Privacy
Last updated 22 August 2026.
The Tayyibat Code is run by Samah Bensalem. This page says plainly what is collected and why. The short version: there is no advertising network on this site, nothing is sold to anyone, and the only personal data held is what you typed in yourself.
What is collected
- Your email address, if you ask for the starter pack or send a message. It is used to send you what you asked for, and to reply.
- Your name and message, if you use the contact form.
- Payment details — never by us. Card payments are handled entirely by Stripe. Your card number is never sent to this site and we never see it. We receive only the fact that an order was paid, the email you gave Stripe, and which edition you bought.
- Standard server logs kept by our host, Netlify, including IP address and browser type. These are used to keep the site running and to spot abuse.
- How this site is used. We use Microsoft Clarity to see which pages people open, which language they read in, and where a page loses them. Clarity also records a playback of the page — clicks, scrolling and mouse movement — so we can see where the site is confusing. What you type is masked and is not recorded, and the recording is of the page, not of you: we do not know who you are from it. It sets a cookie to tell one visit from the next. If your browser sends a “Do Not Track” signal, none of this runs at all.
What is not collected
There is no advertising network on this site, nothing is sold or shared for advertising, and nothing follows you to other sites. The measurement described above is used to improve this site and nothing else. The free app stores your journal, streaks and settings on your own device — it works offline and requires no account.
Who else sees it
Only the services needed to run the thing: Stripe for payment, Netlify for hosting and for receiving form submissions, and Microsoft Clarity for the usage measurement above. Each handles data under its own terms. Nothing is sold, rented or shared for advertising.
How long it is kept
Email addresses are kept until you ask to be removed. Order records are kept as long as tax law requires. Server logs are kept on our host's ordinary schedule.
Your choices
You can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted — including where you are covered by the GDPR or the CCPA. Every email we send has an unsubscribe link, and unsubscribing takes effect immediately. Use the contact form and it will be done.
Children
This site is not intended for children under 13, and we do not knowingly collect anything from them.
Changes
If this page changes materially, the date at the top changes with it.