Privacy Policy

1. Introduction

This Privacy Policy describes how Perfected Stone Press (“Perfected Stone Press,” “we,” “us,” or “our”) collects, uses, and discloses personal information when you visit our website at perfectedstone.com (the “Site”), purchase one of our publications, or otherwise interact with us.

Please read this Privacy Policy carefully. By visiting or using the Site, you acknowledge that you have read this Privacy Policy and understand the practices described in it. If you do not agree, please do not use the Site.

This Privacy Policy applies only to the Site. It does not apply to purchases made on Gumroad (perfectedstone.gumroad.com and related Gumroad-operated checkout pages), which are governed by Gumroad’s own privacy policy. We explain the relationship between us and Gumroad in Section 5.

2. Who We Are and Our Role

Perfected Stone Press is the publisher of The Grand Architect and related titles. The Site is a static publication catalog and informational website. We do not operate user accounts, do not host a checkout, and do not process payment information directly.

For purposes of applicable privacy laws, including the California Consumer Privacy Act as amended (“CCPA”), the Virginia Consumer Data Protection Act, the EU and UK General Data Protection Regulation (“GDPR”), and similar statutes, Perfected Stone Press is the business or controller with respect to personal information we collect through the Site and personal information transferred to us by Gumroad in connection with purchases of our publications.

3. Information We Collect

Because the Site does not require accounts, does not run a checkout, and does not deploy advertising or behavioral trackers, the categories of information we collect are limited.

3.1 Information You Provide Directly

We currently do not operate any contact form, newsletter, or other intake on the Site. If we add a newsletter, waitlist, or contact form in the future, that feature will be governed by Section 3.4 and will be active only after the form is published; until then, no information is collected through this channel.

If you contact us by email, we receive whatever information you choose to include — typically your email address, name, and the contents of your message.

3.2 Information Collected Automatically

When you visit the Site, our hosting provider, Vercel Inc.(“Vercel”), automatically receives standard request data necessary to deliver the Site to your browser. This includes:

• Internet Protocol (IP) address
• Browser type and version, operating system, device type
• Referring URL and pages requested
• Date and time of access
• Approximate geographic location derived from IP address (city or region level, not precise GPS)

This information is processed by Vercel for security, abuse prevention, content delivery, and basic operational logging. Vercel acts as our service provider with respect to this data.

In addition, we use Vercel Web Analytics and Vercel Speed Insights — privacy-focused, cookie-free analytics provided by Vercel. These tools record aggregate, anonymous information about page views, navigation patterns, and Core Web Vitals performance metrics. They do not set cookies, do not store IP addresses or other identifiers in their analytics datasets, do not fingerprint visitors across sessions, and do not track visitors across other websites. The data is used in aggregate to help us understand how the Site performs and which pages are read.

We do not deploy session replay tools, advertising pixels (such as Meta Pixel, TikTok Pixel, Google Analytics, or Google Tag Manager), or cross-site tracking technologies on the Site.

3.3 Information Received from Gumroad

When you purchase a publication through Gumroad, Gumroad processes your payment and delivers the product. Gumroad collects payment information directly; we never see or receive your payment card details.

After a completed purchase, Gumroad provides us with a limited set of customer information necessary to fulfill the transaction and comply with our obligations:

• Buyer name (if you choose to provide it)
• Buyer email address
• Country and, for tax purposes, state or region
• Product purchased, purchase amount, and transaction date
• Whether the buyer opted in to receive updates from us

Gumroad does not provide us with full payment card numbers, billing addresses (beyond what is required for tax determination), or precise geolocation. The full Gumroad data practices are described at gumroad.com/privacy.

3.4 Newsletter and Waitlist (When Available)

We plan to offer a newsletter and/or waitlist for forthcoming volumes (Volume II and Volume III of The Grand Architect, the Dynasty Playbooks, and Just Things). When this feature is live, the form will collect:

• Email address
• Optionally, a first name or display name
• The publication or list you are signing up for
• Date of signup and a record of your consent

The email service provider that delivers these communications will also receive standard email engagement metadata (whether messages were opened, links clicked, bounces, unsubscribes). We will identify the email service provider in this Policy at the time the newsletter launches and update the “Last updated” date accordingly.

You can unsubscribe at any time using the link at the bottom of any newsletter we send, or by emailing us at the address in Section 14.

3.5 Sensitive Personal Information

We do not knowingly collect personal information that qualifies as “sensitive personal information” under the CCPA or “sensitive data” under other US state privacy laws (such as government identifiers, precise geolocation, racial or ethnic origin, religious beliefs, health information, biometric data, sexual orientation, neural data, or contents of mail, email, or text messages other than those addressed directly to us). We do not process personal information for the purpose of inferring characteristics about you.

4. How We Use Personal Information

We use personal information for the following limited purposes:

• To operate the Site. Server-side logging, error monitoring, and abuse prevention through Vercel.
• To fulfill purchases. Acknowledging orders, delivering download access, providing customer support related to a purchase, and processing any refunds that may be issued (for example, chargebacks, duplicate purchases, or discretionary goodwill refunds; we do not operate a stated buyer-initiated return window).
• To respond to inquiries. Replying to messages you send us by email.
• To send communications you have requested. Newsletter, waitlist updates, and product announcements, only after you have signed up and only until you unsubscribe.
• To comply with legal obligations. Tax reporting, responding to lawful government requests, and defending against legal claims.
• To maintain the security and integrity of the Site. Detecting and preventing fraud, abuse, malicious activity, and policy violations.

We do not use personal information for behavioral advertising, do not build advertising profiles, and do not engage in automated decision-making that produces legal or similarly significant effects.

5. How We Share Information and Who Has Access

We disclose personal information only in the limited circumstances described below.

5.1 Service Providers

We rely on the following service providers, each of which processes personal information on our behalf and under contract:

• Vercel Inc. — website hosting, edge delivery, server logs, and privacy-focused first-party analytics (Vercel Web Analytics and Vercel Speed Insights, both cookie-free). Privacy practices: vercel.com/legal/privacy-policy.
• Gumroad, Inc. — payment processing, digital product delivery, tax handling, customer records. Gumroad in turn uses Stripe and PayPal as payment sub-processors. Privacy practices: gumroad.com/privacy.
• Domain registrar and DNS provider — domain registration and DNS resolution.
• Email service provider (when newsletter launches) — to be identified in this Policy at that time.

Our service providers are permitted to use the information only to perform services for us and are required to protect it.

5.2 Gumroad as a Separate Platform

When you click a “Read Volume” link on the Site, you are taken to a Gumroad-operated page (perfectedstone.gumroad.com or a Gumroad checkout domain). At that point, you are interacting with Gumroad’s platform, which has its own privacy practices, cookies, and trackers. Gumroad acts as our service provider (under CCPA) or processor(under GDPR) with respect to data collected as part of fulfilling your purchase. For all other purposes — including Gumroad’s own product improvement, fraud prevention, marketplace features, and platform analytics — Gumroad acts as an independent controller of your information.

We encourage you to review gumroad.com/privacy before completing a purchase.

5.3 Legal and Safety Disclosures

We may disclose personal information when we believe in good faith that disclosure is necessary to:

• Comply with applicable law, legal process, subpoena, or government request;
• Enforce our terms or policies;
• Detect, investigate, or prevent fraud, security incidents, or unauthorized activity;
• Protect the rights, property, or safety of Perfected Stone Press, our customers, or others.

5.4 Business Transfers

If Perfected Stone Press is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred to the successor entity, subject to the protections of this Privacy Policy or a successor policy that provides equivalent protection.

5.5 We Do Not Sell or “Share” Personal Information

We do not sell personal information for monetary or other valuable consideration. We do not “share” personal information for cross-context behavioral advertising as that term is defined by the CCPA. We have not engaged in any such sale or sharing in the preceding twelve months and do not plan to.

We have no actual knowledge that we sell or share personal information of consumers under sixteen years of age.

6. Cookies, Analytics, and Tracking Technologies

The Site uses Vercel Web Analytics and Vercel Speed Insights for first-party, cookie-free, aggregate analytics (page views, navigation, Core Web Vitals). These services do not set cookies, do not store IP addresses, do not fingerprint visitors, and do not track across other websites. They are described in more detail in Section 3.2.

The Site does not deploy advertising pixels, session replay tools, or cross-site behavioral tracking technologies. We do not embed Meta Pixel, TikTok Pixel, Google Analytics, Google Tag Manager, or any equivalent advertising or behavioral analytics tool.

Vercel may use minimal cookies or similar technologies that are strictly necessary to operate the Site (for example, to route requests, serve cached content efficiently, or mitigate denial-of-service attacks). These are essential and not used for tracking across other sites.

When you click through to Gumroad, Gumroad’s own cookies and trackers will load on the Gumroad domain, governed by Gumroad’s privacy policy and cookie practices. We have no control over those technologies.

We do not respond to traditional Do Not Track browser signals because there is no industry-standard interpretation of them. We do, however, treat Global Privacy Control (GPC)signals as a valid request to opt out of “sale” or “sharing” of personal information for residents of states whose laws require us to honor GPC. As described in Section 5.5, we do not engage in sale or sharing in the first place; we honor GPC nonetheless as confirmation of that position.

7. Your Privacy Rights

Your rights depend on where you live. Regardless of jurisdiction, we will not discriminate against you for exercising any of these rights.

7.1 California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights:

• Right to know. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collection, and the categories of third parties with whom we share that information.
• Right to delete. You may request that we delete personal information we have collected about you, subject to legal exceptions (for example, we may retain transaction records to comply with tax law).
• Right to correct. You may request that we correct inaccurate personal information about you.
• Right to data portability. You may request a copy of your personal information in a portable, readily usable format.
• Right to opt out of sale or sharing. As stated above, we do not sell or share personal information. No opt-out is required because there is no sale or sharing to opt out of.
• Right to limit use of sensitive personal information. We do not collect sensitive personal information for purposes that would trigger this right.
• Right against retaliation. We will not deny you services, charge a different price, or provide a different level of quality because you exercised any of these rights.
• Authorized agent.You may designate an authorized agent to make a request on your behalf. We may require verification of the agent’s authority and your identity.

Categories of personal information collected in the past twelve months:

To exercise California rights: email us at the address in Section 14with the subject line “California Privacy Request” and describe what you want us to do. We will respond within forty-five days, with one possible forty-five-day extension upon notice. We may need to verify your identity before fulfilling certain requests.

7.2 Other US State Residents

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Nebraska, Indiana, Kentucky, and Rhode Island (and other states whose comprehensive privacy laws are in effect) have rights similar to those of California residents, including the right to access, delete, correct, and port personal information, and to opt out of targeted advertising, sale, and certain profiling. We extend the rights described in Section 7.1to residents of these states regardless of whether their state’s specific thresholds technically apply to us.

Rhode Island specific disclosure. Under the Rhode Island Data Transparency and Privacy Protection Act, we identify the categories of third parties to which we may disclose personal information: (i) hosting and infrastructure providers (Vercel and DNS providers); (ii) payment and digital delivery platforms (Gumroad and its payment sub-processors); (iii) email delivery providers (when applicable); and (iv) legal, tax, accounting, and government authorities when required by law.

Right to appeal.If we deny your request, you may appeal by replying to our denial. We will respond to the appeal within sixty days. If your appeal is denied, you may contact your state’s attorney general.

To exercise rights: email us at the address in Section 14. We do not require you to create an account to make a request.

7.3 European Economic Area, United Kingdom, and Switzerland

If you are located in the EEA, the UK, or Switzerland, you have the following rights under the GDPR or UK GDPR:

• Access to your personal data
• Rectification of inaccurate data
• Erasure (“right to be forgotten”)
• Restriction of processing
• Data portability
• Objection to processing based on legitimate interests
• Withdrawal of consent at any time, where processing is based on consent
• Lodging a complaint with your local supervisory authority

Legal bases for processing. We process personal data on the following legal bases: (a) contract — to fulfill purchases and provide products you have requested; (b) legitimate interests — to operate and secure the Site, prevent fraud, and respond to inquiries; (c) consent — for newsletter communications and any future use that requires it; and (d) legal obligation — to comply with tax, accounting, and other legal requirements.

Data Protection Officer. We have not appointed a Data Protection Officer because our processing does not meet the GDPR thresholds requiring one. You may direct any privacy inquiry to the contact in Section 14.

8. Children’s Privacy

The Site and our publications are intended for an adult audience. We do not direct the Site to children, do not knowingly collect personal information from anyone under sixteen years of age, and do not knowingly sell or share the personal information of minors. If you believe a minor has provided us with personal information, please contact us and we will delete it.

For California residents under sixteen, we will not sell or share personal information without affirmative authorization (opt-in), as required by the CCPA. As stated above, we do not engage in sale or sharing of personal information at all.

9. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy or as required by law:

• Server logs (Vercel):retained per Vercel’s standard retention windows, generally measured in days to months.
• Purchase records: retained for as long as required by US tax and commercial law (typically up to seven years).
• Email correspondence: retained as long as reasonably necessary to maintain a record of the inquiry and any resolution, then deleted or archived.
• Newsletter subscriptions: retained until you unsubscribe, after which we retain a suppression record (your email on a do-not-contact list) to honor your opt-out.

When personal information is no longer needed, we delete it or anonymize it.

10. Data Security

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information. This includes hosting on Vercel’s infrastructure with TLS encryption in transit, payment processing exclusively through PCI-DSS-compliant providers (Gumroad and its sub-processors Stripe and PayPal), and limiting access to information on a need-to-know basis.

No system can be guaranteed perfectly secure. If you have reason to believe your interaction with us is no longer secure, please contact us immediately at the address in Section 14.

11. International Data Transfers

We are based in the United States. If you access the Site or purchase a publication from outside the United States, your personal information will be transferred to, processed in, and stored in the United States and other countries where our service providers operate. These countries may have data protection laws that differ from those of your country.

For transfers from the EEA, UK, or Switzerland, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, where applicable. You may request a copy of the relevant transfer mechanism by contacting us.

12. Third-Party Links and Services

The Site contains links to third-party websites and platforms, most prominently Gumroad. We are not responsible for the privacy practices, content, or security of those third parties. We encourage you to review the privacy policies of every third-party site or service you visit, including:

• Gumroad — gumroad.com/privacy
• Vercel — vercel.com/legal/privacy-policy

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our service providers, the law, or for other operational reasons. The “Last updated” date at the top of this Policy indicates when it was most recently revised. Material changes will be announced on the Site, and where required by law, we will provide additional notice (such as an email if we have an active mailing list).

Your continued use of the Site after the effective date of an updated Policy constitutes your acceptance of the updated Policy.

14. Contact Us

For questions about this Privacy Policy, to exercise any of the rights described above, or to submit a privacy-related complaint, please contact us at:

Perfected Stone Press
Email: privacy@perfectedstone.com

When contacting us about a privacy request, please use the subject line “Privacy Request” and indicate the state or country in which you reside so that we can apply the correct rights framework.

We operate exclusively online and accept privacy-related correspondence by email. CCPA Regulations § 7022 and the comparable rules of other US state privacy laws permit a business operating exclusively online to designate a single email address as its primary contact for privacy requests, which is the basis on which we operate.

This Privacy Policy is provided in English. Translations, if any, are for convenience only; the English version controls in case of conflict.