Privacy policy — Mageaustralia

Draft. This privacy policy is a working draft pending legal review. The substantive practices (what we collect, how we use it) are accurate; the boilerplate framing will be tightened before public launch.

Mageaustralia (Mage Australia Pty Ltd) respects your privacy. This policy explains what we collect, how we use it, and your rights.

What we collect

  • Account data — email address, name, and an encrypted password when you register a customer account.
  • Purchase data — order history, license tokens issued, and the IP address used at purchase (for fraud prevention).
  • Composer download events — when your installation pulls a module from packages.mageaustralia.com.au, we log the package, version, customer ID, and timestamp. Used for license auditing and update telemetry; never sold or shared.
  • Server logs — IP address, user agent, request path. Retained 30 days for security and abuse investigation. Not joined with account data unless we are investigating a specific incident.

What we don't collect

  • No third-party advertising trackers. The site is free of Facebook Pixel, Google Ads tags, and similar.
  • No persistent identifiers across sites. We do not participate in cross-site behavioural targeting.
  • No payment card data on our servers. Stripe handles all card information.

Cookies and analytics

We use minimal first-party cookies for session management (logged-in users) and cart state. We do not use cookies for tracking or advertising. Aggregate page-level analytics are collected via a privacy-respecting tool that does not set cookies or persist visitor identifiers — see the cookie policy for details.

Sharing

We share data with the following processors strictly to operate the service:

  • Stripe — payment processing and subscription billing
  • Cloudflare — content delivery, edge caching, and DDoS protection
  • Fly.io — backend hosting (Sydney region)
  • An email-relay provider — transactional email (order receipts, password resets)

We do not sell or rent your data to anyone, ever.

Your rights

You can request a copy of your data, correct it, or have it deleted by emailing hello@mageaustralia.com.au. We respond within 30 days. EU and UK residents have rights under GDPR / UK GDPR; Australian residents under the Privacy Act 1988.

Retention

Account data is kept while your account is active and for 7 years after closure (Australian taxation requirements for sales records). License tokens are revocable on account closure. Server logs are kept for 30 days.

Contact

Mage Australia Pty Ltd, Melbourne, Australia. Privacy questions: hello@mageaustralia.com.au.

Last updated: 2026-04-25. This policy will be versioned and changes summarised here when material updates are made.