Privacy Policy

Datenschutzerklärung gemäß DSGVO (GDPR) · Privacy notice for visitors from the EU/EEA, UK and USA — last updated October 2026

This policy explains what information pastoreliasgrant.com collects, why, and who it's shared with. It applies to this website and to purchases of the books sold through it.

1. Who We Are (Data Controller)

The operator of this website, as named in the Impressum (Austria)
Email: [email protected]

2. What Data We Process

This website itself (pastoreliasgrant.com) is a static informational page. We do not run our own account system, and we do not use advertising cookies or cross-site tracking on this page.

• Analytics (Umami and PostHog) — we use two analytics tools to understand how the site is used and to improve it. Umami counts aggregate page visits, referrers and button clicks, without cookies (Umami's privacy policy). PostHog (PostHog Inc., EU cloud, data stored in the EU) records pages viewed, taps and clicks, scroll behaviour, technical errors, approximate country and device type. PostHog is set up without cookies. It keeps one random anonymous ID in your browser tab only (session storage), which is erased when you close the tab; it lets us show you the same version of a page for the whole visit when we test two versions of it (A/B test). your IP address is not stored in PostHog, and the data is not linked to your name or email. Data may be sent to PostHog through a server on our own domain, which runs on infrastructure provided by Cloudflare (see section 4). We do not combine this data with any advertising data and we do not sell or share it for advertising. See PostHog's privacy policy.
• Session recordings — for visitors outside the EU, EEA, UK and Switzerland, PostHog also records an anonymous replay of the visit (where the page was scrolled, tapped, or left), so we can see where the page is confusing. Text typed into form fields is masked and never recorded. We do not record sessions of visitors in the EU, EEA, UK or Switzerland, and we do not record anyone who has Do Not Track or Global Privacy Control switched on. Your country is read from your request by our hosting provider and is not stored by us.
• Checkout & payment data — when you purchase a book, checkout is handled by Payhip, using Stripe to process the actual card payment. Payhip and Stripe collect your email, payment details, and billing address directly on their own platforms — we do not see or store your card details. Both are independent data controllers for that transaction — see Payhip's privacy policy and Stripe's privacy policy for how they handle your data. Nothing from Payhip or Stripe is loaded while you browse this website — your browser only contacts them once you click a buy button, and from then on you are on Payhip's own pages, where they set the cookies their checkout needs (session, fraud/bot protection, load balancing).
• Server log data — our hosting and network provider, Cloudflare, Inc., automatically processes standard technical data (IP address, browser type, request timestamps) to serve the page and keep it secure. See Cloudflare's privacy policy.
• Country-based pricing — we use your approximate country, detected from your IP address by our hosting provider at the point of your request, to show a fairer local price where the standard price is disproportionate. Your IP address itself is not stored or logged by us, and no profile of you is built from it.
• Direct contact — if you email us directly, we process that email address and message content only to respond to you.

3. Legal Basis for Processing

Processing is based on Art. 6(1)(b) GDPR (performance of a contract, for checkout and delivery) and Art. 6(1)(f) GDPR (our legitimate interest in running a secure, functioning website and in understanding anonymously how it is used). Because our analytics set no cookies and read nothing from your device, no consent banner is required under § 165(3) TKG 2021 (Austria) or the ePrivacy Directive. You can object to analytics at any time (see section 6), and we honour the browser signals Do Not Track and Global Privacy Control automatically.

4. Recipients and International Data Transfers

Recipients of data are our service providers, acting on our instructions or as independent controllers for their own service: Cloudflare, Inc. (hosting, security and the analytics proxy), PostHog Inc. (analytics), Umami Software, Inc. (analytics), and Payhip Ltd and Stripe (checkout, see above). Some of them are based in, or process data in, the United States. Where personal data leaves the EU/EEA, the transfer relies on the EU Standard Contractual Clauses and, where the provider is certified, the EU-U.S. Data Privacy Framework. PostHog's EU cloud stores analytics data in the EU. We do not sell personal data.

5. Data Retention

We keep data only as long as necessary for its purpose or as required by Austrian tax and commercial law (generally up to 7 years for transaction-related records). Analytics data and session recordings are kept for a limited period only and are reviewed and deleted at least once a year.

6. Your Rights Under GDPR (EU/EEA, UK)

As a data subject, you have the right to:

• Access the personal data we (or our processors) hold about you
• Request correction of inaccurate data
• Request erasure ("right to be forgotten"), where applicable
• Restrict processing, or object to it, including to analytics under Art. 21 GDPR
• Data portability
• Lodge a complaint with the Austrian data protection authority, the Datenschutzbehörde (DSB), or with the authority in your own country

To exercise any of these rights, contact us at [email protected]. We answer within one month.

6a. Your Privacy Rights in the USA (California and other states)

If you live in California, Colorado, Connecticut, Virginia, Texas or another US state with a privacy law, you may have the right to know what personal information we collect, to have it deleted or corrected, to opt out of the sale or sharing of your personal information, and not to be treated differently for using these rights.

• What we collect: identifiers such as approximate location (country), device and browser type, and internet activity on this site (pages viewed, clicks, scrolling). If you buy, Payhip and Stripe collect your name, email, billing details and payment information on their own pages.
• Why: to run the site, deliver your purchase and understand anonymously how the page is used.
• We do not sell your personal information and we do not share it for cross-context behavioural advertising. We run no advertising pixels on this site.
• Opt-out signals: we honour Global Privacy Control and Do Not Track automatically. With either switched on, PostHog does not record you at all.
• Session recordings: visitors outside the EU/EEA/UK/Switzerland may be recorded anonymously as described in section 2. If you do not want to be recorded, switch on Global Privacy Control or Do Not Track in your browser, or email us and we will delete anything linked to your visit.
• How to use your rights: email [email protected]. We answer within 45 days. You may also use an authorised agent.

7. Cookies

This website does not set any cookies. Umami and PostHog are both set up without cookies. Payhip and Stripe set their own cookies on their checkout pages after you click a buy button — those are governed by their privacy policies (linked above). If a tool that sets tracking or advertising cookies is added in the future, this policy will be updated and your consent requested before it goes live.

8. Refunds & Digital Delivery

Each book is a digital product, delivered instantly by download the moment your payment is completed. By completing your purchase, you expressly request immediate access to that content. Where a statutory right of withdrawal would otherwise apply — such as the EU's 14-day right for online purchases — you acknowledge that this right is lost once delivery of digital content has begun, because it cannot be "returned" after being accessed. For that reason, book purchases are final and non-refundable. If you were charged in error, charged twice, or never received access, contact us at the email above and we will resolve it directly.

9. Children

This site and its books are intended for adults. We do not knowingly collect personal data from children under 16 (EU) or 13 (USA). If you believe a child has provided us information, contact us at the address above and we will delete it.

10. Changes to This Policy

We may update this policy as the site or its tools change. The date at the top of this page reflects the most recent revision.