Privacy policy
What we collect, why we collect it, and how to get it removed.
Falcon Aerospace runs this site and the course, and is the data controller for the information described here. This page explains what personal data is handled, why, and what you can ask to have done with it. Contact: falcon.aerospace2026@gmail.com.
What we collect
When you buy
Your email address, your name if you give one, and the country and tax details Paddle needs to process the sale. We never receive your card number. Card data goes to Paddle and its payment processors, not to us.
When you watch
Bunny Stream records technical playback data such as IP address, approximate location, browser and device type, and which lessons were played and for how long. We use it to check the videos are working and to spot accounts being shared.
When you log in
Your email address, the one-time login codes we send you (stored only in a scrambled form that cannot be read back), and for your signed-in session the time you logged in, when it was last used and your browser type. We use this to keep your account secure and to limit how many devices can watch at a time.
When you write to us
Your email address and whatever is in your message, kept so we can answer and refer back to it later.
Why we use it
- To give you what you paid for. Linking the course to your account, emailing your login link and codes, streaming the lessons, and dealing with refunds.
- To protect the course. Login codes, a limit on devices per account, and detecting shared accounts and redistribution.
- To meet legal duties. Tax and accounting records, mostly handled by Paddle.
- To send course notices. Lesson updates, or notice that the course is being retired. We do not sell your address or add you to marketing lists without asking.
Who else handles it
- Paddle.com Market Ltd. Merchant of record, handling payment, invoicing and tax.
- Bunny.net. Video hosting, streaming and playback analytics.
- Resend. Sends your login link and one-time login codes.
- Cloudflare. Hosting for this website, including standard server logs.
- Google (Gmail). Our email, so messages you send us are stored there.
Each acts as a processor or independent controller for its own part. We do not sell your personal data to anyone.
Where it goes
These providers operate servers outside Pakistan, including in the EU and the US, so your data may be transferred and stored there under the safeguards each provider has in place.
Cookies
The Falcon 8X course page shows a preview video hosted by YouTube (youtube-nocookie.com). YouTube may set its own cookies once you press play.
This site does not run advertising or tracking cookies. When you log in, we set one essential cookie that keeps your session signed in on that device for up to 30 days. It cannot be read by scripts on the page and is removed when you log out. The video player sets cookies and local storage needed for playback, and the course page remembers which lessons you have marked complete in your own browser. Paddle's checkout sets its own cookies for fraud prevention and to complete the transaction.
How long we keep it
Purchase and access records are kept while your access is active and for two years after, so we can restore access if you ask. Transaction records are kept as long as tax law requires, normally six years, mostly by Paddle. Playback logs are kept for up to twelve months. Support email is kept for two years.
Your rights
You can ask us to show you the data we hold about you, correct it, delete it, send you a copy, or stop using it for a particular purpose. Email falcon.aerospace2026@gmail.com from the address you bought with and we will reply within 30 days.
Deleting your data ends your access to the course, because your access link is tied to your purchase. We will say so before acting on the request.
Refund and payment records held by Paddle can also be requested directly from Paddle under their own privacy policy.
Younger students
The lessons are suitable for school age students, and younger students are welcome on the course. The purchase itself has to be made by a parent or guardian, and the account and login codes are linked to that adult's email address.
No more data is collected for a young student than for anyone else: an email address for access, plus the playback records described above. Nothing is used for advertising or profiling, and nothing is passed to any third party beyond the providers listed above.
A parent or guardian can ask at any time to see what is held about their child, correct it, or have it deleted. Email falcon.aerospace2026@gmail.com from the address the course was bought with.
Security
Access is over HTTPS, every new device must confirm a one-time email code, sessions are individual, and only we hold the student list. No system is perfectly secure, so if a breach ever affects your data we will tell you and the relevant authority as the law requires.
Changes
If this policy changes, the date at the top changes with it. Material changes are emailed to enrolled students.