← Back to Indentwise
Privacy Notice
Last updated: November 5, 2026. Applies to the hosted web product Indentwise: Python Course (Web), sold under the store name Steady Path Co. The course is served at https://learn.steadypathcompany.com (Cloudflare Workers). This notice applies to the product on that host.
Brand: Steady Path Co
Gumroad storefront: Clear Week Studios — https://clearweekstudios.gumroad.com. Indentwise is sold through the Clear Week Studios storefront on Gumroad, part of Steady Path Co. Receipts and card statements may show Gumroad or Clear Week Studios.
Supplier (content & license) / controller for this site: Andrew Micah Perry
Contact: info@steadypathcompany.com
Governing law / venue (Supplier terms): the State of Oklahoma, United States
Hosting: Cloudflare Workers (site) and Cloudflare Workers KV (activation / consent logs)
Payments / reseller: Gumroad, Inc. is the Merchant of Record and resells this product to you; it handles checkout, payment, receipts, and sales tax / VAT / GST. See the Gumroad Privacy Policy for data Gumroad collects as an independent controller.
EU / UK representative (GDPR Art. 27 / UK GDPR): No EU/UK Art. 27 representative is appointed at this time (CEO decision; revisit at LLC formation). Where Gumroad is Merchant of Record for a sale, Gumroad’s own EU/UK arrangements may apply to payment and tax data it controls.
1. What this notice covers
This notice describes how Andrew Micah Perry, trading as Steady Path Co (“we”, “us”), processes personal data in connection with the Indentwise web course at https://learn.steadypathcompany.com (Cloudflare Workers). This notice applies on that host.
It does not cover Gumroad’s own practices at checkout or on gumroad.com, which are governed by Gumroad’s privacy policy. Platform terms also apply where you buy through Gumroad. An Indentwise iOS app is not yet offered with this product; if one is published later, a separate privacy notice will apply.
Related documents on this host: Terms, License & Refund Policy · this page: /privacy.html (full URL: https://learn.steadypathcompany.com/privacy.html).
2. Data we collect
| Category | Examples | Source |
|---|---|---|
| Order & license data | Order / sale identifiers, product, price, refund / chargeback / dispute status. On our side, activation records store a hash of the license key and a hash of the buyer email where logged — not the raw key or raw email | Gumroad license API and order data shared with us as supplier |
| Activation & consent logs | Time of activation; hash of the license key; hash of a browser/device UUID; hashed IP address; terms version; EU/UK withdrawal-waiver consent record (time, key hash, consent text/version). Raw license key, raw email, raw device UUID, and raw IP are not retained in our activation logs. Hashes are peppered using our session secret (SESSION_SECRET) | This site when you activate (stored in Cloudflare Workers KV) |
| Session data | Essential HttpOnly session cookie that keeps premium content unlocked after activation | This site |
| Local-only data | Lesson progress and a local device id in your browser’s localStorage — stays on your device; we do not receive progress contents | Your browser |
| Server / security logs | IP address, user agent, request timestamps, errors (as processed by the host) | Cloudflare Workers / Cloudflare |
| Support communications | Emails and attachments you send to us | You (via Gmail / Google Workspace at info@steadypathcompany.com) |
Payment card data: we never receive or store full card numbers. Gumroad processes payments as Merchant of Record; we may see limited order info (for example country or refund status) that Gumroad provides.
Analytics: The Indentwise web course currently uses no third-party analytics or advertising trackers in our site code. Gumroad may run its own analytics on Gumroad pages under its policy. If we add analytics later, we will update this notice and, where required, ask for consent first.
3. Why we use it and legal bases (EU/UK GDPR, high level)
| Purpose | Legal basis |
|---|---|
| Deliver the course, issue/validate license keys, provide access | Contract |
| Record activation and the EU/UK digital-content withdrawal consent; handle refunds, chargebacks, fraud, and key-sharing | Legal obligation; legitimate interests (preventing fraud, proving consent) |
| Customer support and error reports | Contract; legitimate interests |
| Security, abuse prevention, keeping the service running | Legitimate interests |
| Tax / accounting records we keep as supplier | Legal obligation |
| Optional marketing email (only if you opt in) | Consent (withdraw anytime) |
We do not sell personal data, do not share it for cross-context behavioral advertising, and do not make automated decisions with legal or similarly significant effects.
4. Cookies and similar technologies
- Essential session cookie — keeps premium content unlocked after activation. Strictly necessary for the paid product to work; no consent banner is required for it in most jurisdictions.
- localStorage — stores progress and a local device identifier on your device only.
- No advertising or analytics cookies on this course site. Gumroad checkout and account pages set their own cookies under Gumroad’s policies.
5. Sharing
We share data only as needed with:
- Gumroad — Merchant of Record and reseller for Indentwise web (Clear Week Studios storefront at clearweekstudios.gumroad.com). Gumroad also issues the license keys we verify via its license API (order details such as buyer email, order number, and refund/dispute status). Independent controller for payments and tax.
- Cloudflare Workers — site hosting; Cloudflare Workers KV — activation and consent log storage (processor).
- Gmail (Google Workspace) — support email at info@steadypathcompany.com (processor).
- Professional advisers, authorities, or courts when legally required, and a successor in a sale or reorganization (with notice where appropriate).
6. International transfers
We and our providers may process data in the United States and other countries. Where EU/UK law applies, transfers rely on adequacy decisions (for example the EU-U.S. Data Privacy Framework where the provider is certified) or Standard Contractual Clauses / UK Addendum, as applicable to the provider.
7. Retention
| Data | Retention |
|---|---|
| Order, license, activation, and consent logs | Life of the license + 6 years (refund / dispute / tax evidence) |
| Server / security logs | 30–90 days (subject to Cloudflare’s defaults and our configuration) |
| Support emails | 24 months after the last message, unless needed for a dispute |
| Tax / accounting records | As required by law (Oklahoma — typically 6–7 years) |
| Marketing list (if any) | Until you unsubscribe |
Then deleted or anonymized where feasible.
8. Your rights
Depending on where you live (for example EU/UK GDPR, California CCPA/CPRA, or other U.S. state laws), you may request access, correction, deletion, portability, restriction, or objection, and withdraw consent. Email info@steadypathcompany.com; we aim to respond within 30 days (45 for some U.S. states) and may verify identity via your order email. We will not discriminate against you for exercising rights. Some data (for example records required for tax or to prove withdrawal-right consent) may be retained where law permits. You may complain to your local data protection authority. For data held by Gumroad, contact Gumroad as well.
Deleting your data may deactivate your license key, since we can no longer verify it.
9. Children
This product is not directed to children under 13 (or under 16 in the EU/UK, or the age of digital consent in your country). We do not knowingly collect their data; if we learn we have, we delete it. Contact info@steadypathcompany.com.
10. Security
We use HTTPS, access controls, and peppered hashes (SESSION_SECRET) for license key, email, device, and IP identifiers in our Cloudflare Workers KV activation store. Raw key, email, device UUID, and IP are not retained in those activation logs. We limit data to what we need. No system is perfectly secure; we will notify you and regulators of breaches as required by law.
11. EU / UK Art. 27 representative
No EU/UK Art. 27 representative is appointed at this time. Andrew Micah Perry (sole proprietor, Oklahoma, United States) remains the contact for privacy requests at info@steadypathcompany.com. This decision will be revisited when an LLC or other entity is formed. This statement does not change Gumroad’s role as Merchant of Record for Gumroad sales or Gumroad’s own compliance obligations for data it controls.
12. Changes
We may update this notice for new features or legal requirements. The “Last updated” date will change. Material changes will be posted here; where law requires, we will provide additional notice.
13. Contact
Store: Steady Path Co · Supplier: Andrew Micah Perry · info@steadypathcompany.com
Payments / Merchant of Record: Gumroad — see your receipt and the Gumroad Privacy Policy.
Product terms: Terms, License & Refund Policy · Privacy (this page): /privacy.html.