Privacy policy
Last updated: October 20, 2026. Headshot Protocol is run by Gustavo Ribeiro. Contact: contact@headshotprotocol.com.
What we collect
- When you buy: your email address and the status of your payment, received from Stripe. Card and payment details stay with Stripe; this site never sees or stores them.
- When you ask for the free sample: your email address and, if you give it, your first name.
- When you use this site: the technical data any web server records, such as IP address, browser and pages requested, kept in the hosting provider's logs.
How we use it
To deliver what you bought or asked for: sending your access link, letting you download the ebook, opening the Prompt Library during your six months of access, and sending the free sample. We also use your email to answer your messages and, for sample requests, to send a short series of emails about the method and the ebook. Every one of those emails has an unsubscribe link.
We do not sell your data and do not use it for anything else.
Who processes it for us
- Stripe and Link, which process payments as merchant of record (Stripe privacy policy).
- Brevo, which stores sample requests and sends those emails (Brevo privacy policy).
- Spaceship, which hosts this site and our email.
- Meta (Facebook and Instagram), only if you accept cookies: the Meta Pixel measures which ads lead to visits, sign-ups and purchases (Meta privacy policy).
We share data with other parties only when the law requires it.
Cookies
After a purchase, this site sets one cookie, signed so it cannot be altered, that keeps you signed in to your access area for up to 24 hours. It is needed for delivery and is not used for tracking.
We also use the Meta Pixel to measure our ads on Facebook and Instagram. It sets cookies and sends Meta the pages you visit here and whether you signed up for the sample or bought the ebook. It only loads if you click "Accept" in the cookie notice; if you decline, nothing is sent. You can change your choice at any time with the "Cookie settings" link at the bottom of our pages.
How we protect it
The site runs only over HTTPS. There are no accounts or passwords to steal: access works through sign-in links that expire after 30 minutes and work once. Purchases are checked against Stripe each time, and the files and settings that deliver the ebook sit outside the public part of the server.
How long we keep it
Purchase records stay with Stripe for as long as the law requires. Sample requests stay in Brevo until you unsubscribe or ask us to delete them. Server logs are rotated by the hosting provider.
Your rights
You can ask to see, correct or delete your data, or object to its use, by writing to contact@headshotprotocol.com. We answer within 30 days. If you are in the UK or the EU, you can also complain to your data protection authority.