We collect the bare minimum needed to run the Vault. No selling data, no ad networks, no third-party trackers stuffed in for the sake of it. This page lists exactly what we collect, why, and how to get rid of it if you want to.
Who's the data controller
Aussies In, operated by Lucas Black in Australia. Contact for any privacy question or request: hello@aussiesin.com.
What we collect
When you sign up or buy something
- Email + name — to log you in and send transactional emails (receipts, renewal reminders).
- Payment details — handled entirely by Stripe; we only see the last 4 digits of your card and the country of the issuing bank.
- Shipping address — only if you buy Aussies In Pro, which ships the physical Book of Legends to you.
When you use the site
- Pages you view and basic interactions — captured via PostHog so we can measure which guides convert and where people get stuck. PostHog respects Do-Not-Track and we don't enable session replay.
- Pageviews + Core Web Vitals — captured via Vercel Analytics (cookieless, aggregated only).
- Referral code in a cookie — if someone shares a Vault link with
?r=CODE, we store that code in anai_refcookie for 60 days so we can attribute the referral on purchase. - IP address and user-agent — logged briefly by hosting (Vercel) for security and abuse prevention.
What we use it for
- Running your account and giving you access to what you bought
- Sending transactional emails (receipts, renewal reminders, refunds)
- Sending lifecycle emails — welcome, abandoned checkout, the "your code is live" referral nudge, the occasional new-guide drop. You can unsubscribe from any of these in one click.
- Measuring conversion + improving the guides + tools
- Compliance with tax and accounting law
What we never do: sell your data, share it with advertising networks, or use it for targeted ads.
Who we share it with
These are the third parties that touch your data when you use the Vault:
- Stripe — payment processing. Stripe's privacy policy.
- Clerk — authentication and account management. Clerk's privacy policy.
- Supabase — database (users, orders, entitlements). Supabase's privacy policy.
- Vercel — hosting + analytics. Vercel's privacy policy.
- Resend — sending transactional + lifecycle emails. Resend's privacy policy.
- PostHog — product analytics (US Cloud). PostHog's privacy policy.
Cookies
We set a small number of first-party cookies:
- Clerk session — keeps you signed in.
ai_ref— the 60-day referral cookie described above.- PostHog — anonymous device + session identifier for analytics.
How long we keep it
- Account data — for as long as your account exists, plus 7 years for tax records.
- Order + invoice data — 7 years (Australian tax record-keeping requirement).
- Analytics data — 12 months at user-level, then aggregated.
- Email lifecycle log — kept indefinitely (it's the idempotency record that stops us emailing you twice).
Your rights
Under the Australian Privacy Principles (and GDPR if you're in the EU), you can:
- Ask what we hold on you
- Ask us to correct anything wrong
- Ask us to delete your account and personal data (subject to the tax-record retention above)
- Object to processing
- Export a copy of your data
Email hello@aussiesin.com with the request. We respond within 30 days, usually faster.
Children
The Vault isn't aimed at people under 18. If you believe a minor has created an account, email us and we'll close it.
International transfers
Some of our processors (Stripe, Clerk, Vercel, PostHog) store data in the US. They all have standard contractual clauses or equivalent safeguards in place.
Changes
Material changes to this policy get an email to active users. The "Last updated" date at the top of this page is the source of truth.
Complaints
Not happy with how we've handled your data? Email us first — we'd rather fix it directly. If we can't resolve it, you can complain to the Office of the Australian Information Commissioner (OAIC).