Privacy policy

When you buy something, we store:

• Your email address — this is how we send your download link
• Your first name, if you type one
• What you bought, what you paid, and when
• A Paystack transaction reference (never your card number)

When you browse, our advertising measurement also records your IP address, your browser’s user-agent string, and Meta’s advertising cookies (_fbp and _fbc) if they are present.

We never receive your card number, CVV, bank PIN or OTP. Those go directly to Paystack and never touch this site.

• To deliver what you paid for and prove you are entitled to it
• To email your receipt and download link, and re-send it if you ask
• To answer you when you email us about an order
• To measure which adverts lead to sales, so we do not waste money advertising to people who are not interested
• To keep records of what was sold, which we are required to do

This site uses the Meta Pixel and Meta’s Conversions API. Most sites mention this in one line; here is what actually happens.

When you view a product or buy something, we send an event to Meta (the company behind Facebook and Instagram) from your browser and from our server. That event includes your IP address, your browser user-agent, Meta’s own cookies, and — on purchase — your email address and name converted into an irreversible SHA-256 hash.

Hashing means we do not send Meta your email in readable form. It also means Meta can still match you to an existing account by hashing the address they already hold and comparing. That is the point of it, and you deserve to know that rather than be told it is anonymous.

We do this to see which adverts produce sales. If you would rather not be measured this way, an ad or tracker blocker will stop the browser side, and you can limit off-Facebook activity in your Meta account settings.

We keep the list short on purpose. Each of these only gets what it needs:

• Paystack — takes payment. Gets your email and the amount. Holds your card details; we never do.
• Neon — the database storing your order.
• Vercel — hosts the site and stores the product files.
• Resend — sends your receipt. Gets your email address and the message.
• Meta — advertising measurement, as described above.

We do not sell your data, and we do not hand your email to anyone for marketing. Some of these providers store data outside Nigeria, which is how using international services works.

Buying something does not sign you up to a mailing list. If we ever start one it will be opt-in, and leaving will take one click.

Order records are kept for six years, because tax and accounting rules require it. Download links expire after 30 days, though the record of the order remains.

Under the Nigeria Data Protection Act, you can ask us to show you what we hold about you, correct it if it is wrong, or delete it. Email support@ehrlichbright.com.ng and we will respond within 30 days.

One limit worth being honest about: we cannot delete the record of a sale we are legally required to keep, and we cannot reach into Meta’s systems to remove an event already sent. For that, use Meta’s own privacy tools in your account settings.

These guides are written for students and young adults. If you are under 18, please ask a parent or guardian before buying anything online.

If we change how any of this works, this page changes with it and the date at the top updates.