This policy explains what SKOR Creative, a sole proprietorship owned by Stefan Skorykh ("we," "us," "our"), collects when you use skorcreativepacks.com (the "Site"), why we collect it, and what control you have over it.
We keep this short and specific. We collect what we need to sell you files and nothing else.
1. What we collect
You give us
| What | When | Why |
|---|---|---|
| Email address | At checkout and when signing in | Send your receipt and download links; give you access to your library |
| Name (optional) | If you provide it at checkout | Receipts and support |
| Billing details | At checkout, via Stripe | Process payment and calculate tax |
| Support messages | When you contact us | Answer your question |
Collected automatically
| What | Why |
|---|---|
| IP address | Rate limiting, fraud prevention, and security. We use it to stop automated abuse, not to profile you. |
| Browser and device type | Troubleshooting and security logging |
| Download activity — which file, when, outcome | Proving you own what you downloaded, detecting shared links, and support |
| Purchase history | Your library and our records |
What we do NOT collect
- We never see or store your card number. Payment details go directly to Stripe. We receive only a confirmation, the last four digits, and the email you used.
- We do not run advertising trackers or third-party analytics pixels.
- We do not sell your data. Ever, to anyone.
- We do not buy data about you from anyone else.
2. Cookies and local storage
We use only what the Site needs to function:
- Session cookie — keeps you signed in after you click a magic link.
- Local storage — remembers your shopping cart between visits. This stays in your browser and is not sent to us until checkout.
- Short-lived security cookie — issued during a download to authorize the file transfer.
No advertising cookies. No cross-site tracking. Because we use no non-essential cookies, we do not show a cookie consent banner.
3. Who we share it with
We share data only with the services required to run the store:
| Service | What it receives | Purpose |
|---|---|---|
| Stripe | Email, billing details, payment info | Processing payments |
| Supabase | Email, purchase and download records | Database |
| Cloudflare | File requests, IP address | Storing and delivering your files |
| Vercel | Requests to the Site, IP address | Hosting |
| Resend | Email address, receipt content | Sending your receipts |
Each processes data on our behalf under their own privacy terms.
We may also disclose information if required by law, to enforce our Terms or License Agreement, to investigate fraud, or in connection with a sale or transfer of the business — in which case we will notify you.
4. How long we keep it
| Data | Retention |
|---|---|
| Account and email | Until you ask us to delete it |
| Purchase records | At least 7 years — required for tax and accounting |
| Download logs | 2 years, for fraud detection and support |
| Rate-limiting records | Pruned automatically, typically within days |
| Support messages | 2 years |
Purchase records are the one thing we cannot delete on request, because tax law requires we keep them. If you ask for deletion we will remove everything else and retain only the minimum transaction record.
5. Your rights
Regardless of where you live, you may:
- Access the data we hold about you
- Correct anything inaccurate
- Delete your account and associated data, subject to Section 4
- Export your data in a portable format
- Object to processing, where applicable
Depending on your location you may have additional rights — for example under the GDPR (Europe/UK) or CCPA/CPRA (California), including the right not to be discriminated against for exercising them. We do not sell or share personal information as those laws define it.
To exercise any right, email skorcreativemn@gmail.com. We will respond within 30 days and may need to verify your identity first.
6. Legal basis (for users in Europe/UK)
We process your data on these grounds:
- Contract — to deliver what you bought and give you access to it
- Legitimate interests — security, fraud prevention, and rate limiting
- Legal obligation — tax and accounting records
We do not rely on consent for any of the above, and we do not use your data for marketing without asking you separately.
7. International transfers
Our providers may process data in the United States and elsewhere. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.
8. Security
We protect your data with:
- Encryption in transit (HTTPS everywhere)
- Passwordless sign-in — we never store a password, so none can be stolen
- Database access rules that prevent one customer from reading another's records
- Time-limited download links rather than permanent public URLs
- Private file storage that is never directly reachable from the internet
No system is perfectly secure. If a breach affects your data, we will notify you and the relevant authorities as required by law.
9. Children
The Site is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us information, contact us and we will delete it.
10. Marketing
We do not send marketing emails unless you opt in. Transactional emails — receipts, download links, sign-in links, and important account notices — are not marketing and will still be sent, because they are how you receive what you paid for.
If you do opt in, every marketing email includes an unsubscribe link.
11. Changes
We may update this policy. The "Last updated" date will change, and material changes will be announced on the Site. Continuing to use the Site after changes take effect means you accept them.
12. Contact
Questions, requests, or complaints:
SKOR Creative A sole proprietorship owned by Stefan Skorykh Ramsey, Minnesota skorcreativemn@gmail.com
If you are in the EU or UK and believe we have mishandled your data, you may also complain to your local data protection authority.