Seller Tales

Seller Tales / Privacy

Privacy Policy

Effective date: [launch date]

This policy is written in plain language on purpose. It lists exactly what sellertales.com collects, what it does not collect, and the choices you have. The short version: we collect three things — contact form messages, optional email subscriptions, and consent-based aggregate analytics — and nothing else. If anything below is unclear, email us at privacy@sellertales.com.

1. Scope

This policy covers sellertales.com, operated by JoyCraft ("we", "us"). JoyCraft builds two products: CourseSpeed, a Chrome extension for online-course playback speed and notes, and CostPilot Pro, a Shopify app for storefront audits — it scans which known app scripts load on your store and checks your connection health.

The same practices described here apply to joycraft.dev, our product site, which publishes the same policy with its own domain-specific details. Where this document says "the site", it means sellertales.com; the data practices — and the limits on them — are identical on both sites.

2. What we collect

We collect three things, and only these three. Each is tied to a specific action you take.

2.1 Contact form submissions — yes, we collect this

  • Data: your name, your email address, and the content of your message.
  • Purpose: to read your message and reply to you. We do not add contact-form details to any mailing list.
  • Legal basis: consent. Submitting the form is a clear affirmative act; the form states this purpose next to the submit button.
  • Retention: deleted within 12 months after your request is resolved (see section 6).

2.2 Email subscription — yes, we collect this (optional)

  • Data: your email address. Nothing else.
  • Purpose: to send you the updates you signed up for — new articles on sellertales.com, or product updates on joycraft.dev, depending on where you subscribed.
  • Legal basis: consent, confirmed through double opt-in: after signing up you receive a confirmation email, and the subscription starts only when you click the confirmation link.
  • Retention: until you unsubscribe. Every email contains a one-click unsubscribe link, and unsubscribing removes your address (see section 6).

2.3 Privacy-friendly analytics (Google Analytics) — yes, we collect this, only after you consent

  • Data: aggregate visit counts — pages viewed, referrer, country-level region, browser and device type, derived from standard Google Analytics 4 processing of IP address and user-agent. Google Analytics 4 uses its own cookies to distinguish unique visitors; we do not enable Google's advertising features, so no remarketing or cross-site tracking is attached to this data.
  • Purpose: to understand which pages help people so we can improve the site.
  • Legal basis: consent. The analytics script loads only after you choose "Accept" in the consent prompt. Choosing "Decline" changes nothing about your visit.
  • Retention: Google retains processed analytics data in aggregate for its standard retention period; there is no personal profile we can access or export.

3. What we do NOT collect

This list is deliberate and complete for our current setup:

  • No card or payment information. We do not collect, store, or see card numbers, billing addresses, or checkout data. Paid plans are billed entirely on the platform side: CostPilot Pro subscriptions through Shopify App Billing, CourseSpeed Pro purchases through the Chrome Web Store. Those platforms process payment data under their own privacy policies.
  • No third-party advertising pixels, no cross-site tracking identifiers, no behavioral fingerprinting, no precise geographic location, and no sensitive-category data (such as health, religious beliefs, or political opinions). We run no ad tech and no remarketing on this site.
  • No user-level cross-site linking. JoyCraft operates two sites (joycraft.dev and sellertales.com). We keep the funnel between them in aggregate only — via aggregated UTM parameters and referrer counts. We do not enable Google Analytics cross-domain or advertising features, and we never use visitor identifiers to merge the two sites' data at the level of an individual person.

One boundary worth spelling out: this policy covers what our websites collect. The products themselves run inside the environments of their platforms: CourseSpeed is a Chrome extension that runs in your browser on the course platforms you use, and CostPilot Pro connects to your store's products and theme through the Shopify Admin with read-only access. Neither product is used to build a cross-site profile of you, and neither feeds data into an account or profile we maintain on these sites.

4. Cookies & consent

  • This site sets no marketing or advertising cookies.
  • Analytics (Google Analytics) is loaded only after you consent via the on-page consent prompt; its cookies are used solely to distinguish returning visitors for aggregate counting.
  • In the prompt, "Decline" is presented with the same prominence as "Accept"; declining simply means no analytics script loads.
  • You can change or withdraw your choice at any time: click "Analytics consent" in the site footer to reopen the consent panel. Withdrawing consent stops analytics from loading on subsequent page views.
  • Your browser stores your choice with a timestamp so we can honor it on return visits.

5. Third parties

We use a deliberately short list of processors:

  • Google Analytics — aggregate web analytics (Google LLC / Alphabet Inc.). We use standard analytics without advertising features. Google acts as a data processor under its Data Processing Addendum; see Google's privacy policy (policies.google.com) for its processing terms.
  • Contact-form processing service — handles the contact form on this static site.
  • Email delivery service — sends the double-opt-in confirmation and subscription emails.

6. Data retention

  • Contact messages: deleted within 12 months after your request has been handled.
  • Subscription email addresses: deleted promptly when you unsubscribe — either through the one-click link in any email or by emailing us.
  • Analytics: no personal data enters our analytics pipeline, so there is no personal record to delete.

7. Your rights

Under the GDPR (and equivalent laws such as the UK GDPR), you have the right to:

  • Access the personal data we hold about you;
  • Rectify inaccurate data;
  • Erase your data;
  • Receive your data in a portable format (data portability);
  • Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
  • Lodge a complaint with your local data-protection supervisory authority.

Under the CCPA/CPRA (California), you have the right to know what personal information we collect, to request deletion, and to not be discriminated against for exercising your rights. To be direct: we do not sell personal information, and we have not sold it — so there is no "Do Not Sell or Share" link to offer, and none is needed.

To exercise any right, email privacy@sellertales.com with your request. We will respond within the timeframe the applicable law requires, typically within one month.

8. Children

Our sites and products are intended for a general audience and are not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has submitted personal data to us, contact us and we will delete it.

9. International transfers

Your data may be processed in countries other than the one you are located in, including where our processors operate. Where required by law, such transfers rely on standard contractual clauses (SCCs) or another adequate transfer mechanism.

10. Security

We apply reasonable technical and organizational measures to protect the limited data we hold: encrypted connections (HTTPS) across both sites, access restricted to the people who need it, and processors chosen with security and data minimization in mind. We also maintain a written data-breach response process: detect a suspected breach, assess it, and notify the relevant supervisory authority and the affected users where applicable law requires it, within the deadlines that law sets. That said, no method of transmission or storage can be promised to be completely secure; we commit to reasonable care, not to absolutes.

11. Changes

When we update this policy, we will revise the effective date at the top and post a clear notice on the site so the change is visible before it takes effect. Material changes will be highlighted prominently rather than made silently.

12. Contact

For any privacy question, request, or complaint:

Email: privacy@sellertales.com

We would rather answer your question than leave you guessing about any of this.

Back to home