Ringmast4r's Emporium
  • Store
Login Sign Up

> privacy_policy

Last updated: March 30, 2026

This Privacy Policy describes how Ringmast4r's Emporium ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you access or use our website at ringmast4r.org and any related services (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information. When you create an account, we collect your email address, display name, and password. Your password is cryptographically hashed using bcrypt with a cost factor of 12 before storage. We never store your password in plaintext and cannot retrieve it.

Profile Information. You may optionally provide a biography and choose whether your profile is publicly visible.

Payment Information. Payment processing is handled entirely by Stripe, Inc. We do not collect, store, or process your credit card number, bank account details, or other financial payment instruments. We receive only a confirmation of payment, your Stripe customer identifier, and transaction metadata (amount, date, payment intent ID). For Stripe's privacy practices, see Stripe's Privacy Policy.

Usage Data. We collect data about your interactions with the Service, including:

  • Course progress (lessons completed, video playback position)
  • Discussion comments you post
  • Download history (product downloaded, timestamp, IP address)
  • Badges earned and timestamps

Technical Data. Our server may log your IP address, browser user agent, and request timestamps for security and operational purposes.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Process transactions and deliver purchased content
  • Track your course progress and resume your learning
  • Authenticate your identity and protect your account
  • Detect, prevent, and address fraud, abuse, and security incidents
  • Communicate with you regarding your account or purchases
  • Enforce our Terms of Service

We do not use your information for advertising, behavioral profiling, or sale to third parties.

3. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share limited information in the following circumstances:

  • Payment Processing. Your email address is shared with Stripe to create a customer record and process payments.
  • Public Profile. If you enable a public profile, your display name, biography, and badges are visible to other users. Your email address is never publicly displayed.
  • Discussion Comments. Comments you post on lessons are visible to other authenticated users who have access to that course, along with your display name.
  • Legal Compliance. We may disclose your information if required by law, subpoena, court order, or governmental regulation, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

4. Data Security

We implement industry-standard security measures to protect your personal information:

  • Encryption in Transit. All data transmitted between your browser and our servers is encrypted using TLS 1.3 with AES-256-GCM encryption via Cloudflare.
  • Password Security. Passwords are hashed using bcrypt with a work factor of 12. We cannot retrieve or view your password.
  • Authentication. Sessions are managed using JSON Web Tokens (JWT) with HMAC-SHA256 signatures, expiring after 7 days.
  • Access Controls. Content downloads and course materials require authenticated access with verified purchase records.
  • Rate Limiting. Authentication endpoints are rate-limited to prevent brute-force attacks, with automatic account lockout after repeated failed attempts.
  • Input Validation. All user input is validated and sanitized to prevent injection and cross-site scripting attacks.

While we employ commercially reasonable measures to protect your data, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing agreements). Anonymized or aggregated data that cannot identify you may be retained indefinitely.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access. You may request a copy of the personal data we hold about you.
  • Correction. You may update or correct your personal information through your account profile settings.
  • Deletion. You may request deletion of your account and associated personal data.
  • Data Portability. You may request an export of your data in a structured, machine-readable format.
  • Objection. You may object to our processing of your personal data in certain circumstances.

To exercise any of these rights, contact us at the email address provided below.

7. Cookies and Tracking

We do not use cookies for tracking or advertising. The Service stores a JSON Web Token in your browser's local storage to maintain your authenticated session. This token is used solely for authentication and is removed when you log out.

Cloudflare, our infrastructure provider, may set security cookies to protect against malicious traffic. These are strictly necessary cookies and are not used for tracking.

8. Third-Party Services

The Service integrates with the following third-party services:

  • Stripe, Inc. — Payment processing. Subject to Stripe's Privacy Policy.
  • Cloudflare, Inc. — Content delivery, DDoS protection, and TLS encryption. Subject to Cloudflare's Privacy Policy.
  • Google Fonts — Font delivery. Subject to Google's Privacy Policy.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information promptly.

10. International Data Transfers

Your information may be transferred to and processed on servers located in the United States. By using the Service, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the revised policy.

12. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

[email protected]

© 2026 Ringmast4r's Emporium. All rights reserved. | Privacy Policy | Terms of Service