Privacy
Last updated: 19 September 2026
This notice explains what data of yours we keep, why we keep it, and what you can demand about it. It’s written to be read, not to tick a box.
The short version: we keep your email, because that’s what gives you access to what you bought. We keep your planner, so you find it on your phone and on your laptop. We don’t sell or share any of it, and we delete all of it if you ask.
Who is responsible
- Name
- Marta Agata Jankowska
- hello@femmehack.com
What we keep, and why
| What | Why | Legal basis |
|---|---|---|
| Your email | It ties the purchase to a person, and it’s how you sign in. Without it there is no way to give you access. | Performance of the contract |
| The record of your purchase | To prove you bought it, and to meet tax and accounting obligations. | Contract and legal obligation |
| Your planner, favourites and shopping list | So you find them on any device with your account, not only the one you made them on. | Performance of the contract |
| Your email on the waiting list | To tell you when the book comes out. | Your consent |
We don’t collect your name unless you type it, we don’t ask for your date of birth, we use no advertising cookies, and there is no analytics service following you around the site.
We don’t have your card details. Payment happens on the Lemon Squeezy side and those details never pass through us.
Who else touches it
We don’t sell, rent or share your data with anyone for marketing. But there are services we use to make the site work, and they process data on our behalf:
| Service | What for | Where |
|---|---|---|
| Lemon Squeezy | Takes the payments and sends the marketing emails. It is the merchant of record, so it invoices you and handles the VAT. | United States (a Stripe company) |
| Supabase | Stores your account, the record of your purchase, your planner and the waiting list. | Ireland (European Union) |
| Resend | Sends the email with your sign-in code. | United States |
| Vercel | Hosts the website. | United States, with servers in Europe |
The database is in Ireland, inside the European Union. That’s where your email, the record of your purchase and your planner live — your data does not leave Europe to be stored.
The payment, email-sending and hosting services are United States companies, and to do their job they need to see your email address. Where data leaves the European Economic Area, that transfer relies on the legal mechanisms provided for it, in particular standard contractual clauses approved by the European Commission.
For how long
- Your account and planner: for as long as you have an account. Ask us to delete it and we delete it.
- The record of your purchase: as long as tax law requires — even if you delete your account. It’s the one thing we cannot delete on request, and the law is clear about that.
- Your email on the waiting list: until you unsubscribe, or until the launch happens and the list has no reason to exist.
Cookies
We use only what is needed to keep you signed in after you type your code. There are no advertising or analytics cookies, which is why there is no banner asking for your consent — there would be nothing to consent to.
Glow From Within also keeps things in your own browser (the planner, your favourites) so it runs quickly. Those stay on your device and sync up to your account.
What you can demand
About your data, you have the right to:
- Know what we hold, and get a copy of it
- Correct anything that is wrong
- Have it deleted, with the exception of the purchase record explained above
- Withdraw your consent for emails, at any time
- Object to the processing, or ask for it to be restricted
- Complain to the Portuguese data protection authority (CNPD) if you think we fall short
For any of these, write to hello@femmehack.com. We answer within a month, and usually much sooner.
To stop receiving the emails you don’t need to write to anyone: there is an unsubscribe link in every email we send.
About the purchase itself — price, refunds, complaints — read the terms and conditions.