We keep almost nothing.
Your brand data stays local
The kit runs on your machine. It reads your brands.json, your current_followers.json, your daily snapshot files — all from your local disk. Nothing about your brands, your followers, your blog posts, your wins, or your mentions ever leaves your computer. We don't see it. We don't want to.
What we DO store about you
Three things, in a SQLite database on our Fly.io machine, for the lifetime of your purchase:
- Your email address — so we can deliver the kit and re-send the link if you lose it
- Your Stripe payment session ID — so we can prove you paid
- A download token — a random URL-safe string we generate per order; the link in your delivery email points to it
- Two timestamps — when you paid, and when you last downloaded the kit
- A download counter — bumped each time you re-download, capped at 25 to stop a leaked link being hammered
That's the full list. We do not store your name, address, IP address (beyond ephemeral rate-limiter buckets, see below), card details, or anything else.
Third parties we use
- Stripe — processes the $45 payment. They see your card details; we don't.
- Resend — delivers the download email. They see your email address.
- Cloudflare — serves this landing page + sits in front of the API for DDoS protection.
- Fly.io — runs the delivery API.
We do not use analytics trackers, advertising pixels, third-party cookies, session replay, heatmaps, or any other data collection layer on this site.
Rate limiting and IP addresses
The delivery API rate-limits requests per IP (so a leaked download link can't be hammered, and so the /buy endpoint can't be DDoS'd). The rate limiter holds your IP in memory for short windows — minutes, not days — and never writes it to durable storage. If the machine restarts, those buckets vanish.
Cookies
Zero cookies on this site. None set by us, none set by third-party scripts (we don't load any). The only browser storage is a single optional localStorage flag if you toggle the HC (high-contrast) mode on, so the page remembers it next time.
Your rights
Email privacy@morningstack.marketingprompthub.com to:
- See what we have on you (it's the list above — but we'll show you yours specifically)
- Delete your record, which also voids any future re-download. Your local kit keeps working.
- Update your email address (e.g. if you bought with a personal email but want recovery to a work one)
We respond within 7 days, always within 30.
If we ever shut down
Per the terms: 30-day notice to all buyers, then the order database is deleted. Your local kit keeps working forever, with no dependency on our servers.