Privacy Policy
Last updated: 9 June 2026
This policy explains what personal data we process when you use Colearn, why, and your rights under the EU General Data Protection Regulation (GDPR).
1. Who is responsible (data controller)
Constanting (eenmanszaak, Netherlands), owned by Constantin Stan, trading as
“Colearn”.
KvK: 73822485 · Contact:
hello@colearn.live
2. What we collect, and why
- Purchase data. When you buy the course, our payment provider Lemon Squeezy (our Merchant of Record) collects your name, email, billing country and payment details to process the order, invoice you and handle tax. We receive limited order information (your name, email, country and the product purchased) so we can deliver the course and provide support.
- Contact data. If you email us, we process your email address and message to respond to you.
- Course progress. By default your lesson progress is stored only in your browser (localStorage); unless you sign in to sync (below), it never leaves your device and is not sent to us.
- Sign-in and cross-device sync (optional). If you choose to sign in with your email to keep your progress in sync across devices, we store your email address and your lesson progress in our database (Google Firebase / Cloud Firestore). Sign-in uses a passwordless email link, so we never see or store a password. You can stop syncing at any time by signing out, and you can ask us to delete this data (see “Your rights”).
3. The PDF watermark — processed in your browser
When you personalise a downloadable PDF, the name and email you enter are processed entirely within your browser and written directly into the file you download. This information is not uploaded to us or any server and we never receive or store it.
4. Cookies and analytics
The Colearn website uses your browser’s localStorage to remember your course progress and your cookie choice; this stays on your device. With your consent, we use Google Analytics to understand how the site is used, as anonymous and aggregated statistics. Analytics cookies are set only after you accept them in the cookie banner — if you decline, no analytics cookies are set and Google Analytics is never loaded. You can change your choice at any time by clearing your browser’s site data for this website. The Lemon Squeezy checkout may set its own cookies that are necessary to process your payment, governed by Lemon Squeezy’s privacy policy.
5. Service providers we use
- Lemon Squeezy — payments and Merchant of Record for both the course and the voluntary “pay what you want” Starting Kit (order and billing data).
- Google Firebase Hosting — website hosting and content delivery; processes technical data such as IP addresses in server logs.
- Google Firebase Authentication & Cloud Firestore — used only if you sign in to sync your progress: stores your email address and lesson progress to provide cross-device sync.
- Google Analytics — anonymous, aggregated usage statistics, loaded only if you accept analytics cookies in the cookie banner.
- Google Fonts — fonts are loaded from Google’s servers, which may receive your IP address when a page loads.
Some of these providers may process data outside the European Economic Area. Where they do, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.
6. Legal basis
- Performance of a contract — to deliver the course you purchased and provide support.
- Legitimate interests — to keep the website secure and functioning.
- Legal obligation — to keep invoices and tax records as required by law.
- Consent — for the optional cross-device sync, when you choose to sign in. You can withdraw it at any time by signing out.
7. How long we keep data
Order and invoice records are kept for as long as required by Dutch tax law (currently seven years). Support emails are kept only as long as needed to handle your request.
8. Your rights
Under the GDPR you have the right to access, correct, delete, restrict or port your data, and to object to certain processing. To exercise any of these, email hello@colearn.live. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.
9. Changes
We may update this policy. The current version is the one published here, dated above.
Questions? hello@colearn.live