Privacy policy
Last updated 9 November 2026
This policy covers nookandglow.com and the Master Money Making course. The seller and data controller is Omkar Arun Sanil. Questions or requests go to omkarsanil@nookandglow.com.
What we collect, and why
- Visiting the site. Our host, Vercel, keeps short-lived request logs (IP address, browser, pages requested) to run and protect the site. To stop abuse of the buy and sign-in buttons we count requests per IP address; we store only a one-way hash of the address, and each counter deletes itself within an hour.
- Buying the course. Dodo Payments runs the checkout as merchant of record. It collects your name, email, billing details and card data under its own privacy policy; we never see your card number. Dodo sends us your payment ID, payment status, the product bought and your email. We keep the payment ID, its status, the date and a one-way hash of your email, so we can confirm access and answer support requests.
- Your licence key. Dodo emails you a licence key. We store a one-way hash of it, linked to your payment ID, so the key can sign you in again. We count sign-ins per purchase to stop keys being shared.
- Watching lessons. Course videos stream from Bunny.net, which receives your IP address and browser details to deliver the video.
- Emailing us. We keep your message and address to answer you.
We don't use analytics, advertising trackers or social pixels, and we don't sell or share personal data for advertising.
Who processes data for us
- Vercel Inc. (USA): hosting and server functions.
- Dodo Payments: checkout, payments, tax, receipts and licence keys, as merchant of record.
- Upstash Inc.: the small database that holds payment status, hashed keys and rate-limit counters.
- BunnyWay d.o.o. (Bunny.net, Slovenia): course video hosting and streaming, and delivery of the preview videos on the home page.
Some of these companies process data outside your country. They use their own safeguards, such as standard contractual clauses, for international transfers.
Cookies and similar storage
We set one cookie, and only after you buy or sign in:
__Host-nag_access: keeps you signed in to the course on this device for 30 days. It holds your payment ID and an expiry, signed so it can't be altered. It is strictly necessary for a service you asked for, so it needs no consent banner. Signing out deletes it.
The preview videos stream from Bunny.net's network, which sees your IP address to deliver them. They store nothing in your browser.
How long we keep it
Purchase records stay for as long as you have access to the course, and up to 8 years after that where Indian tax or accounting law requires it. Rate-limit counters expire within an hour. Webhook IDs (used to stop duplicate payment messages) expire after 14 days.
Your rights
Depending on where you live (for example the EU or UK GDPR, India's Digital Personal Data Protection Act 2023, or California's CCPA), you can ask to see, correct, or delete your data, object to its use, or complain to your data protection authority. Email omkarsanil@nookandglow.com and we will answer within 30 days. For data Dodo Payments holds as merchant of record, you can also contact Dodo directly.
Children
The course is for adults. We don't knowingly collect data from anyone under 18.
Changes
If this policy changes, the date at the top changes too. Significant changes will be emailed to buyers.