Privacy Policy

Last updated: 27 May 2026

Who we are

X-Planet is operated by Individual Entrepreneur Danil Sysoev (registered in Georgia, identification number 305850816, address: Ermile Bedia Street 4g, Tbilisi 0179, Georgia). We are the data controller for personal data described in this policy. Contact: hello@xplanet.store.

What we collect

Category	What	Why
Account	Email address, password hash, name (optional)	To create and secure your account
Usage	Pages visited, lessons opened, PDFs downloaded, video plays, IP address, browser/device	To run the service, detect fraud, improve the product
Purchases	Order ID, product, amount, currency (no card data — handled by Paddle)	To grant access to paid content
Marketing	Email if you opted in, source landing, UTM parameters	To send relevant launch and course updates

How long we keep it

We keep account and purchase data while your account is active and for up to 7 years after closure for tax and accounting purposes. Marketing data is kept until you unsubscribe. Usage analytics are kept up to 18 months.

Who we share it with (subprocessors)

• Paddle.com Market Ltd — Merchant of Record. Handles billing and tax. Paddle privacy policy.
• Resend, Inc. — Transactional email delivery (account confirmations, receipts).
• MailerLite — Marketing email and waitlists (only if you opted in).
• Meta Platforms, Inc. and TikTok Ltd — Advertising pixels (anonymized event signals, used to measure ad performance).
• Hosting infrastructure — servers physically located in the European Union.

We do not sell your personal data to anyone. We do not share it with third parties beyond the subprocessors listed above.

International transfers

Some of our subprocessors are located outside the European Economic Area (e.g. in the United States). Transfers are made under Standard Contractual Clauses or other appropriate safeguards as required by applicable law.

Cookies and tracking

We use:

• Essential cookies (session ID) — required to keep you logged in.
• Analytics (first-party event tracking) — to understand product use.
• Advertising pixels (Meta Pixel, TikTok Pixel) — to measure ad campaigns. These are loaded only when you visit a landing page.

You can disable cookies in your browser. Some features may not work without essential cookies.

Your rights

Depending on your location (especially if you are in the EU/UK or California), you have rights including:

• Access — request a copy of your data
• Correction — fix inaccurate data
• Deletion — request that we remove your data ("right to be forgotten")
• Portability — receive your data in a structured format
• Objection / opt-out of marketing — unsubscribe at any time via the link in marketing emails or by contacting us

To exercise these rights, email hello@xplanet.store. We will respond within 30 days.

Security

Passwords are stored as bcrypt hashes. Connections are encrypted via TLS. Session tokens are stored server-side in Redis with limited lifetime. Sensitive payment data never reaches our servers — it is handled by Paddle.

Children

X-Planet is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided data to us, contact us and we will delete it.

Changes

If we update this policy, we will revise the "Last updated" date and notify you by email if changes are material.

Contact

For any privacy question, contact hello@xplanet.store.