The Plugin Builder · Your privacy
Privacy Policy
The short version
- What you build stays on your device. The plan you type, the files you drop in, your logo and the zips you download are processed in your browser and are never sent to us.
- When you buy, Stripe handles your payment. We receive your email and a purchase record so we can issue and look up your access code.
- We use no advertising trackers, no analytics on what you type, and no AI.
- Questions or requests: [email protected].
01Who this covers
This Privacy Policy explains what Abara Marketing LLC, doing business as The Sweatsuit Billionaire ("Abara", "we", "us"), does with information when you use the Plugin Builder at builder.sweatsuitbillionaire.com, its Guide, thank-you page and access-code service (the "Product"). The main website at sweatsuitbillionaire.com has its own privacy policy.
02Your plugin content: never collected
The Product is built so that the content of your plugin does not reach us. Your plan answers, skills, agents, reference files, logo and any custom-GPT material you import are read and packaged entirely inside your own browser, using code that runs on your device. No server receives them, we cannot see them, and we do not store them.
Your plan text is saved in this browser so you can return to your work. Use Start a new plugin or clear this site's browser data to clear the saved draft. Reference files and logos are not saved between visits. The Builder packages your plugin content on your device. Separately, it sends your access code and random device identifier to our access service when it checks your purchase.
03What we do collect
| When | What | Why | Where it lives |
|---|---|---|---|
| You buy | Your name, email, billing address and payment details are collected by Stripe, our payment processor, on Stripe's own pages. We never see full card numbers. | To process the payment, calculate tax and send your receipt. | Stripe (see Stripe's privacy policy). |
| After you buy | Stripe tells us the purchase happened. We store the product bought, amount and currency, checkout session ID, payment reference, checkout email, date, and access code. Purchase records can also include a referral handle, a partner handle assigned to the buyer, the applicable commission rate and launch tier. | To issue your code, show it on the thank-you page, find it again if you lose it, reconcile payments and prevent abuse. | A Cloudflare database controlled by us; short-lived verification and access sessions use Cloudflare key-value storage. |
| We deliver a purchase email | We store the recipient, message content (which can include your access code), delivery status, attempt information and provider delivery reference in an email queue. Sent messages and delivery records may also remain with our email provider and in the recipient and owner mailboxes. | To deliver your access information reliably, retry unsuccessful delivery and investigate delivery problems. | Our Cloudflare database, Resend and the relevant mailboxes. |
| You unlock | Your access code and a random device identifier your browser creates (not your name, not your hardware ID). | To check the code and enforce the per-code device limit. | Cloudflare, with the code's record. |
| Any visit | Technical request information such as IP address, request time, page requested and browser type is received by our hosting service. Short-lived rate-limit counters keyed on IP protect the access service. | Security, abuse prevention and keeping the Product running. | Cloudflare hosting and security services. |
| You join the Partner Program | Your name, email, chosen referral handle and payout account (PayPal email, $Cashtag or Zelle email/phone), plus the sales your link refers. | To track your referrals and pay your commissions. | Cloudflare, in our key-value store. |
| You verify partner earnings access | Your partner handle and email, plus a temporary verification key sent by email. The server stores a hashed key and a scoped identity hash for ten minutes. | To verify mailbox access before showing partner earnings. | Cloudflare and Resend. |
| You email us | Whatever you send, and your email address. | To help you. | Our support mailbox. |
We do not sell personal information, do not share it for cross-context advertising, and do not use advertising cookies or ad-platform pixels in the Product.
04Cookies and local storage
We use first-party cookies and browser storage to remember access, save work and maintain the controls described below. Clearing browser data does not delete purchase, partner or support records held by us or our service providers.
| Storage | Purpose and duration | Your controls |
|---|---|---|
sbk cookie | Remembers your access code and random device identifier for up to one year. | Use Log out in the Builder to remove the cookie from this browser. Your saved plan stays. Clearing this site's cookies also removes it, but clearing this site's browser data deletes your saved plan too. |
__Host-sbp-chatgpt and __Host-sbp-claude cookies | Random add-on access tokens, valid for seven days. These cookies use Secure, HttpOnly and SameSite=Strict protections; the server stores a hashed token record with an expiry. | Use Log out in the Builder to end these sessions: it deletes the server record and removes both cookies. Clearing this site's cookies also removes the local tokens. Expired or revoked access is checked by the server. |
__Host-sb-books owner cookie | A random owner-dashboard session token with a 30-minute absolute expiry. It is Secure, HttpOnly, SameSite=Strict and limited to its host; the server keeps a hashed-token session record. | The dashboard's Lock control requests server logout; a successful logout removes the server session and cookie. The session also expires after 30 minutes. |
| Browser local and session storage | Saves drafts, access/device information, progress and preferences. Some saved items have no automatic expiry. | Log out removes your saved access code and the record of what it unlocked from this browser and keeps your draft and device identifier. Start a new plugin clears or resets your draft. Clearing this site's browser data removes saved browser items; it does not delete downloaded files or server records. |
Referral choice: sb-aff-choice | Remembers an Allow or Decline choice and its time for up to 60 days. Global Privacy Control keeps referral credit off. | Use Change referral choice near the purchase controls. The preference record remembers your choice; it is separate from the partner's referral handle. |
Optional referral attribution: sb-aff | Only after Allow referral credit, stores the partner handle and time for up to 60 days, no longer than the current preference period, and passes the handle to Stripe at checkout. | Decline, Withdraw referral credit or Global Privacy Control removes stored referral attribution and stops sending it with later checkout links. Your purchase price stays the same. |
Referral credit is optional. Without an affirmative choice, no referral handle is stored or added to checkout links. If browser storage is unavailable, an explicit choice applies only to the current page. Expired preference and referral records are removed when the sales page next checks them. A referral link can still include a partner handle in the page address received by our hosting service when you visit; the choice controls saved attribution and its use at checkout. Withdrawing does not undo a commission record from an earlier purchase.
Access metadata is sent to our access service. Stripe's hosted checkout and Cloudflare's security services may use their own storage under their policies. Product pages also load fonts from Google Fonts, which receives technical request information, including your IP address.
05Who else sees information
- Stripe, Inc. — payments, receipts, fraud prevention.
- Cloudflare, Inc. — hosting, security, purchase and access records, and server processing described in this policy.
- Resend — delivery of purchase access emails, partner notifications and email-verification messages when sent. Messages contain information needed for their purpose, such as an email address, purchase or partner details, an access code or a temporary verification key.
- Google — web fonts.
- Our email and mailbox providers — delivering and handling messages you send to support.
- Authorities or others — only if the law requires it, to enforce our Terms, or to protect rights, safety or property.
- A successor — if Abara or the Product is sold or merged, information may transfer with it under this policy.
We do not share information with OpenAI, Anthropic or any other AI platform. When you install a plugin into one of those platforms yourself, their privacy policies apply to what you upload there.
06How long we keep it
Purchase and access-code records are retained to provide paid access and code recovery, and records may also be needed for accounting, disputes or other legal obligations. These purchase records do not have a general automatic expiry in the access system. Rate-limit counters use short expiry windows. We are reviewing category-specific retention periods for purchase, partner, support and hosting records; no single deletion period applies to all of them. You can contact us about the records associated with you or request deletion, subject to applicable exceptions.
07Security
Everything travels over HTTPS. Stripe collects payment-card details on its hosted checkout pages. We receive purchase information, including checkout email, product, amount, currency and checkout session identifier, to provide access and support. Webhook messages from Stripe are signature-verified. Access codes are random, device-limited and revocable. The unlock service is rate-limited. No system is perfectly secure, so if you believe your code or data has been misused, email us right away.
08Your rights
Depending on where you live (including California under the CCPA/CPRA and the EU/UK under the GDPR), you may have the right to know what personal information we hold about you, to receive a copy, to correct it, to delete it, or to object to or restrict certain processing. Email [email protected] from the address used at checkout and we will respond within the time the law allows. Dre handles requests for Abara Marketing LLC, with assistance as needed, and remains responsible for the response. Deleting an access record may disable its access code; we will explain any necessary retained records and access consequences when handling the request. We do not discriminate against anyone for exercising their rights. We do not sell or share personal information, so there is nothing to opt out of.
09Children
The Product is intended only for people aged 18 or older. If you believe someone under 18 has provided personal information or made a purchase, contact [email protected] so we can investigate and address the information and purchase.
10International users
We are based in the United States. Information we collect is processed in the United States and on Cloudflare's global network. By using the Product you understand your information may be processed outside your country, where privacy laws may differ.
11Changes
We may update this policy. The current version is always at builder.sweatsuitbillionaire.com/privacy/ with the effective date at the top. If a change is significant, we will say so on the Product's pages.
12Contact
Abara Marketing LLC · The Sweatsuit Billionaire™ · [email protected]