Privacy Policy

The Secret Way (“we”, “us”, “our”) operates the website at thesecretway.com. This Privacy Policy explains what personal data we collect, why we collect it, and how we protect it.

By using our platform, you agree to the collection and use of information in accordance with this policy.

We collect the following personal data:

• Account data: email address, encrypted password (managed by Firebase Authentication).
• Purchase data: order ID, amount, currency, package purchased — provided by Lemon Squeezy after payment.
• Usage data: pages visited, session timestamps — stored as HTTP-only cookies.
• We do not collect or store payment card information.

• To create and manage your account.
• To verify payment and grant access to purchased content.
• To maintain session cookies for authentication.
• To respond to support enquiries.
• We do not sell your personal data to third parties.
• We do not use your data for advertising.

We use the following third-party services that may process your data:

• Firebase Authentication & Firestore (Google):manages user accounts and stores entitlement data. Data is stored in Google’s infrastructure. See Firebase Privacy Policy.
• Lemon Squeezy: our payment processor and Merchant of Record. They collect billing and payment data independently of us. See Lemon Squeezy Privacy Policy.
• Vercel: our hosting provider. May process request IP addresses and basic server logs. See Vercel Privacy Policy.

We use a single HTTP-only session cookie (__session) to keep you logged in. This cookie:

• Is set only after you sign in.
• Cannot be accessed by client-side JavaScript.
• Expires after 14 days or when you log out.
• Contains no payment or personally identifiable data.

We retain your account data for as long as your account exists. Purchase records are retained for at least 5 years for tax and legal compliance purposes. You may request deletion of your account by contacting us.

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@thesecretway.com.

Our service is not directed at children under 16. We do not knowingly collect data from children.

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of the platform after changes constitutes acceptance.

Questions about this Privacy Policy? Contact us or email support@thesecretway.com.