ATSIGNHANDLE, LLC — applies to atsignhandle.xyz, natasha-pankina.com, and the apps listed on
our products page.
Last updated 9 August 2026.
We sell digital goods. To do that we need your email address and, for taxable sales, enough location information to charge the right tax. That is essentially all we keep.
We never see your card number — Stripe handles it. We do not sell personal information, we do not share it for advertising, and we do not run advertising or tracking cookies.
Ask us to delete your information and we will, except where tax law requires us to keep a record of the sale.
ATSIGNHANDLE, LLC is the data controller for personal information collected through the sites and products listed on our products page. Contact: rooot [@] atsignhandle [dot] xyz.
| Category | What | Why |
|---|---|---|
| Order | Email address, the items purchased, amount, currency, timestamp, and the licence tier | To deliver the files, to let you re-download them later, and to answer support requests |
| Billing | Name, billing postal code, and country, collected by Stripe at checkout | Fraud prevention, card verification, and calculating sales tax |
| Payment | Card details — handled entirely by Stripe | Card numbers never reach our servers and we cannot retrieve them |
| Technical | IP address, user agent, and request logs, retained briefly by our host | Serving the site, rate limiting, and abuse prevention |
| Analytics | Aggregate page views. No cookies, no cross-site identifier, no personal profile | To know which pages get used |
| Enquiries | Whatever you put in a commission or contact form, and your reply address | To reply to you |
We do not ask for a date of birth, a government identifier, or a phone number, and we do not collect biometric or precise-location data.
We set no advertising or tracking cookies. The illustration store keeps your shopping cart in your browser's local storage so it survives a page reload; it stays on your device and is never sent to us as a profile. Stripe sets its own cookies during checkout for fraud prevention — those are governed by Stripe's privacy policy. Our analytics is cookieless and does not track you between sites.
| Processor | Role |
|---|---|
| Stripe, Inc. | Payment processing, tax calculation, receipts, and fraud prevention |
| Cloudflare, Inc. | Hosting, content delivery, DNS, and file storage |
| Resend | Transactional email — order confirmations and download links |
| Fathom Analytics | Privacy-preserving, cookieless page analytics |
Each is bound by its own agreement to process the information only on our instructions. We do not sell personal information, and we do not share it with data brokers, advertisers, or ad networks. We disclose information otherwise only when the law requires it.
Wherever you live, you may ask us to show you what we hold, correct it, delete it, or send you a copy in a portable format. Email rooot [@] atsignhandle [dot] xyz and we will respond within 30 days. We will not charge you or degrade your service for asking.
If you are in California, you have the rights to know, delete, correct, and opt out of sale or sharing under the CCPA/CPRA. We do not sell or share personal information as those terms are defined, so there is nothing to opt out of — but the right to know and to delete applies and the address above is how to use it.
If you are in the EEA or the UK, our lawful bases are performance of a contract (delivering what you bought), legal obligation (tax records), and legitimate interests (security and fraud prevention). You may object to processing, and you may complain to your national supervisory authority. Purchases are processed in the United States; Stripe and Cloudflare provide the transfer safeguards.
Deleting your order record is the one request we may have to partly refuse: we can remove your email address and contact details, but we must keep the transaction itself for the tax retention period above.
Our products are not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, write to us and we will delete it.
Traffic is served over HTTPS. Payment card data never touches our infrastructure. Download links are individually signed and time-limited. No system is perfect; if we ever discover a breach affecting your information we will tell you and the relevant regulator as the law requires.
If we change this policy we will update the date at the top. For a change that materially affects how we handle information already collected, we will email customers who have an active download entitlement.
rooot [@] atsignhandle [dot] xyz — replies within one business day.