Privacy Policy

This page explains what personal data 1dot1.shop collects, why, and what you can do about it. 1dot1 is the data controller for it, contactable at contact@1dot1.shop.

The principle is simple: collect as little as possible, use it only to run the store, and never sell it. There are no advertising trackers here and nothing is shared with data brokers.

This covers the website and the files you buy from it. Our apps keep your data on your own devices and have their own pages: Mac Apps Privacy Policy and AI Wallet Privacy Policy. The full agreement you enter into when you buy is on the terms page, which repeats this policy in sections 15 to 22.

What you give us

• Your email address at checkout — required, because it is how your files reach you and how purchases are linked to you.
• Account details if you claim an account: your email, a name if you give one, and a password, stored only as a salted hash that we cannot read.
• Messages you send through the contact form or by email, including anything you put in them.
• Your email address again if you subscribe to the newsletter, plus the fact that you subscribed and when.

What the payment provider sends us

Lemon Squeezy sends us order metadata: an order id, the products bought, the amount, the currency, the country used for tax, and the buyer’s email. We never receive your full card number. Card data is handled entirely by Lemon Squeezy and its processors under their own privacy policy.

What the site records automatically

• Download logs — which file was downloaded, when, from what IP address and browser. These exist to detect abuse of purchased files and to investigate delivery problems.
• Ordinary server and hosting logs kept by our host for security and diagnostics.

We do not collect special-category data, and we do not ask for your address, phone number or date of birth.

We do not use your data to make automated decisions with legal effects, and we do not profile you for advertising.

We use as little of this as the store can function with:

• A session cookie once you sign in, so the site knows it is you. It is httpOnly, so scripts cannot read it, and it disappears when you sign out.
• Local storage in your browser for your cart contents and your chosen display currency. That stays on your device and is never sent to us as personal data.

There are no advertising cookies, no third-party trackers and no cross-site profiling, which is why you do not see a consent banner demanding your attention. If we ever add analytics, we will use a privacy-preserving, cookie-free tool and say so here first.

We share data only with the services needed to run the store, each under a contract that limits them to that:

• Lemon Squeezy — payments, tax, invoicing and refunds, as merchant of record.
• Amazon Web Services — storage and delivery of the files you buy.
• Our hosting provider — running the site itself.
• Our email provider — sending delivery emails, magic links and the newsletter.

We may also disclose data where the law requires it, or to establish or defend legal claims — for example, using delivery records to answer a chargeback. We do not sell personal data, and we do not share it for cross-context behavioural advertising.

Because we operate from Bangladesh and use international providers, your data is processed outside your country, including in the United States and the EU. Where the GDPR or UK GDPR applies, transfers are made under appropriate safeguards such as the European Commission's standard contractual clauses.

• Order and tax records — for as long as tax and accounting law requires us and our merchant of record to keep them.
• Your account and library — until you ask us to close it.
• Download logs — a limited period, long enough to investigate abuse and support problems.
• Newsletter subscription — until you unsubscribe, which you can do from any email we send.
• Contact messages — while the conversation is useful, then deleted.

Wherever you live, you can ask us to show you the data we hold about you, correct it, delete it, or send it to you in a portable format — and we will do it. Email contact@1dot1.shop from the address concerned and we will respond within 30 days, free of charge. We may need to confirm it is really you before acting.

Bangladesh

Under the Personal Data Protection Act you have rights of access and portability, correction of inaccurate data within 30 days, erasure where data is no longer needed or consent is withdrawn, and the right to withdraw consent at any time by a simple means.

EU, EEA and UK

Under the GDPR and UK GDPR you have rights of access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests — plus the right to withdraw consent for anything based on it. You also have the right to complain to your national data protection authority (in the UK, the Information Commissioner’s Office). We would appreciate the chance to put things right first.

United States

If you live in California or another state with a comprehensive privacy law, you can ask what personal information we have collected, ask us to delete or correct it, and opt out of its sale or sharing — we do not sell or share personal information, so there is nothing to opt out of. We will not discriminate against you for exercising any of these rights.

Purchased files sit in private storage that is not publicly reachable; every download goes through a short-lived signed link. Traffic to the site is encrypted in transit. Passwords are stored as salted hashes. Admin access is restricted to us.

No system is perfectly secure, and we will not pretend otherwise. If a breach ever affected your personal data, we would notify the relevant authority and you, as the law requires, and tell you plainly what happened.

This site is not intended for children, and we do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, email us and we will delete it.

If what we do with personal data changes — a new processor, an analytics tool, anything that widens what is collected — this page is updated before the change goes live, and the date at the top changes with it.

Questions, or a request about your data: contact@1dot1.shop or the contact form. We usually reply within one business day.