Privacy Policy

What this site collects, why, and what you can do about it. Written for pos.video-library-of-alexandria.com and the emails sent from it. Last updated: 9 September 2026.

1. Who is responsible

This policy follows the EU General Data Protection Regulation (GDPR). The legal bases we rely on are named in each section.

2. Hosting and server logs

This site and its server functions run on Vercel (Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA). When you open a page, Vercel processes the technical data your browser sends: IP address, date and time, requested page, browser type and operating system. This is needed to deliver the site and keep it secure (Art. 6 (1) (f) GDPR). Vercel processes data under EU standard contractual clauses and participates in the EU-US Data Privacy Framework.

3. Analytics on this site

Vercel Web Analytics

We use Vercel Web Analytics to count page views. It works without cookies and without storing your IP address; visitors are only told apart by a short-lived hash that cannot be traced back to a person. Legal basis: our legitimate interest in knowing whether the site is used (Art. 6 (1) (f) GDPR).

Our own event tracking

The sales page sends a few events to our own server: page visit, how far you scrolled, whether you clicked a checkout button, and whether you opened the login window. Each event carries the page path, the referring site, a random session ID that is stored in your browser's local storage, the original source you came from (for example the name of the site or newsletter that linked here), your device type (desktop, tablet or mobile) and your approximate location (country, region and city as estimated from your IP address by the hosting provider; the IP address itself is not stored). This data is stored in our database at Supabase (see section 5) and is used to understand which channels bring visitors and where people leave the page. It is not sold or shared. Legal basis: Art. 6 (1) (f) GDPR. You can clear local storage in your browser at any time to reset the session ID.

The site does not use advertising cookies, Google Analytics, or the Facebook pixel.

4. Member accounts and login

When you buy the program, an account is created with your email address. You sign in with email and password or with a one-time sign-in link sent to your email. We store your email address, hashed password, sign-in timestamps, your progress in the program and, if you bought the Personal Map, your assessment answers and results. Without this data we cannot provide what you bought (Art. 6 (1) (b) GDPR). Account data is kept as long as your access exists. You can ask for deletion at any time by email; your access ends with the deletion.

5. Database and authentication provider

Accounts, program progress, newsletter subscriptions and the analytics events described above are stored at Supabase (Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992). Supabase acts as our processor under a data processing agreement with EU standard contractual clauses.

6. Payments

Payments are handled by Stripe (Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland, and Stripe Inc., USA). When you pay, Stripe collects your name, email address, payment details and billing information directly on its checkout page. We never see your full card number. We receive a confirmation with your email address, the product bought and the amount, which we need to create your access and to keep the records required by tax law (Art. 6 (1) (b) and (c) GDPR). Stripe's own privacy policy applies to the checkout: stripe.com/privacy. Purchase records are kept for the retention period required by German tax law (currently up to ten years).

7. Newsletter

You can subscribe to the Library of Alexandria Newsletter on the newsletter page. We store your email address, the source of the signup (for example which link you used), the time of signup, and a token that identifies your unsubscribe link. Signup is active immediately; you receive a welcome email right away. Legal basis: your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time by using the unsubscribe link in any email or by writing to us.

Measurement in emails. Each newsletter contains a tiny invisible image that tells us when the email was opened, and links in the email pass through our server so that we can count clicks. This shows us which topics readers find useful. The data is stored per email and per subscriber at Supabase and is not shared with anyone. If you do not want this, you can read the email with images blocked, or unsubscribe.

Emails are sent through the mail servers of Hostinger (Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus). Your address is not passed to any other service. After you unsubscribe, your address is marked as unsubscribed so that you do not get emails again; you can ask us to delete it completely.

8. Email contact

If you write to us, we keep your message and address as long as needed to handle your request and for as long as legal retention rules require (Art. 6 (1) (b) and (f) GDPR).

9. Cookies and local storage

The sales page and the newsletter page do not set cookies. They use your browser's local storage for three small values: a random session ID, the source you first came from, and a flag that stops the visit from being counted twice. The member area stores your login session in local storage so that you stay signed in. All of this stays in your browser and can be deleted there.

10. Your rights

• Access to the personal data we hold about you (Art. 15 GDPR)
• Correction of inaccurate data (Art. 16 GDPR)
• Deletion (Art. 17 GDPR), unless we are legally required to keep it
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interest (Art. 21 GDPR)
• Withdrawal of consent at any time, with effect for the future (Art. 7 (3) GDPR)

To use any of these rights, email info@video-library-of-alexandria.com. You also have the right to complain to a data protection authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (LfDI), Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

11. Changes

We update this policy when the site or its services change. The date at the top shows the current version.