Privacy policy
Last updated: September 9, 2026
This policy describes what Envel (“we”, “us”, or “our”) processes when you visit this site, buy a good, or open a purchase. It is short because the site keeps very little.
1. What we process
- Email address: you give it to Polar at checkout, and to us when you sign in to a purchase. We use it to find your orders at Polar and to send you a sign in link. We send nothing to an address that has no purchase, and nothing else to one that has.
- Order details: Polar holds your orders. What you bought, when, the amount, your billing name, and, if you gave one, your company name and tax id. We read them from Polar to show your purchases and to check that a purchase is still active. We keep no copy: every purchase page and every download reads them from Polar again.
- The session cookie: after a purchase or a sign in, a cookie named
goods_sessionkeeps you signed in for 30 days. It holds your email address and an expiry, signed so it cannot be altered, and nothing else. It is not readable by scripts and, in production, only sent over HTTPS. The sign in link we email you is signed, works for 15 minutes, and opens that cookie once you press Continue. Signing in sets no other cookie. - Install tokens: the install command on your purchase page carries a token tied to your email address and your order. It is signed, expires after 24 hours, and is not stored anywhere by us.
- Rate limits: to keep the sign in form and the checkout from being abused, we count sign in requests per email address and per IP address, and checkouts per IP address, for 10 minutes. The counts live in the memory of the server that handled the request, are never written down, and vanish with it.
- Analytics: where enabled, we use PostHog to see how the site is used. It records the pages you view and leave, and these events: a checkout started or failed, the welcome page viewed, an install command copied, and a download started. Clicks, form fields, and page content are not recorded, and we do not record sessions. Events leave through this site’s own origin, which forwards the event and your IP address to PostHog and never your cookies. PostHog keeps an identity cookie named after our project key (
ph_…_posthog) and local storage in your browser to tell visits apart. On your purchase page that identity is tied to your email address so a purchase can be connected to the visit that led to it, and signing out resets it. Checkout ids and sign in tokens are masked out of a page address before it is sent. If your browser sends Do Not Track or Global Privacy Control, nothing is captured at all.
2. Who else sees it
- Polar: the merchant of record. Payment, invoices, taxes, and refunds happen there under Polar’s privacy policy.
- Our email provider: delivers the sign in emails.
- Vercel: hosts the site and sees the IP address of every request, as any host does.
- PostHog: receives the analytics described above, including your IP address, if enabled.
We do not sell your data, and we share it with no one else unless the law requires it.
3. How long
We keep nothing on our own servers beyond the request that uses it, except the rate limit counts, which last 10 minutes in memory. The session cookie lasts 30 days, or until you sign out. Polar keeps your orders under its own retention rules, and PostHog keeps analytics data under its own.
4. Your rights
Depending on where you live, you may ask what we hold about you, ask us to correct it, or ask us to delete it. Write to hello@envel.co from the email address you used at checkout. Because your orders live at Polar, a deletion request reaches Polar too. To opt out of analytics, turn on Do Not Track or Global Privacy Control in your browser; we honour both.
5. Children
This site is not intended for children under 13, and we do not knowingly process their data.
6. Changes to this policy
We may change this policy. The date at the top says when it last changed.