Privacy

Short version: we hold your email address, the record of your purchase, which lessons you ticked off, where you came from, and server logs. Four usual cookies, no ad trackers. We count visits without cookies. Nothing is sold or rented to anyone.

Who is in charge of your information

One person is in charge of protecting personal information here. Québec’s private-sector privacy law requires every business to name that role and publish how to reach it.

Privacy officer: hello@fewerzeros.com. Canada.

Act respecting the protection of personal information in the private sector, s. 3.1, read 2026-09-19.
legisquebec.gouv.qc.ca

What we collect, and why

What we collect	Why we have it, and where it sits
Your email address	To sign you in and to send your receipt. In our database
Your purchase record: amount, currency, date, payment reference, and the billing address you give at checkout	Proof you bought, payment disputes, and tax records. The amount, currency, date and reference sit in our database. The billing address stays at Stripe and on your receipt
Lesson progress: the lessons you mark as done	So you can see where you stopped. In our database
Sign-in links	Kept only as a scrambled copy that cannot be turned back into the link. Valid 20 minutes, one use. In our database
Where you came from: the first page you opened here, the site that sent you (its address only, like google.com), and the page you bought from	To know which pages bring buyers. Kept in a cookie in your browser, then stored with your checkout and your purchase record in our database
Server logs: page, time, browser type, shortened IP address	Keeping the site up and blocking abuse. On our server

We collect it from you, at checkout and as you use the kit. We do not buy data about you from anyone.

The billing address is collected because Québec law puts your name and address on the receipt, and because tax rules depend on where you are. Nothing here is used to profile you.

What we never see

Your card number. Stripe processes the payment and handles the card. The number never reaches us.

What Stripe does with it is set out in its own privacy policy: stripe.com/privacy.

Cookies

Four usual cookies, none of them advertising. An optional fifth cookie remembers an analytics exclusion.

• nn_session — keeps you signed in for 30 days.
• nn_lang — remembers the language you picked.
• nn_first — records the date of your first visit. It used to set a launch price. The price is now the same for everyone, so it changes nothing you pay.
• nn_src — records the first page you opened here and the site that sent you (its address only). It is read when you check out and stored with your purchase.
• nn_analytics_off — keeps the owner and test browsers out of visitor counts for one year. It is only set for an excluded browser.

None of them follows you anywhere but here.

We count visits with Cloudflare Web Analytics. It sets no cookie and keeps nothing in your browser. Cloudflare says it “does not collect or use your visitors’ personal data”. It gives us totals: page views, visits, and which sites sent visitors. No pixels, no ad networks, no session recording, no heatmaps.

We use nothing that identifies, locates or profiles you. If we ever add something that does, it stays off until you switch it on, and this page will say exactly how. Québec law is strict here. Technology that can identify, locate or profile a person must be off by default, with a way to turn it on.

Act respecting the protection of personal information in the private sector, s. 8.1, read 2026-09-19.
legisquebec.gouv.qc.ca

Who else handles your information

• Stripe — payment processing and card data. Stripe is based in the United States.
• Purelymail — our email provider. It sends your sign-in links and your receipt.
• Cloudflare — counts visits (Cloudflare Web Analytics), without cookies. Cloudflare is based in the United States.
• Our host — runs the site and stores the database. The company is named on this line before the first card is charged.

Your information may be stored or processed outside Québec, including in the United States. The same law requires us to tell you that.

How long we keep it

Data	How long
Purchase and tax records	Six years from the end of the tax year they relate to, because that is the Canada Revenue Agency rule for business records. canada.ca, read 2026-09-19
Your email address and account	Until you ask us to delete it, except on the sale record above
Lesson progress	Until you ask us to delete it, or until your account goes
Sign-in links	The link dies after 20 minutes; the scrambled copy is deleted within 30 days
Where you came from	In your browser, the cookie lasts a year. With a purchase, it is kept as long as the purchase record. With a checkout that was not paid, 90 days
Server logs	90 days, then deleted

When something reaches the end of its line above, it is deleted, not archived.

Your rights

• See what we hold about you.
• Have it corrected.
• Withdraw a consent you gave.
• Ask us to delete your account and the information attached to it.

Email hello@fewerzeros.com. We answer in writing within 30 days. That is the limit Québec law sets.

Act respecting the protection of personal information in the private sector, s. 32, read 2026-09-19.
legisquebec.gouv.qc.ca

Deleting your account also ends your access to the kit. The record of the sale stays for the six years above, because tax law requires it. That record includes the email address you bought with, both here and at Stripe. Everything else attached to your account goes.

Email from us

Your receipt and your sign-in links are not marketing. You asked for them by buying and by signing in.

Buying does not add you to a newsletter.

We send no marketing email today. If that ever changes, this page says so first.

We do not sell, rent or trade your email address. There is no list swap and no affiliate feed.

How we handle information inside the business

One person handles personal information here. No employees. The only others who can reach it are the providers named above, each under its own contract and only to run the service.

Information is kept only for the periods in the table above, then destroyed. New tools are checked against this page before they touch any personal information. Complaints are handled by the same person, by email, within 30 days.

That paragraph is our governance policy, published as the law asks, s. 3.2 of the same Act.

Security

Sign-in uses a one-time link, so there is no password to steal from us. We never store the link itself, only a scrambled copy of it. The site runs over HTTPS.

No system is perfect. If a breach ever puts you at risk of serious harm, we will tell you. We will also report it as the law requires.

If you are unhappy

Email hello@fewerzeros.com first. The person in charge will answer.

If our answer does not satisfy you, complain to the Commission d’accès à l’information du Québec. It supervises private businesses under this law: cai.gouv.qc.ca, read 2026-09-19.

If you live in the UK or the EU, you may also complain to your own data protection regulator.

Language

This page exists in French, Spanish and Portuguese. French, Spanish and Portuguese also exist for the sales page, the terms, the sales terms page, the checkout, the sign-in screens and the two emails you get. The lessons and the files exist in all four languages too.

Changes to this page

If this page changes, the date at the top changes with it. We also publish a notice on the site.

This is not advice

This page describes the rules and links the official source. It is not legal advice.

For your own situation, talk to a lawyer where you live.