Privacy Policy

1. Who We Are

Noob Media LLC d/b/a CodeHawke ("CodeHawke," "we," "us," or "our") operates the codehawke.com website and platform. Our mailing address is PO Box 872, Great Falls, VA 22066, USA. This Privacy Policy explains how we collect, use, disclose, and protect information in connection with our services.

For EU/EEA users: CodeHawke is the data controller for information about platform users (sellers and learners). For buyer data collected through seller storefronts, the individual seller is the data controller and CodeHawke is the data processor. See Section 5.

2. What We Collect

We do not collect or store credit or debit card numbers. Card payments are handled by Stripe (for your CodeHawke subscription) and by the seller's own payment provider (for purchases from sellers).

3. How We Use It

• To provide the Platform: Create and manage your account, process your subscription, host your products, generate checkout sessions, and deliver files to buyers.
• To verify payments: Use your encrypted Stripe secret key server-side only to verify that a checkout session was completed before releasing access to a buyer.
• To send emails:Purchase confirmations to buyers, access link delivery, subscription receipts, and service notifications to sellers; and, on a seller's instruction, broadcasts and newsletters to that seller's buyers and subscribers.
• To protect sign-in forms: Use Google reCAPTCHA on registration, sign-in, and password-reset forms to tell people from automated abuse.
• To run AI features you use: Send your prompt and the account content needed to answer it to an AI provider, and return the result to you.
• To improve the Platform: Analyze aggregated usage patterns, diagnose errors, and develop new features.
• To enforce our Terms: Detect abuse, investigate fraud, and comply with legal obligations.
• To communicate with you: Respond to support inquiries and, if you have opted in, send product updates.

We do not use your data for advertising targeting or sell it to third-party data brokers.

4. Data Sharing

We share data only in these circumstances:

• Service providers (sub-processors): We use the providers below to run the Platform. They process data on our behalf under their own data processing terms:
  • Amazon Web Services (United States) - application servers.
  • Neon - PostgreSQL database hosting.
  • Vercel - website hosting and custom-domain certificates.
  • Cloudflare - file storage (R2) and DNS.
  • Bunny.net - hosted video streaming (Bunny Stream).
  • Resend - email delivery.
  • Stripe - billing for CodeHawke subscriptions and fees. Stripe's Privacy Policy governs its handling of payment data.
  • Google- reCAPTCHA v3 on registration, sign-in, and password-reset forms, and "Sign in with Google" if you choose it. reCAPTCHA sends Google hardware and software information, such as device and browser data, to check that a real person is using the form.
  • AI providers - OpenAI, Anthropic, or Google (Gemini), when you use AI features. If you connect your own AI provider key, requests go to that provider under your account and its terms.
• Payment providers and integrations you connect:When a seller connects Stripe, PayPal, or another supported payment provider, we pass the details needed to create checkouts and confirm payments on the seller's behalf. When a seller connects an integration (for example Discord, Slack, GitHub, Zoom, or their own email or storage provider), we send it the data needed for that integration to work, such as a buyer's email to grant access.
• Legal Requirements: We may disclose data when required by law, court order, or governmental authority, or to protect the rights, property, or safety of CodeHawke, its users, or the public.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

We do not sell, rent, or trade personally identifiable information to third parties for their marketing purposes.

5. Sellers & Buyer Data

If you are a Seller

When your buyers complete purchases through your storefront (or claim a free product), CodeHawke receives and stores their email address, name where provided, and order details in order to generate access tokens, deliver your product, and show you your orders and customers. You are the Data Controller for your buyers' personal data. CodeHawke is the Data Processor - we process that data only on your instruction to fulfill orders.

As the data controller, you are responsible for: maintaining a privacy policy on your storefront; obtaining any required buyer consents; and responding to data subject rights requests from your buyers (access, erasure, portability) under GDPR, CCPA, or other applicable law.

Buyer Data Ownership

Your buyers' card and payment details stay with your payment provider - CodeHawke never receives them. CodeHawke does store your buyers' email addresses, names where provided, and order records (what was bought, when, the amount, and access status), and your newsletter subscribers' email addresses, so it can deliver products and run your dashboard. Retention after you close your account is described in Section 9.

If you are a Buyer

If you purchased a digital product from a seller using CodeHawke, your purchase was made directly from that seller. Your relationship is with the seller, not with CodeHawke. For data requests related to your purchase (access to data, deletion of data), contact the seller directly. For platform-level data requests about your email and access token, contact support@codehawke.com.

6. Stripe & Payment Data

Stripe (and any other payment provider a seller connects) is an independent data controller for payment and cardholder data. When you (as a seller) connect your payment account to CodeHawke, you grant CodeHawke permission to create checkout sessions and retrieve session status on your behalf. We store your payment credentials encrypted at rest using AES-256-GCM and never expose it in the browser or in logs.

CodeHawke does not store full credit card numbers, CVV codes, or other payment instrument details at any point. All card data is handled exclusively by Stripe's PCI-DSS compliant infrastructure.

7. Email Open & Click Tracking

Newsletter issues sent through CodeHawke can measure whether they were opened and which links were clicked, so the seller can see how an issue performed:

• Opens:a 1x1 image loaded from codehawke.com records when an email is opened. It is on by default; the seller can turn it off for any issue with the "Track opens" setting. Readers can also block it by turning off automatic image loading in their email app.
• Clicks: links in newsletter issues pass through codehawke.com, which records the click and forwards the reader to the original link.
• Every newsletter includes an unsubscribe link. Unsubscribing stops further newsletters from that seller.

Open and click records are linked to the recipient's email address and are visible to the seller who sent the email.

8. Cookies & Tracking

We use these cookies and similar technologies:

We do not use third-party advertising cookies, cross-site tracking pixels, or behavioral advertising networks. We do not use Google Analytics or similar third-party analytics services. Basic server-side access logging is used for security and abuse detection.

You can disable cookies in your browser settings, but doing so will prevent you from logging in to the dashboard.

9. Data Retention

10. Security

We implement appropriate technical and organizational measures to protect your data, including:

• AES-256-GCM encryption for sensitive credentials (payment credentials) at rest.
• TLS encryption for all data in transit.
• JWT-based authentication with short-lived tokens.
• Role-based access controls limiting which systems and personnel can access production data.

No method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your personal data, we will notify you as required by applicable law.

11. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

To exercise any of these rights, contact us at support@codehawke.com. We will respond within 30 days. EU/EEA residents may also lodge a complaint with their local data protection authority.

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act: the right to know what categories of personal information we collect and how we use them; the right to opt out of the "sale" of personal information (we do not sell personal information); and the right to non-discrimination for exercising CCPA rights. To make a verifiable consumer request, email support@codehawke.com with "CCPA Request" in the subject line.

12. Children

The Platform is not directed to children under 13. We do not knowingly collect personal information from anyone under 13 years of age. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly. If you believe a child has provided us with personal data, contact support@codehawke.com.

13. Policy Changes

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on the Platform at least 14 days before the change takes effect. The "Effective Date" at the top of this page indicates when it was last revised. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.

14. Contact