START TO INVENT

Privacy Policy

Updated: October 2026 · v2.2

START TO INVENT (starttoinvent.com, "we") — a sole proprietorship in Israel — owns this site and is responsible for the data collected on it (the database controller). The owner's name and address are shown at checkout before every payment. This document explains plainly what data is kept, why, who receives it and what your rights are. Privacy questions: [email protected]. You are under no legal obligation to give us data; without account details we cannot open an account, and without shipping details we cannot ship an order.

What we store, and why

  • Account: name, email address and verification status — so you can sign in.
  • Progress: which parts and steps you checked in each project — so your progress follows you across devices.
  • Purchases & entitlements: which projects or subscription you bought and what is unlocked for you. Card details never reach us — they are entered on the secure page of the payment provider shown at checkout and processed under its privacy policy. We only receive the payment confirmation, the amount and, where the provider shares them, the last four card digits.
  • Download log: when you download a paid file we record the file, the account, the time, the IP address and the browser type. This is the basis for our refund policy ("refund as long as no files were downloaded") and for abuse prevention.
  • Poll votes: voting while signed in ties the vote to your account. Voting as a guest stores only a random signed identifier — no name, no identifying details.
  • Physical orders: name, phone, shipping address and recipient details if it is someone else — to ship the order and keep you updated. These are passed to the courier only for delivery.
  • What you post: reviews, forum posts and comments are shown publicly with the name and profile picture you chose on the site.
  • Messages to us: what you wrote to us by email or form (including a cancellation notice) — to handle it.
  • Google sign-in: if you use it, we only receive your name, email and profile picture. We have no access to anything else in your Google account.

Cookies & analytics

  • Session cookie — required for sign-in.
  • si-locale — remembers your language choice.
  • si-guest — created only if you vote in a poll as a guest; a random identifier that prevents double voting, with no personal identification.
  • si_bar_closed, si_me_promo_closed — remember that you closed a notice on the site, so it is not shown again (up to a year).
  • Local browser storage — your cart, colour theme and place in a project are kept on your device so the site remembers them. They are not sent to us until you act (for example, place an order).
  • No advertising cookies and no tracking cookies, and no third-party advertising or tracking tools on the site.
  • Usage statistics via Umami — a privacy-first analytics tool running on our own server: cookie-less, no personal identification, and the data never leaves us.

What we don't do

  • We don't sell or share your data with third parties for marketing.
  • We don't email you unless you asked. Operational email — verification, password reset, receipts and order updates — is always sent, because the service does not work without it. Marketing email goes only to people who gave explicit consent, and every such message carries an unsubscribe link that works immediately.
  • No automated decisions with legal effect about you, and no behavioural profiling. For mailing we group recipients coarsely only — for example people who already purchased versus everyone.

Who we do share with

Only who is needed to run the service:

  • Payment providers — Stripe, Paddle or Isracard (PayMe), as shown at checkout — to process the payment itself.
  • The courier — recipient name, phone and address, for physical orders only.
  • Resend — our email service; it sees your address and the message body.
  • Cloudflare — the edge network every request passes through, and media storage.
  • Oracle Cloud — the host our server and database run on.
  • Google — only if you chose to sign in with it.
  • Authorities — where the law requires.

We do not sell data and do not pass it to third parties for any other purpose.

How long we keep data

  • Account and progress data — for as long as the account exists.
  • Purchase and download records — for as long as they are needed as evidence in payment disputes and as required by law.
  • Rolling backups persist for up to 14 days.

Your rights

You can ask to view your data, receive a copy, correct it, delete the account, or object to processing — email [email protected] from your account address and we will handle it within 14 days. Deletion excludes data we must keep by law: the record of each payment (the email at the time of purchase, the amount, the payment provider and the transaction ID) is kept after the account is deleted, detached from it, for as long as record-keeping law requires. You may also complain to the Israeli Privacy Protection Authority; if you live in the EU, also to your local supervisory authority.

Children

Projects are built with children, but the account belongs to an adult: opening an account and purchasing require being 18+, and children use the site through a parent's account and with the parent (see the Terms). We do not knowingly collect data from children. A parent who finds their child's data here — write to us and we will delete it.

Where the data lives

Our server and database are located in the European Union (Frankfurt, Germany). Media files — images and downloadable files — are stored in Cloudflare R2. Site traffic passes through Cloudflare's edge network. Payment data is processed by the payment provider under its own policy and is not stored by us.

Security

Traffic is encrypted, passwords are stored hashed only, and access to data is restricted. No system is 100% secure; if a material security incident occurs — we will notify as required by law.

Changes to this policy

We update this document from time to time; material changes will be announced on the site and emailed to account holders.