Privacy policy

1 · Who is responsible, and the short version

Controller

Telmo Silva, sole trader (empresário em nome individual), trading as Maket

Tax number

NIF 227192753

Registered address

Rua do Sol, Lote 5, Edifício Rocha Tower 5ºC, 8500-411 Portimão, Portugal

Contact

maket.studio@proton.me

We don't run any third-party tracking cookies. We use Cloudflare Web Analytics, which doesn't use cookies and doesn't track individuals across sites. The only personal data we hold is: (a) what you enter at Gumroad checkout (handled by Gumroad), and (b) your email if you sign up to the newsletter.

2 · Data we collect

When you visit this site: Cloudflare Web Analytics records anonymous, aggregate stats (pageviews, country, browser, referrer). No cookies, no user IDs, no cross-site profiles. You can read Cloudflare's privacy page here.

When you buy a product: Gumroad collects your name, email, and billing details to process the order. Gumroad is the data controller for that transaction. See Gumroad's privacy policy here. Maket receives your email and order summary for support purposes.

When you subscribe to the newsletter: we store your email and the date you signed up. That's it. We use Buttondown to send them — they handle the list on our instructions, and the list stays our responsibility. You can unsubscribe via the link at the bottom of any email.

When you email us: we store the email exchange so we can support you. Inboxes are private and not shared.

3 · Data we don't collect

No advertising cookies. No social media trackers (no Facebook Pixel, no LinkedIn Insight). No fingerprinting. No location tracking beyond what Cloudflare derives from your IP for analytics country-level stats. The typefaces are served from this domain, not from Google Fonts, so opening a page here makes no request to a font provider. One third-party script does load: the Cloudflare Web Analytics beacon, which sets no cookie and builds no cross-site profile. Nothing else on the page reaches outside this domain, and the spreadsheet checker reaches nowhere at all — it keeps working with the network switched off.

4 · Where data lives

Newsletter emails are stored by Buttondown in the United States, as our processor, under the transfer terms of its data processing agreement — ask and we send you a copy. Gumroad handles checkout as its own controller and relies on the European Commission’s standard contractual clauses for transfers from the EEA to the US. Cloudflare Web Analytics: global edge network, anonymised at source. Email (ProtonMail): Switzerland-based, end-to-end encrypted.

5 · How long data is kept

Newsletter email and signup date: kept for as long as you are subscribed. When you unsubscribe, Buttondown keeps the address on a suppression list so nobody adds you back by mistake; that record stays until you ask for it to go. Email us and it is deleted outright.

Support email: kept while it is useful to support you, and deleted on request. There is no automated purge on the mailbox, so if you want a thread gone, ask and it goes.

Order summary received from Gumroad: kept for ten calendar years, the archiving period Portuguese tax law imposes on the trader behind this shop. Gumroad holds the full transaction record under its own policy and its own periods.

6 · Your rights (RGPD/GDPR)

You can ask us to: (a) tell you what we have on you, (b) export it, (c) correct it, (d) delete it. Email maket.studio@proton.me with subject "GDPR request" — we reply within 30 days (usually within 24h).

You can also object to a processing, or ask us to restrict one. What allows us to hold each piece: the newsletter runs on your consent, which you can take back at any time through the unsubscribe link in any email — that stops future emails and does not undo the ones already sent; order support runs on the contract between us; the aggregate, cookieless traffic counts run on our legitimate interest in knowing which pages get read.

Gumroad holds your payment data as a controller in its own right, as seller of record — for that data, contact Gumroad directly through its privacy policy linked above. Buttondown handles the newsletter list on our instructions, so newsletter requests come to us at the address above, or you unsubscribe from any email. If you believe your data has been mishandled, you have the right to complain to the Portuguese supervisory authority, the Comissão Nacional de Protecção de Dados (cnpd.pt), or to the supervisory authority in the EU country where you live.

7 · Cookies

This site itself sets no cookies. Cloudflare may set a single security cookie (__cf_bm) for bot detection on some requests — this is a session cookie, not a tracking cookie, and is documented in Cloudflare's privacy policy. If you check out via Gumroad, Gumroad will set its own cookies as part of its checkout — those are governed by Gumroad's policy.

8 · Changes to this policy

This page carries the current policy, and the date it was last changed is at the foot of it. Major changes — adding a tracking tool, for instance — are communicated to newsletter subscribers before they go live.

— Maket · 14 August 2026