Privacy Policy

Cosmic Code LLC (“we,” “us,” or “our”) operates Hatim's Library at https://hatim.us. This Privacy Policy explains what information we collect, how we use it, and what rights you have over it.

1. Information We Collect

Information you provide

• Email address — when you subscribe or contact us.
• Name — if you provide it during checkout or in correspondence.
• Payment information — processed by Stripe. We do not store full payment card numbers on our servers.

Information collected automatically

• IP address and browser user-agent for security and abuse prevention.
• Session cookies to keep you signed in to the members area.
• Basic request logs (URL, timestamp) retained for operational debugging.

We do not use third-party analytics, advertising trackers, or fingerprinting tools.

2. How We Use Information

• Provide, maintain, and improve the Service.
• Process payments and send transactional emails (receipts, access links, renewal notices).
• Respond to support requests and communications.
• Prevent fraud, abuse, and unauthorized access.
• Comply with legal obligations.

3. Third-Party Processors

We share information only with processors that help us operate the Service:

• Stripe, Inc. — payment processing. Governed by Stripe's privacy policy.
• Cloudflare, Inc. — DNS, TLS, and edge delivery. Governed by Cloudflare's privacy policy.
• Transactional email provider — delivers receipts, magic links, and renewal reminders.

We do not sell, rent, or trade your personal information.

4. Cookies

We use only essential cookies:

• hl_session — a signed token that grants access to the members area after you click a magic link. Expires after 30 days.

We do not use advertising or analytics cookies. You may clear cookies at any time through your browser.

5. Data Retention

We retain account information (email, subscription status) for as long as your subscription is active and for a reasonable period afterward for financial records and legal compliance. Request logs are retained for no more than 90 days.

6. Your Rights

Depending on where you are located, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your information, subject to legal retention obligations;
• Object to or restrict certain processing;
• Data portability;
• Withdraw consent where processing is based on consent.

California residents have additional rights under the CCPA, including the right to opt-out of “sales” of personal information (we do not sell personal information). To exercise any right, email us at [email protected].

7. Security

We apply reasonable administrative, technical, and physical safeguards, including TLS for data in transit, access controls for internal systems, and secure payment handling through Stripe. No system is perfectly secure; if we learn of a security incident affecting your information, we will notify you as required by law.

8. Children

The Service is not directed to children under 13 (or 16 in some jurisdictions), and we do not knowingly collect personal information from them.

9. International Transfers

We operate in the United States. If you access the Service from another region, your information will be transferred to, stored, and processed in the United States.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email. The “Last updated” date at the top of this page indicates the most recent revision.

11. Contact

For privacy questions or to exercise your rights, email [email protected].