Privacy Policy

essynotes is operated by Estera Perju. This policy explains what information we collect when you visit essynotes.com, how we use it, and what rights you have over it. We keep things simple because we don’t do anything complicated with your data.

1. Information we collect

We only collect information you actively give us:

• Newsletter sign-up: your name and email address, used to send you the essynotes letter (twice a month, no spam).
• Brand inquiry form: your name, brand name, email address, collaboration type, and message — used solely to respond to your inquiry.
• Purchases: when you buy a digital product, our payment processor Lemon Squeezy collects your billing details and email. We receive your email and order details to fulfill your purchase. We never see or store your card number.

We do not use tracking cookies, run advertising pixels, or build behavioral profiles. We do not collect any information passively beyond what is standard in server logs (IP address, browser type, pages visited) which are retained briefly by our hosting provider Vercel for security purposes.

2. How we use your information

• To send the newsletter you signed up for and nothing else.
• To reply to brand collaboration inquiries.
• To process and fulfill your digital product orders.
• To protect the contact form from spam (via Cloudflare Turnstile — no cookies set).

We will never sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-party services

We use a small number of trusted services to run the site. Each processes data according to their own privacy policy:

• Vercel — website hosting (vercel.com/legal/privacy-policy)
• Kit (formerly ConvertKit) — newsletter delivery; your name and email are stored on their platform (kit.com/privacy)
• Resend — transactional email for contact form replies (resend.com/privacy)
• Lemon Squeezy — payment processing and tax compliance (lemonsqueezy.com/privacy)
• Cloudflare Turnstile — spam protection on the contact form; no cookies are set (cloudflare.com/privacypolicy)
• Sanity — content management for site copy (sanity.io/legal/privacy)

Some links in the My Tools section are affiliate links. Clicking them does not share any personal information with us; the affiliate tracking is handled entirely by the retailer.

4. Cookies

This site does not use tracking or advertising cookies. Cloudflare Turnstile may use a short-lived technical token to verify form submissions — this is not used for tracking and expires immediately. No cookie consent banner is shown because no persistent cookies are set.

5. Email communications (CAN-SPAM)

All commercial emails we send comply with the CAN-SPAM Act. Every newsletter or promotional email includes:

• A clear identification of the sender (essynotes).
• An honest subject line.
• A one-click unsubscribe link that is honored within 10 business days.

You may also unsubscribe at any time by emailing our contact form.

6. Data retention

Newsletter subscriber data is held in Kit for as long as you remain subscribed. Contact form messages are kept only as long as needed to respond. Purchase records are retained for a minimum of 7 years as required by the IRS and applicable U.S. tax law.

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Ask us to correct or delete it.
• Withdraw consent at any time (e.g. unsubscribe from the newsletter via the link in any email).
• File a complaint with the Federal Trade Commission (FTC) at ftc.gov, or with your state attorney general.

To exercise any of these rights, email our contact form. We will respond within 30 days.

8. California residents (CCPA)

If you are a California resident, you have the right under the California Consumer Privacy Act (CCPA) to request disclosure of the personal information we have collected about you, and to request its deletion. We do not sell personal information. To submit a request, email our contact form.

9. Children’s privacy (COPPA)

This site is not directed at children under 13. We do not knowingly collect personal information from children under 13 in compliance with the Children’s Online Privacy Protection Act (COPPA). If you believe a child has provided us with personal information, please contact us immediately.

10. Changes to this policy

If we make meaningful changes, we will update the date at the top of this page. Continued use of the site after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Write to us at our contact form.