Privacy Policy

1. Who is responsible

We are the controller of the personal information we use to operate Coda Tricks Extensions, administer template licenses, deliver documents, and handle correspondence. You can contact us using these details:

This policy covers the storefront, template acquisition and delivery, and related communications. Your license and refund rights are explained in our Template License & Purchase Terms.

2. Information we handle

• Contact and delivery details: your email, the email associated with your Superhuman Docs account, and your name or organization if supplied. We receive your billing/contact email from Paddle and collect your Superhuman Docs account email for document delivery. By default, the same email serves both purposes; you can provide a different Docs account email before checkout.
• Order and license records: information Paddle makes available to us, such as order and customer references, purchased product/version, amount, currency, payment status, and refund or dispute records. We also keep license details and workspace information you provide.
• Delivery records and test-instance content: the provisioned document’s ID, sharing/delivery information, and anything you put in that instance. See Your documents before using it.
• Correspondence: messages, attachments, and information you choose to send for a quote, an order issue, a refund, or separately agreed assistance.
• Website request and measurement information: information handled by our hosting, payment, analytics, and optional video services as explained in Website services.

We obtain this information from you (including the optional Docs email entered before checkout), Paddle, and the document platform in connection with your order, and from requests your browser makes to the services used on the site. We do not receive or store your full payment-card number or card security code.

For a template purchased through Paddle, a valid Superhuman Docs account email and enough information to identify your order are necessary to deliver or restore access. Without them we may be unable to fulfill your request. Public template links take you directly to Superhuman Docs, where you use your platform account to make a copy. Other details are optional unless we explain why a particular transaction or legal requirement needs them. Please send only information relevant to your request.

3. Why we use it

Where data-protection law requires a lawful basis, we rely on the following, as applicable:

• Contract and steps you request before a contract: answering purchase enquiries, providing the purchased template, sharing or re-provisioning a document, handling order correspondence, and administering refunds and license commitments.
• Legitimate interests: communicating with someone acting for a business customer; keeping proportionate license and delivery records; protecting the site and documents against misuse; understanding aggregate store traffic and conversion; and establishing, exercising, or defending legal claims. We consider the effect on your rights and limit information to what is reasonably needed for those purposes.
• Legal obligations: keeping records and responding to lawful requests where applicable tax, accounting, or other law requires it.
• Consent, where required: for any optional processing or device storage that legally requires consent. You can withdraw such consent for future processing without affecting earlier lawful processing.

We use buyer emails solely for order-related correspondence. Messages can include Paddle’s receipt, a Superhuman document-sharing notification, and our delivery or assistance emails.

4. Paddle and payment information

Paddle is the seller and Merchant of Record for one-time template purchases on this storefront and handles checkout, payment processing, tax, fraud prevention, transaction support, and refunds under its own terms. It acts as an independent controller for its own processing. Templates distributed through public copy links are obtained directly through Superhuman Docs; associated Pack subscriptions are purchased through Superhuman.

The catalog loads Paddle’s browser library on visits so it can display localized prices and prepare checkout. This sends requests to Paddle and its delivery infrastructure, including when a visitor uses only a public template link. Those requests can expose your IP address and browser/request information; Paddle uses location information, including an IP-derived country, to estimate localized pricing. Final billing and tax details are confirmed at checkout.

Information you enter in Paddle’s checkout goes to Paddle and the providers it uses. Paddle makes relevant contact and transaction information available to us for delivery, license administration, and records. When you continue to checkout, we send Paddle your delivery-email choice and any separate Docs account email as order metadata. Paddle stores this with the transaction and makes it available to us, including for an unfinished checkout. We use the Docs account email to share or restore document access; your billing/contact email is used for order correspondence. Paddle’s handling of payment, security, browser storage, and transaction communications is explained in Paddle’s Privacy Notice. You can also contact Paddle buyer support about your transaction or information it controls.

5. Documents, Packs, and Superhuman Docs

Public template links

Get for free opens the public source document for a free template. For listings marked Template with Paid Pack, Get the template opens a public document whose core functionality requires activating its associated Pack through a trial or subscription. Both routes let you copy a common read-only document at no charge directly through your Superhuman Docs account. Superhuman handles document access and copying under its privacy policy and your account or workspace agreements.

We use access to that instance to provide and administer delivery, restore or replace an instance, respond to your requests, and address security or legal issues. Your independently owned data remains yours.

You control who can open copies in your own workspace through Superhuman Docs sharing settings. We can open those copies only if you explicitly share them with us. For assistance or separately agreed services, we use that access for the agreed purpose; you can revoke sharing using the platform’s controls. Share only information you are entitled to disclose and remove unnecessary personal information from support examples.

Superhuman provides the document platform and account services. Your platform use, account information, and workspace content are subject to Superhuman’s Privacy Policy and the agreements applicable to your account or workspace, including any applicable data-processing terms. That is separate from our responsibility for information we access or use ourselves.

Free and paid Packs

Any template may use free or paid Packs. A Pack may process account, usage, or document information needed for its features, according to your permissions and settings. Review the permissions and any developer privacy policy linked from the Pack listing, along with the policies of connected services you enable. Superhuman’s handling of platform and Marketplace information is covered by its Privacy Policy and the data-use provisions of its Marketplace Terms.

For a listing marked Template with Paid Pack, you activate the associated Pack through a trial where available or purchase a subscription through Superhuman Docs. Superhuman handles subscription, transaction, and billing information under its Privacy Policy. The Pack developer’s applicable privacy policy describes its own data handling.

6. Website services and browser storage

Hosting with Google Firebase

The storefront is hosted using Google Firebase Hosting. Google processes incoming request information, including IP addresses, to deliver the site and help prevent abuse. Firebase Hosting uses a global content-delivery network. See Firebase’s privacy and security information and Google’s Privacy Policy.

Minimal analytics with Plausible

When enabled, Plausible provides basic audience measurement: pageviews, referring sites, broad country-level trends, and browser/device categories. We use this to understand whether the storefront is useful. Generic checkout or purchase-completion events may be used to estimate conversion, without sending buyer emails, names, document contents, customer IDs, or order references to analytics. Confirmed purchases and refunds are recorded through Paddle.

Plausible does not use analytics cookies or browser local storage. It processes the visitor’s IP address and browser User-Agent to derive a site-specific identifier for counting visits, which resets daily. The raw IP address and User-Agent are discarded. Plausible states that its analytics data is hosted in the EU. See Plausible’s Data Policy.

We do not use analytics for advertising profiles, cross-site tracking, or session replay. Please avoid putting private information in page URLs or links you share with us; URLs and referrers can reveal information even without cookies.

Remembering your purchase preferences

The site stores your accepted EULA version and whether delivery should use your billing email or a separate Superhuman Docs email in your browser’s local storage. These preferences avoid repeating acceptance and delivery questions unnecessarily. If you choose a separate Docs email, you enter the address again for each checkout. You can change the delivery preference through Delivery email options beside a Buy button. Preferences stay until replaced or cleared; if storage is unavailable, they are remembered only while the page remains open.

Optional YouTube videos

A product video is loaded only when you open its video popup. We use YouTube’s privacy-enhanced youtube-nocookie.com embed and remove the player when the popup closes. Opening or playing a video connects your browser to Google/YouTube, which can receive request and playback information and may use storage according to its own rules. See Google’s Privacy Policy.

Paddle’s checkout and optional video services use browser technologies described in their own notices. You can restrict storage through your browser, although doing so may affect checkout or video playback. Clearing the EULA preference causes another prompt.

7. Email and other disclosures

We use Google Workspace email (Gmail), including automated sending, for supplier delivery and order correspondence. Google processes email addresses, message contents, and associated delivery information on our behalf under the applicable Google Workspace agreement and its Data Processing Addendum, which identifies Google as a processor for customer personal data. See also Google’s Privacy Policy. Paddle and Superhuman separately send their own receipt and sharing notifications.

We disclose information to the hosting, email, document, payment, and analytics providers described above as needed for their roles. A provider may act as our processor for some activities and as an independent controller for others, according to the applicable service and agreement. We may also disclose necessary records to professional advisers or competent authorities to meet legal duties or handle claims.

We do not sell your personal information or disclose it for targeted advertising. We may replace a service provider as the store grows; a material change to how information is handled will be reflected in this policy and notified where required.

8. International processing

We are based in Ukraine and access order and delivery information there. Google, Paddle, and Superhuman operate internationally, so information may also be processed in the United States, United Kingdom, EEA, or other countries where they or their service providers operate. Plausible states that its analytics infrastructure and data are hosted in the EU.

For international transfers for which we are responsible, we use safeguards required by applicable law, such as an applicable adequacy decision or approved contractual safeguards. The providers’ notices linked above describe their transfer practices. Contact us for information about the safeguards relevant to your information, including how to obtain a copy where available, subject to necessary redactions.

9. How long information is kept

We use purpose-based retention: we keep information for as long as reasonably needed for the purpose described, including applicable legal requirements, then delete it or make it anonymous. The criteria differ by record:

• Order and license records: the minimum information needed to administer an ongoing license, confirm the purchased version, restore delivery, handle refunds or disputes, and meet tax, accounting, and legal obligations. A continuing license may require some records beyond the initial delivery or refund period.
• Correspondence: messages and attachments are kept while needed to answer the request and retain relevant delivery, agreement, complaint, or claim records.
• Personal instances: available for at least 30 days after delivery under the delivery terms, and may be kept longer before cleanup. Necessary document references and order links may remain for license administration and re-provisioning after the instance is removed.
• Analytics and technical records: statistical history is kept according to the selected provider plan, settings, and operational purposes. Google states that Firebase Hosting retains IP data for a few months.
• Browser preferences: the EULA version and delivery-email preference remain in your browser until replaced or cleared as described above.

A legal obligation or a concrete dispute may require relevant information to be preserved longer. Deleted information may remain temporarily in restricted backups until their normal replacement cycle. Paddle and other independent controllers apply their own retention rules to information they control. You manage retention of copies in your workspace through your platform account.

10. Your choices and privacy rights

Depending on applicable law, you may have rights to access your personal information, correct it, request deletion or restriction, receive a portable copy of information you provided, and object to processing based on legitimate interests. Where we rely on consent, you may withdraw it for future processing. These rights have legal conditions and exceptions, including records needed for legal obligations or claims.

Send requests to paul@codatricks.com. Describe the request and provide enough information to identify the relevant order or correspondence. We may ask for proportionate verification to protect your information and will respond within the period required by applicable law. Please do not send identity documents unless reasonably needed and requested.

We cannot reliably identify a particular visitor in aggregate analytics without an identifying link, and we do not collect extra identity data just to create one. We will explain any practical or legal limit on a request. For information controlled independently by Paddle, Google, or Superhuman, you can also use their own privacy-request channels. For your workspace copies, manage sharing and content through your account and workspace administrator.

You may complain directly to a competent data-protection authority, including the Ukrainian Parliament Commissioner for Human Rights, or the authority in your country where applicable. EEA residents can find their authority in the EDPB directory.

11. Security and appropriate use

We use reasonable measures proportionate to the information and risks, limit our use and disclosure to relevant purposes, and rely on the access controls of the services involved. No website, email, or document platform can guarantee absolute security. Contact us if you suspect an order or document has been shared incorrectly.

The store is intended for people with legal capacity to buy a template or act for a customer organization. If you believe a child has provided personal information inappropriately, contact us so we can address it.

12. Changes to this policy

We may update this policy when our services, providers, or legal obligations change. The date above identifies the current version. For material changes we will provide additional notice where required, and obtain consent where the law requires it. Your privacy rights and the license and refund commitments for existing purchases remain protected.