Privacy Policy

Last updated: 2026-09-03

This site is operated by om43byONLYMATT ("we"). This policy explains what personal information is collected when you visit, subscribe, or purchase content, and what we do with it. It is written to be read — not scrolled past.

What we collect

Email address (subscription). If you choose to subscribe, your email address is collected after verification (a code is sent to your inbox). It is stored in our database, with your consents, and used to give you access to subscriber content and, if you accepted it, to send you our newsletter. An address whose domain cannot receive email is refused. No IP address or information about your browser is recorded with your subscription; subscriptions made before September 24, 2026 may hold the IP address and the browser's identification string ("User-Agent") from the time of signup. Every newsletter contains an unsubscribe link: your address is then marked as unsubscribed and you receive no more newsletters; your access to subscriber content does not depend on it.

Email address (purchase). When you buy content, the address you give the payment processor (Payhip, Square, or NOWPayments) is shared with us to validate the transaction and unlock your content. While the payment is being confirmed, an order record (order number, email address, status) is kept for 7 days, then deleted automatically.

Live session (purchase and participation). If you buy a live session, your email address and, if you give one, the display name you choose are kept in the order record described above, together with the chosen product and its length. Once the payment is confirmed, your invitation link is sent to that address. The invitation itself keeps only a display name (never your full address). When you join the session, the name you enter is visible to the other participants and passed to the external video service (LiveKit) that carries the session; your IP address is used to limit abusive attempts to open the link.

Cookies. This site uses first-party cookies only, all strictly functional:

• access — your subscriber access, signed by our entry screen and shared by our subdomains, so you confirm your address only once. It holds an identifier, never the address itself. It is extended on every visit.
• access_visitor — a random identifier naming, on our server, the access you have obtained (a video, a collection, a magazine, or all-access, by purchase or by code). It unlocks the content for the duration stated in the Terms.
• bunny_email — remembers the address tied to a purchase.
• live_session_* — signed token set when you join a live session through your invitation link, so the page can be reloaded without losing your seat; valid for 2 hours, not readable by scripts.
• admin_session — signed sign-in token for the site's administration; it is only ever set in the operator's own browser, never a visitor's; valid for 1 day, not readable by scripts.

No advertising cookies, no third-party tracking, and no third-party analytics run on this site.

IP address. Your IP address is used technically: to limit abuse (a temporary in-memory counter) and to sign the secure media delivery links. It is not recorded with a newsletter subscription, except for subscriptions made before September 24, 2026 (see above). Our hosting and delivery providers (Vercel, Bunny.net) may keep technical logs under their own policies.

What we don't do

We do not sell your information. We do not share it for advertising. We collect nothing beyond what is described above.

Payments

Payments are handled by external providers — Payhip, Square, and NOWPayments — on their own pages, under their own policies. No card data ever passes through or is stored on this site.

Your rights (Law 25, Québec)

You may request access to your information, its correction or deletion, and withdraw consent at any time. Write to connect@onlymatt.ca — we will answer within 30 days. The person responsible for the protection of personal information is the site operator, reachable at that same address.

Changes

Any change to this policy will be posted here with its date. A change affecting what we collect will not apply retroactively to what you already entrusted to us without your consent.