Privacy notice

This notice applies to the Sets & Steps website and storefront operated by Tusils LLC for adult educators and parents. Other Tusils LLC services may have separate notices. Purchases are limited to customers with a US billing address. Contact support@tusils.com for purchase or privacy assistance.

We use your topic selections, saved prices and tax amounts, checkout and purchase references, payment and refund status, approved file versions, browser access identifiers, hashed recovery credentials and paid-file delivery records to process purchases, provide downloads, restore access, handle support and refunds, prevent abuse and maintain transaction records. Purchase access uses your browser session or a private recovery key; this storefront does not provide student accounts or collect student grades.

The storefront sets an essential edge_session cookie lasting thirty days from issuance to maintain your cart and purchase access. Its value identifies a server-side session; it is not your card number or recovery key. Blocking or clearing it can interrupt your cart or access, which you can restore using your saved purchase ID and private recovery key. Session expiry does not delete purchase records. We also use short-lived request counters linked to protected identifiers derived from your IP address or browser access identity for abuse prevention.

Stripe Elements collects payment and billing details in Stripe payment fields. Our server receives payment-provider responses and uses the billing address to verify US eligibility and calculate applicable tax. These responses may include contact details. Stripe also processes payment, device and technical information and may use cookies or similar technologies for its services and fraud prevention under its own privacy and cookie policies. Our storefront does not add advertising trackers, and marketing-email consent is not a condition of purchase.

Our commerce database stores payment-method and payment references, billing country, state, city and postal code, protected address fingerprints, the original product and pricing versions, tax calculation references, jurisdiction rates and amounts, and payment and refund records. It does not store full card numbers, street-address lines or complete payment-provider responses. Full billing addresses are handled temporarily when validating payment details and requesting tax calculations. Stripe and support correspondence can hold information that is not saved in our commerce database.

Cloudflare Workers, D1 and private R2 provide hosting, purchase-record storage and private file delivery. Cloudflare processes technical information, including IP addresses and network request information, to deliver and secure the site. Authorized Tusils LLC administrators use the information needed to operate the store, support purchases and reconcile records. Stripe and Cloudflare process information according to their service terms and privacy notices. Providers may process information in the United States and other countries; we do not promise US-only processing or storage.

We retain order, refund, tax and purchase-entitlement records while the service operates and for at least seven years after the last completed payment, refund or chargeback affecting the relevant purchase, whichever period ends later. Page visits, downloads and ordinary support messages do not restart that transaction period. Unresolved disputes and applicable obligations can require longer retention. Checkout and tax-calculation records are kept with the related purchase records. Financial records are reviewed separately before deletion; routine session cleanup does not delete them. This is not a seven-year rule for every type of personal information.

Paid-file delivery records have a 365-day retention period. They record authorization to deliver a particular file and do not establish that the complete file was received or read. Removal of older delivery records does not establish that a file was never accessed. Bounded hourly maintenance removes expired browser sessions, expired abuse counters and delivery records older than 365 days; records can remain briefly while scheduled batches finish or a failed cleanup is corrected. Financial and entitlement records are excluded from that maintenance.

For recovery, the designated Tusils LLC operator makes protected database exports daily while sales are live and before schema changes or repair work. Ordinary exports are retained for thirty days, with a separate review for necessary transaction evidence or specific holds. Cloudflare D1 also keeps a rolling recovery history of up to seven days on the Workers Free plan. Database recovery copies can temporarily contain records removed from the active database. After restoration, applicable deletions and expiry decisions are reapplied before restored records are reused. A database export does not include the separately protected product files or Stripe records.

If you email support@tusils.com, Tusils LLC and its business email service receive your email address and the information you send. We use it to answer the inquiry and handle related follow-up. Ordinary Sets & Steps correspondence is normally deleted within twelve months after resolution through regular review. Information needed for an unresolved dispute, an applicable obligation or a transaction record may be kept longer for that purpose. Email providers may retain recovery copies under their own rules; restored correspondence is reviewed for deletion before reuse.

Contact support@tusils.com to request access, correction or deletion of information you have provided to Sets & Steps. We verify requests using information appropriate to the inquiry or purchase. Records needed to fulfill purchases, resolve disputes or meet applicable obligations may need to be retained. Do not send student names or grades, card details, identity documents, passwords or recovery keys. We cannot remove files already saved on your device.