Last updated: October 7, 2026
Created Workshop is my place to make, experiment, and teach. It’s run by me, Patrick Campanale, as a DBA of Campanale LLC in Tennessee. I want this policy to be as clear and readable as the rest of the site, so here’s what I collect, why I collect it, and what you can ask me to do with it.
The short version: I collect what I need to run the shop, deliver your files, and answer your emails. If you say it’s okay, I also use Google Analytics to see which pages are helpful. I don’t sell your information and I don’t run advertising trackers.
What I collect and why
Orders and downloads
When you buy or download something, WooCommerce stores your name, email address, and billing address, plus your shipping address if you order something I ship. I use that to process your order, deliver your files, ship physical items, answer questions about your order, and keep the business and tax records I’m required to keep. Free downloads go through the same checkout, so they create an order record too.
Payment information
Payments are handled by Stripe or PayPal, depending on what you choose at checkout. Your card number goes straight to them. This site never sees or stores it. I get confirmation that you paid, along with limited details like the type of payment and the last four digits of a card.
Accounts
If you create an account, I store your name, email address, and a securely hashed password, along with your order history and download access, so you can come back and download your files again.
Download records
When you download a file, WooCommerce records the time and your IP address with that order. That helps me confirm a file was delivered and spot download links that are being shared or abused.
Emails you send me
There’s no contact form on the site. If you email me at [email protected], I keep your message and email address so I can reply and follow up on your project or question.
Order and account emails
The site sends order confirmations, download links, shipping updates, and password resets through Google Workspace.
Website interactions
Like most websites, the server and Cloudflare log technical details about each visit, like your IP address, browser type, the page you asked for, and the time. I use those logs to keep the site secure, block abuse, and fix problems. I don’t use them to build a profile of you.
Analytics (only if you say yes)
When you first visit, the site asks whether it’s okay to use analytics cookies. If you choose “That’s fine,” Google Analytics records things like which pages you visit, how you found the site, your general location, and the device and browser you’re using. I use that to see which videos, posts, and files are actually helpful. If you choose “No thanks,” Google Analytics never loads. You can change your mind anytime from the “Cookie settings” link at the bottom of every page.
If you say yes, WooCommerce also remembers how you arrived at the site (for example, a search engine, YouTube, or a social link) and saves that with your order, so I can see which places lead to sales.
Cookies
Some cookies are needed for the site to work: WordPress and WooCommerce use them to keep you signed in and remember your cart and checkout, the site remembers your cookie choice, Cloudflare may set a security cookie to tell people apart from bots, and Stripe and PayPal may set their own cookies on cart and checkout pages to process payments and prevent fraud.
The only other cookies are the Google Analytics and WooCommerce order-attribution cookies described above, and they’re only set if you agree. There are no advertising cookies.
Things that load from other sites
Videos are embedded from YouTube using its privacy-enhanced mode. Google still receives your IP address and basic browser details when a page with a video loads, and YouTube may set cookies once you press play. The site’s fonts also load from Google Fonts, which means your browser sends your IP address to Google when a page loads. Google’s own privacy policy covers that information.
Some pages link to other websites, including affiliate links (see my affiliate disclosure). Once you follow a link, that site’s privacy policy applies.
Newsletter
There isn’t a newsletter signup on the site right now. If I add one, I’ll update this page first, and I’ll only email you marketing messages if you opt in.
When I share your information
I only share what each service needs to do its job:
- Stripe and PayPal to process payments and refunds.
- Google Workspace to send and receive email.
- Google Analytics to measure site usage, only if you agree to analytics cookies. I don’t turn on Google’s advertising features.
- Cloudflare for security, DNS, and delivering the site quickly.
- Shipping carriers get your name and shipping address when I ship you something.
- Accountants, legal advisors, or government agencies when the law requires it or I need help meeting a legal obligation.
I never sell your personal information.
Your rights with your information
You can ask me to send you a copy of the personal information I have about you, correct anything that’s wrong, or delete your account and personal information. The one exception is records I’m legally required to keep, like completed orders. Depending on where you live, you may have additional rights under your local privacy laws, and I’ll honor those too.
Email [email protected] and I’ll respond within 30 days. I may need to confirm you own the email address on the account before I act on a request.
How I secure your data
The whole site runs over HTTPS. Card details stay with Stripe and PayPal, and purchased files sit in protected storage that only works through your order’s download link. No system is perfectly secure, but I take keeping your information safe seriously.
How long I keep it
- Orders: seven years, for tax and accounting records.
- Analytics: Google Analytics keeps data for up to 14 months.
- Accounts: until you ask me to delete your account.
- Emails: as long as they’re useful for a conversation or project, or until you ask me to delete them.
- Server and security logs: a short period, generally no more than 30 days.
- Backups: the site is backed up daily so I can recover from a problem. Those backups roll over on a regular schedule and aren’t used for anything else.
Where the site and data live
The site runs on WordPress and WooCommerce on a server I own and operate in Tennessee, in the United States. If you visit from outside the U.S., your information is handled here.
Children
The site isn’t meant for children, and I don’t knowingly collect information from anyone under 13. If I find out I have, I’ll delete it.
Changes and questions
If I change this policy in a way that matters, I’ll update the date at the top of this page. If you have any questions, just email me at [email protected].
Adapted from the Basecamp open-source policies / CC BY 4.0