and message content.

Vercel (United States) — hosts the website.

Neon (United States) — hosts the database holding accounts and orders.

We do not sell your personal data to anyone.

5. International transfers

Several of the providers above operate servers outside Vietnam. Using the service means the data needed to fulfil your order is transferred to those systems.

6. Cookies and browser storage

We use only cookies that are necessary for the site to work. We do not use advertising cookies and we do not track you across other websites.

Session cookie — keeps you signed in.

Language cookie (agentic-lang) — remembers the language you chose.

Your browser also stores your language choice in localStorage. That stays on your device and is never sent to us.

7. How long we keep it

Account and order data is kept while your account is active, and afterwards for as long as tax and accounting law requires us to retain transaction records.

Marketing email addresses are kept until you unsubscribe.

One-time download links and password reset tokens expire automatically, after 7 days and 1 hour respectively.

8. Your rights

You may ask to access, correct or delete your personal data, and you may withdraw consent to marketing email at any time.

Send requests to htmt.slh@gmail.com. We respond within 30 days.

Note that deleting your account removes your ability to re-download past purchases. We must still retain transaction records where accounting law requires it.

9. Security

The site runs entirely over HTTPS. Passwords are hashed with bcrypt. Password reset tokens are stored only as hashes. Payment webhooks are verified by cryptographic signature before being acted on.

No system is perfectly secure. If a breach affects your data, we will notify you by email.

10. Children

This service is not intended for anyone under 16, and we do not knowingly collect their data.

11. Changes to this policy

If we make a material change we will update the date at the top of this page, and email you where the change affects you directly.