1. Who is responsible for this site
PolishMaster operates this website from Turkey. For privacy questions or requests, email support@polishmaster.co.
2. Information handled through the site
Analytics choice
The site stores your analytics choice in your browser's local storage under pm_consent. This lets the site remember whether you selected Accept or Decline.
A/B layout cookie
The site assigns you to layout variant A or B at random and stores the assignment in the pm_ab cookie for 90 days. This keeps the layout consistent across visits. The cookie contains only the letter a or b.
Layout comparison measurement
To measure how layout A and layout B perform, the site sends a small, anonymous signal when a page loads and when you select a Formula purchase button, recording only which layout was shown and, for a button selection, which button it was. This signal sets no cookie and includes no persistent identifier: each one is generated independently, so it cannot be linked to your other visits or to you personally. Because it carries no identifier, this signal is not gated behind the analytics choice below the way Google Analytics and Vercel Web Analytics' general visitor tracking are; it runs for every visit so the layout comparison reflects real traffic, including from browsers that never reach the choice below. It is processed by Vercel, the same company that hosts this website, through the Vercel Web Analytics service already described in this policy.
Google Analytics
If you select Accept, Google Analytics loads and processes measurement data about use of the site, such as viewed pages, interactions, browser or device information, and network-derived approximate location. PolishMaster uses this information in aggregate to understand site use. Google Analytics does not load when you select Decline.
Vercel Web Analytics
If you select Accept, Vercel Web Analytics additionally loads in your browser and processes general page-view and interaction data to help PolishMaster understand site use. It does not load when you select Decline. This general tracking is separate from the layout comparison signal described above, which runs regardless of your choice for the reason explained there.
Contact messages
If you email PolishMaster, the message contains your email address and any text, files, or other information you choose to send. That information is used to answer the message and provide relevant support.
Purchases and payment data
The Formula is purchased through Gumroad. Gumroad handles checkout, payment processing, receipts, and license keys under its own terms and privacy practices. Where a purchase is made through the PolishMaster collection on Patreon, Patreon handles checkout, payment processing, and receipts for that purchase under its own terms and privacy practices. In either case PolishMaster does not store full payment-card numbers.
Student Portal account and course access
The course is delivered through the PolishMaster Student Portal at app.polishmaster.co. You sign in with an email link or a Google account, and the portal keeps your account email address and a sign-in session. To confirm a Formula purchase, the portal checks the purchase with Gumroad using your sign-in email address or, if you link the purchase manually, the license key you enter. The portal stores a course-access record containing a reference to the Gumroad sale, the license key when one was used for linking, and the dates the access was granted and last re-checked.
A purchase made through the PolishMaster collection on Patreon is delivered within Patreon. That purchase does not require a Student Portal account, and where none is created, no Student Portal account, course-access, or lesson-progress record is held for it. Patreon’s own privacy practices apply to the account and purchase data it holds.
Lesson progress
When you mark a lesson complete in the Student Portal, the portal stores which lesson was completed and when, so your progress is shown the next time you sign in. It also stores the furthest lesson you have opened, and when you were shown or closed its prompt to share a result.
Course questions and phase feedback
The portal asks a few optional multiple-choice questions: where you first heard of PolishMaster, what you plan to polish, what you would like to learn next, and which course PolishMaster should build next. If you close the question about where you heard of PolishMaster without answering, that is recorded as well, so it is asked at most twice. For each phase, you can also say whether it worked, partly worked, or did not work, and add a note of up to 280 characters when it did not fully work. Each answer is stored with your account, the portal language, and the time, and a changed answer replaces the earlier one.
Course file downloads
When you download a course file, or a ZIP of a set of files, the portal records your account, which file or set it was, and the time. Viewing a 3D preview is not recorded.
Result submissions
Once you reach the later phases of the course, you can share your result. The form stores your answers to two multiple-choice questions about your finished surface, an optional comment of up to 300 characters, and up to two optional photos: one of the finished piece and one from before. If you add a photo, you confirm that it is yours, and that confirmation is stored. Photos are kept in private storage that is not publicly accessible. The submission also records how many lessons you had completed, the portal language, and when it was sent and last changed.
A separate checkbox, not ticked by default, asks for permission to feature your response and photos on PolishMaster's website, social media, and advertising using your first name and last initial. If you tick it, the portal records your permission, the version of the wording you agreed to, and when you agreed. The first name and last initial are taken from the name on your Google account when you sign in with Google, never from your email address; when no name is available, none is stored. This name is stored with every submission, but your result is featured publicly only if you have given permission. You can withdraw permission by unticking the box and saving the form again; a result that had been approved for use then returns to private.
Refund requests and help messages
The refund page in the Student Portal can be used with or without signing in. Each visit is recorded from the moment the page opens: which link led there, the portal language, and, if you are signed in, your account and whether your purchase is past the refund window. As you continue, the portal records the reason you choose, the help offered in response, whether you asked for that help or continued to the request, and when each step happened. If you send a help message, it stores the email address you enter, any phase and filament you select, and an optional note of up to 280 characters. If you send a refund request, it stores your purchase email address, an optional order reference, and an optional note of up to 280 characters. If you are not signed in, the portal uses the email address you enter to look for a matching Student Portal account, so that PolishMaster can see that account's lesson progress and answers when handling your message.
FAQ question box
The FAQ on the landing page has an optional question box answered by an AI assistant, not a person. When you send a question, the text you typed and the language of the page are sent to PolishMaster's server. Questions about refunds, selling your prints, account sharing, price, results, and what the Formula includes are answered with this site's own fixed text. Other questions are sent to Anthropic, whose AI model only sorts them by topic; the answer you see is always one of this site’s fixed texts. Your IP address is not sent to Anthropic. To limit abuse and cost, the server counts questions per network address and keeps that address only as a one-way hash. Each question is logged with how it was answered, without your IP address. Please do not type personal information into the box.
Error monitoring
The Student Portal reports software errors to Sentry, from your browser and from the portal's servers. A report contains technical details such as the error message and where in the code it occurred, the page address, the technical events leading up to it, your browser and device type, and, if you are signed in, your account ID. The portal attaches your account ID to a report, not your email address, and removes cookies, sign-in tokens, license keys, and the content of requests before it is sent. The portal does not use Sentry's session replay or performance tracing.
Course protection and account security
Each time you open a lesson video, the portal records your account, the lesson, the time, your IP address, the approximate country derived from it, and your browser's user-agent, which identifies the browser and device type. The portal also records when the three-device limit described in the Terms of Use signs one of your devices out, and the sign-in service keeps the IP address and browser of each active sign-in. While a video plays, your account email address and account ID are shown over it. The portal also records when you acknowledge its one-time course-access notice.
These records are checked automatically once a day for patterns that suggest a shared or automated account, such as access from several networks or countries in a short time. A flagged account is reviewed by PolishMaster before any action is taken. Administrator actions on an account, such as signing it out of all devices, suspending it, or restoring it, are logged with the account ID and email address.
3. Why the information is used
Contact information is used to respond to questions, corrections, and product-support requests. Google Analytics and Vercel Web Analytics' general visitor tracking are used only after consent to understand how visitors use the site and where the site can be improved. The consent choice is stored so the site can respect the decision you made. Student Portal account, purchase-verification, and lesson-progress information is used to confirm that a valid Formula purchase exists, deliver the course to the right account, and show your progress.
Course-protection records are used to keep each purchase tied to one person, detect account sharing and unauthorized copying, identify the source of a leaked recording, and establish, exercise, or defend legal claims. This processing relies on PolishMaster's legitimate interest in protecting its course and on the contract with you, not on consent. You can object to it as described in Section 7; where there are compelling grounds, such as investigating an actual leak, the processing may continue.
Answers to the course questions, phase feedback, and download records are used to understand who takes the course, which phases need improving, whether the course files are used, and what to build next. Some are shown back to students only as grouped figures that identify no one, such as the share of students who gave the same answer or the phases students most often find difficult. This relies on PolishMaster's legitimate interest in improving the course.
Result submissions are used to see whether the course works for the students who take it, on the basis of the same legitimate interest. Featuring a result publicly relies only on your consent, which you can withdraw as described in Section 2.
Refund requests and help messages are used to handle them and reply to you, which is necessary under the contract with you. The reasons given and the responses to the help offered are also used to understand why refunds are requested, on the basis of PolishMaster's legitimate interest in improving the course.
Questions sent through the FAQ question box are used to answer them, to check that the answers stay accurate, and to prevent abuse and excessive cost, on the basis of PolishMaster's legitimate interest in answering visitors' questions and keeping the site secure.
Error reports are used to find and fix faults in the Student Portal, on the basis of PolishMaster's legitimate interest in keeping it working and secure.
The A/B layout assignment is used to keep your assigned layout consistent. Together with the anonymous layout comparison signal described in Section 2, it is used to compare the performance of the two layouts, on the basis of PolishMaster's legitimate interest in knowing which one serves visitors better. Neither is used to identify you.
4. Services operated by other companies
Gumroad provides checkout, payment processing, receipts, and license keys. The Student Portal also queries Gumroad to verify a purchase using the checkout email address or a license key. See Gumroad's Privacy Policy.
Patreon provides checkout, payment processing, receipts, and delivery for a Formula purchase made through the PolishMaster collection on Patreon, and holds the account and purchase data associated with it. See Patreon's Privacy Policy.
Supabase provides the Student Portal's sign-in service and database, where the account email, sign-in sessions, course-access record, lesson progress, answers and phase feedback, download records, result submissions and their photos, refund-page records, and course-protection records are stored. See Supabase's Privacy Policy.
Google provides the optional Google sign-in for the Student Portal, and Google Analytics provides optional site measurement after consent. Google processes this data under its own privacy terms. See Google's Privacy Policy.
Bunny.net streams the course videos through signed links that expire shortly after they are issued, serves the downloadable course files inside the Student Portal, and processes the network requests needed to deliver them. See Bunny's Privacy Policy.
Vercel hosts this website and the Student Portal, processes the network requests needed to serve their pages, and provides the approximate country of a request used in the course-protection records. See Vercel's Privacy Policy.
Resend delivers PolishMaster's internal email notifications about Student Portal activity, including the daily account-activity summary described in Section 2, in which accounts are identified by a shortened account ID. When a student reports that a phase did not fully work, first shares a result, or sends a refund request or help message, Resend delivers an email to PolishMaster with that information and the student's other stored answers, feedback, lesson progress, and number of downloads. Result photos are attached to that email. These emails identify the account by a shortened account ID, except refund requests and help messages, which include the email address entered so PolishMaster can reply. Resend also delivers the short note sent to the purchase email address after a full refund has ended course access. See Resend's Privacy Policy.
Anthropic provides the AI model behind the FAQ question box. It receives the text of questions that are not answered with fixed text, but not your IP address, and processes them under its commercial terms, which do not allow Anthropic to train its models on them. See Anthropic's Privacy Policy.
Sentry receives the Student Portal's error reports described in Section 2, in its EU data region. See Sentry's Privacy Policy.
With consent, Vercel also provides general Web Analytics as described above. Vercel additionally processes the anonymous layout comparison signal described in Section 2, which runs without consent because it carries no cookie or persistent identifier.
Links to Instagram, TikTok, Patreon, and other external sites take you to services controlled by those providers. Their privacy practices apply when you use them.
5. Retention
Contact messages are kept only for as long as needed to respond, provide support, maintain appropriate correspondence records, or meet applicable obligations. The analytics choice remains in local storage until you clear it or reopen the choice using the button below. Student Portal account, course-access, and lesson-progress records are kept to provide course access to the associated account. Records of lesson videos opened and of devices signed out by the three-device limit are deleted 180 days after they are created, or earlier if the account is deleted. Records of administrator actions are kept for two years, including after the account is deleted. The acknowledgment of the course-access notice is kept while the account exists. Answers to the course questions, phase feedback, download records, and result submissions are kept while the account exists and deleted if the account is deleted. A result photo is deleted from storage when you replace or remove it and save the form; otherwise it is kept until you ask for it to be deleted. Refund-page records are kept as a record of the request and the reasons given; if the account is deleted, the link to it is removed and the rest of the record is kept. Gumroad, Patreon, Supabase, Google, Bunny.net, Vercel, Resend, and Sentry determine retention for information they process under their own policies.
Question-box logs are deleted after 30 days. The hashed network addresses used to limit questions are deleted after two days. Anthropic determines retention for the questions it processes under its own policies.
The pm_ab cookie expires 90 days after it is set. You can remove it sooner by clearing cookies for this site; the site may then assign a new variant on your next visit. The layout comparison signal itself is not linked to any stored identifier, so there is nothing tied to you individually to retain or delete.
6. International processing
PolishMaster is operated from Turkey and the site is available globally. Gumroad, Patreon, Supabase, Google, Bunny.net, Vercel, Resend, and Sentry may process information in countries other than your own. Their published privacy terms describe their processing locations and safeguards.
Questions sent to Anthropic through the FAQ question box may be processed in the United States and other countries.
7. Your privacy rights
Depending on where you live and the law that applies, including the GDPR in the European Economic Area and the KVKK in Turkey, you may have rights to ask about personal data, request access or correction, request deletion, object to or restrict certain processing, and withdraw consent. These rights can be subject to legal conditions and exceptions.
Send a request to support@polishmaster.co and describe the information or request clearly. You may also have the right to contact the competent data-protection authority where you live.
8. Changes to this policy
This page will be updated when the site's data practices change. The date at the top identifies the current version.