Privacy Policy
Last updated: 2 October 2026
Who we are
This site is run by Mohamed Toufik Djouabi, Bouira, Algeria (“we”, “us”). We are the controller of the personal data described on this page, which means we decide why and how it is used. You can reach us at olfasupport@gmail.com.
This page explains exactly what we keep about you. It is a short list, because we collect very little.
What we store
For every pack you buy or claim for free, we store one record containing:
- your email address;
- which pack it is for;
- a random token that forms your private download link;
- the date and time the record was created.
That is the whole record. We do not store your name, your address, your child’s name, or anything about your child. There are no accounts and no passwords on this site, so there is nothing of that kind to store.
Technical data
Like any website, the services that run this one keep standard technical logs, such as IP address, browser type and the time of each request. They are used to keep the site secure and working. We do not use them to identify or profile you.
What we never see
We never see or store your card details. Payments go to Paddle, which acts as Merchant of Record: for buyers in the United States that is Paddle.com Inc., and for everyone else it is Paddle.com Market Limited. Paddle handles your card data and tax under its own privacy policy, and is separately responsible for that data. Paddle tells us that an order succeeded and gives us the email address attached to it. We keep only the record described above.
Why we use it, and on what basis
- To deliver your pack and keep your link working. This is needed to fulfil your order, whether you paid or claimed the free pack.
- To answer you when you contact us. We have a legitimate interest in replying to the people who write to us.
- To keep the site secure and working. This is the purpose of the technical logs, and it is our legitimate interest.
- To meet legal obligations, if any apply to us.
- To send you anything beyond your download link. Only with your consent. See “Marketing email” below.
We do not build profiles, we do not run advertising, and we do not sell or share your email address with anyone.
Who processes it for us
- Paddle — payment processing and tax, as Merchant of Record.
- Supabase — the database holding the order records, and the private storage holding the PDF files.
- Resend — sending the one email that carries your download link.
- Vercel — hosting the site.
These providers handle data for us under their own terms, and they may process it outside the country where you live, including in the United States and the European Union. Where the law requires it, we rely on the safeguards those providers offer for international transfers.
We may also disclose information to authorities or to our professional advisers where the law requires it, or to protect our legal rights.
Marketing email
We use your address to deliver what you asked for. If we ever want to send you anything else, we will ask first, and any such email will carry an unsubscribe link.
How long we keep it
Your record is kept for as long as your download link is meant to keep working, which is indefinitely — that is the point of a link that never expires. If we ever close the shop, we will email you first so you can save your files, and then delete the records.
Ask us to delete your record sooner and we will, but your link stops working at that moment. Paddle keeps its own order and tax records under its own policy, and we cannot delete those.
Security
Your PDF files are kept in private storage, not in a public folder. Each download link contains a long random token that is hard to guess, but anyone who has the link can download the files, so keep it to yourself the way you would a password. We take reasonable steps to protect the data we hold, but no system is perfectly secure.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Depending on where you live, you may also have the right to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent where we rely on it.
Email olfasupport@gmail.com from the address you used, and we will act on it within 30 days.
If you are unhappy with how we have handled your data, you can complain to the data protection authority in the country where you live.
Children
These packs are made for children, but the shop is for adults. We do not knowingly collect anything from a child. The only person who ever gives us an email address is the adult buying or claiming a pack. If you believe a child has given us an email address, tell us and we will delete it.
Cookies
This site sets no advertising or analytics cookies. Paddle’s checkout may set what it needs to process your payment securely; that is covered by Paddle’s own policy.
Changes to this policy
If we change this page, we will update the date at the top. If the change is significant, we will say so on the site.
Contact
Mohamed Toufik Djouabi, Bouira, Algeria