Last updated 13 August 2026
This site is small and so is its appetite for your data. We collect what is needed to give you an account, deliver what you bought, answer your messages, and understand in rough terms how the site is being used. We do not sell your information, we do not share it for advertising, and we run no third-party trackers.
2legged2human.com is operated by Samuel Moore, who writes and teaches as Samuel EagleHeart, trading as 2LEGGED2HUMAN, PO Box 179, Telluride, CO 81435, USA. For anything to do with your data, write to sam@2legged2human.com.
What we collect, and why
Your account
When you sign up — for a free item or a paid one — we store your first and last name, your email address, your username, and an encrypted form of your password. We never store the password itself and cannot read it. We keep this so that you can sign in and so that your purchases stay attached to you.
Purchases
For each order we keep a record of what you bought, when, how much you paid, any discount code used, and a reference number from our payment processor. We also record that you ticked the box asking for immediate access, the moment you ticked it, and the exact wording you were shown — that is the evidence that the sale was made on the terms you agreed to, and it protects you as much as us. We keep these because they are our sales records and we are required to.
Your card details never reach this site. Payments are processed by Stripe, and the card form at checkout is Stripe’s own. We receive confirmation that a payment succeeded, along with the card’s brand and last four digits for your receipt — never the full number, expiry, or security code. Stripe handles your payment information as an independent controller under its own privacy policy, at stripe.com/privacy.
Messages you send us
The contact form asks for your name, email, and message. That is stored on this site and emailed to us so we can reply. We keep correspondence for as long as it is useful and then delete it.
How the site is used
We run our own analytics on our own server. Nothing is sent to Google Analytics, Meta, or any advertising network, and there is no cross-site tracking of any kind.
What we record is: pages viewed, the page that referred you, a rough device and browser type, which audio tracks were played, which files were downloaded and their names, and completed purchases. Where you are signed in, these are linked to your account so that we can see how far people get through the course and where they stop.
Two deliberate limits on this. First, we do not keep your email address against analytics events — it is stripped automatically. Second, IP addresses are shortened before they are stored: we drop the last part of the address, which leaves enough to tell roughly what part of the world a visit came from and not enough to identify a household. The full address is never written to our records.
Our web host also keeps standard server logs, including full IP addresses, for security and troubleshooting. These are kept briefly and are not used for analytics.
Cookies
We use only the cookies the site needs to work:
- Sign-in cookies, set by WordPress when you log in, so that you stay logged in as you move between pages.
- A session identifier for our own analytics, so that a series of page views can be counted as one visit rather than many.
- Checkout cookies set by Stripe on the payment step, which Stripe uses to process the payment and prevent fraud.
There are no advertising or profiling cookies. You can block or clear cookies in your browser; if you block the sign-in cookies you will not be able to log in.
We use your email address to send you the things you need: your receipt, your account details, password resets, and occasional notices about the materials you own or about changes to this site. These are part of the service and are not marketing.
If we ever send news, offers, or announcements about new work, every one of those will carry an unsubscribe link and unsubscribing will not affect your access to anything you have bought. We do not sell or rent our email list.
Who else sees your data
We do not sell, rent, or trade personal information. It is shared only with the services that make the site run, and only as far as each of them needs:
- Stripe — payment processing, fraud prevention, and refunds.
- Our web hosting provider, a company based in the United States, which stores the site and its database and keeps the server logs described above. We will name our current host on request.
- Mailgun, which delivers the site’s outgoing email — receipts, password resets and account notices.
We would also disclose information if the law required it, or to protect the site against fraud or abuse. If the site or the business behind it ever changed hands, your data would pass to the new owner under this same policy, and we would tell you first.
How long we keep it
Account details are kept for as long as your account is open, because your purchases depend on them. Order records — what was bought, when, the amount, and the payment reference — are kept for seven years to meet tax and accounting requirements, even after an account is closed. This is the one thing we cannot delete on request, and it never includes your card details, because we never hold them. Analytics records, already stripped of email and with shortened IP addresses, are kept indefinitely as usage history. When an account is deleted, its analytics records are detached from it: the account reference, the order references, and anything else that could lead back to you are removed, and what remains is a page view or a download with no person attached. Contact-form messages are deleted once they are no longer needed.
Your rights
Whatever your location, you may ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything that is wrong;
- delete your account and personal data, subject to the order records we have to retain;
- stop sending you email that is not essential to your purchase.
Email sam@2legged2human.com from the address on your account and we will deal with it within 30 days. There is no charge, and asking will never affect your access to what you have bought.
If you are in the UK, the EEA, or Switzerland, our basis for handling your data is: performing our contract with you (your account, your purchases, the emails that go with them); our legitimate interest in understanding how the site is used and in keeping it secure; and our legal obligations for tax and accounting. You also have the right to object to processing, to ask us to restrict it, to receive your data in a portable form, and to complain to your national data protection authority.
If you are in California, we confirm that we have not sold or shared personal information in the preceding twelve months and do not do so, and that you will never be treated differently for exercising any of the rights above.
Where your data is held
The site and its database are hosted in the United States. If you are reading this from elsewhere, your information is transferred to the United States and handled under this policy.
Children
This site is written for adults, and we do not knowingly collect information from anyone under 13. If you are between 13 and 18, please use it with a parent or guardian’s involvement — and see the note about purchases in our terms. If you believe a child has given us their details, write to us and we will delete them.
Security
The site is served over an encrypted connection, passwords are stored hashed, and purchased files are delivered only to signed-in accounts that own them. No system is perfect, but we keep the software current and the amount of data we hold small on purpose.
Changes to this policy
If our practices change, we will revise this page and update the date at the top. Where a change is significant, we will tell you by email rather than relying on you to notice.
Questions about any of this: sam@2legged2human.com, or the contact page. See also our terms.