Privacy Policy

Effective date: 17 October 2026

This policy explains what personal information gambot.us ("Gambot", "we", "us") collects, why, who sees it, how long we keep it, and what choices you have. We keep it short and specific to what the site really does.

Who is responsible

The site is run by Jeffrey A. Kondas, doing business as Gambot. Write to us by email or the contact form. We are the "controller" of the information described here. Contact us at contact@gambot.us or through the contact form.

What we collect and why

  • Messages you send us. If you use the contact form we receive your name, email address and message. We use them to reply to you. We keep a copy in our database for 12 months and it is also emailed to us through Resend.
  • Purchases of downloads. When you buy a product, Stripe takes your payment on its own page. Your card details never reach us. Stripe tells us your email address, the product and the order number. We use these to give you your download link, to email it to you, and to keep a record of the sale for accounting and tax. Download links work once and expire after 24 hours. We keep order records for 7 years.
  • Subscriptions (Anvil OS Sync and Pro, when offered). We receive your email address, the Stripe customer and subscription numbers, the plan, its status and billing dates, and we create a license key for you. We use them to give you access, renew or end it correctly, and to keep accounting records. We keep these records while your subscription is active and for 7 years afterwards.
  • Signing in to the members page. You sign in by entering your license key. We store the key in a cookie in your browser. It ends when you close your browser, unless you tick "Keep me signed in on this device", in which case it lasts 30 days. See the cookie policy.
  • Your Notion workspace (Anvil OS Sync, when offered). If you choose to connect Notion, Notion gives us an access token (we store it encrypted), the name and ID of your workspace and of our connection. We can only see the pages you choose to share with the connection. We read the list of pages you shared and the titles of items inside the page you pick, so we do not create duplicates. We create databases and prompt pages under that page and keep a list of what we created so we can update it. We do not read or copy anything else in your workspace. You can disconnect at any time from the members page: that deletes the token and our list immediately. Anything already created in your workspace stays there and is yours. If your subscription ends, we delete the connection after 30 days.
  • Blog comments. Comments on blog posts are switched off. If we ever turn them on, we will update this policy first.
  • Technical information. Our host, Cloudflare, processes your IP address and basic request details to deliver pages and protect the site from abuse. To slow down abusive requests we keep a short-lived record linked to your IP address; it expires within 60 seconds and is then deleted.
  • Site search. What you type into search is sent to our server, which asks Cloudflare AI Search for results. We do not store your searches.

We do not use advertising, analytics or tracking tools, we do not build profiles, and we do not make decisions about you by automated means.

Why we are allowed to use it (EU and UK)

We use your information to carry out the contract when you buy or subscribe, to answer you when you contact us, to meet legal duties such as tax and accounting records, and for our legitimate interests in running and securing the site and preventing fraud. Where we ask for your consent (for example before connecting Notion), you can withdraw it at any time.

Who receives it

  • Cloudflare: hosting, our database and file storage, search and security.
  • Stripe: payments and subscription billing. Stripe's privacy policy.
  • Resend: sending the emails described above.
  • Notion: only if you connect your workspace. Notion's privacy policy.
  • PayPal: only if we offer it and you choose it. PayPal's privacy statement.
  • Authorities or advisers, if the law requires it or to protect our rights.

We do not sell your personal information and we do not share it for advertising.

Transfers outside your country

These providers are based in, or run systems in, the United States and other countries. When your information leaves the EU or UK we rely on the safeguards those providers offer, such as the EU-US Data Privacy Framework or standard contractual clauses.

How long we keep it

  • Contact messages: 12 months, then deleted.
  • Short-lived abuse-prevention records: under 60 seconds.
  • Download links: expire after 24 hours.
  • Notion connection data: until you disconnect, or 30 days after your subscription ends.
  • Sales and subscription records: 7 years, for accounting and tax.

Your choices and rights

You can ask us to show you the information we hold about you, correct it, delete it, give you a copy, or limit or stop how we use it. In the EU and UK you also have the right to object to some uses and to complain to your data protection authority (in the UK, the Information Commissioner's Office). In California and other US states with privacy laws you have the right to know, delete and correct, and not to be treated worse for asking. We do not sell or share personal information for targeted advertising. To use any right, email contact@gambot.us; we may ask you to confirm it is you, and we will answer within the time the law allows (usually one month, 45 days in California).

Do Not Track and Global Privacy Control. Because we do not track you across sites, there is nothing to switch off. We honour the Global Privacy Control signal if it is on.

Children

The site is not meant for children under 16 and we do not knowingly collect information from them. If you think a child has sent us information, tell us and we will delete it.

Security

Pages are served over HTTPS, Notion tokens are encrypted, license keys are stored only in your browser and our database, and access to our systems is limited. No system is perfectly secure, so please use a license key you do not share.

Changes

If we change this policy we will update the date above, and tell subscribers by email if the change matters to them.

Contact

Gambot (Jeffrey A. Kondas), contact@gambot.us.