Skip to content
SheetForge

Privacy policy

SheetForge sells spreadsheet templates. This page says what we collect, why, who else handles it and how to ask us to delete it. Contact: [email protected].

What we collect

  • Page views, without personal data. We count visits by day, page path and a coarse referrer class (for example "search" or "direct"). We do not store IP addresses, user-agent strings or cookies for this.
  • Sales records. When you buy, Gumroad (the merchant of record) tells us the order amount, product, time and order id. We do not store your email address. We keep a keyed hash of your email so we can count first-time buyers, exclude self-purchases and find your records if you ask us to delete them.
  • Support email. If you write to [email protected], we keep the message and our reply in the owner's mailbox.
  • Refund notes. A short note about why a refund was requested, with personal details removed.

Cookies and Do Not Track (CalOPPA)

As the California Online Privacy Protection Act (CalOPPA) asks, we say this plainly: public pages set no cookies. The administration area uses one sign-in cookie that only the owner receives. We honor Do Not Track: we do not track visitors across sites, and the page counts above contain no identifiers. We do not sell personal data.

Who else handles data

  • Gumroad is the merchant of record. It takes payment, collects and remits sales tax, sends your receipt and delivers the files. It holds the buyer relationship and your email and payment details under its own privacy policy.
  • Anthropic generates our template drafts. No customer data is sent to it.
  • Our hosting provider runs the website and stores the records described here.

Deleting your data

Email [email protected] from the address you used to buy. We remove the email hash from our sales records. Financial rows stay, without the hash, because we must keep bookkeeping records. For data Gumroad holds, ask Gumroad directly.

Retention

  • Sales records (amounts, product, time, order id): 7 years
  • Email hash: 24 months, then removed
  • Daily page counts: Indefinitely (not personal data)
  • Refund notes: 7 years with the sale
  • Server logs of automated jobs: 30 to 180 days
  • Backups: The newest 14

Notice for the EU and UK (GDPR)

  • Controller: Maximilien Beuvelet, reachable at [email protected].
  • Legal basis: legal obligation (bookkeeping and tax records) and legitimate interest (counting sales, preventing abuse, answering support) for the sales records and the email hash. The hash is pseudonymised personal data because we hold the key.
  • Your rights: access, erasure, rectification, objection and restriction. Email [email protected]. Erasure removes the email hash; records we must keep by law stay without it.
  • Complaints: you may complain to your national data protection authority.
  • Transfers: Gumroad, Anthropic and our host may process data in the United States.
  • Retention: as in the table above.

Changes

We post changes here and update the effective date.