Privacy Policy

Effective date: November 9, 2026

Chinggis Mindset ("we", "us") runs the video lesson website at chinggis-mindset.com. This policy explains what personal data we collect, how we use it, and the choices you have. Questions: support@chinggis-mindset.com.

Data we collect

  • Account data: your email address and name. If you sign in with Google, also your Google profile picture.
  • Password: if you set one, we store only a salted one-way hash, never the password itself.
  • Sign-in codes: one-time codes we email you, stored hashed and valid for 5 minutes.
  • Sessions: for each signed-in device we store a session record with its IP address and browser user agent.
  • Purchases: which lessons your account can watch.
  • Cookies: a session cookie that keeps you signed in and a language cookie that remembers your language. We use no advertising or analytics cookies.

Google user data

If you choose "Sign in with Google", we request only the openid, email and profile scopes. From Google we receive your email address, name, profile picture and a Google account identifier.

  • We use this data only to create your account and sign you in.
  • We store the tokens Google issues at sign-in only to keep that sign-in working. We do not use them to access any other Google data.
  • We do not sell Google user data and do not use it for advertising.
  • We do not transfer Google user data to anyone except the service providers listed below, as needed to run the site, or when the law requires it.
  • No person at Chinggis Mindset reads your Google data except to give you support you ask for, or for security or legal reasons.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove our access at any time in your Google Account permissions.

How we use data

  • To sign you in and keep your account secure.
  • To give you access to the lessons you bought.
  • To keep one active device per account: signing in on a new device signs out the others.
  • To email you sign-in and password reset codes.
  • To answer your support requests.

Service providers

We share data only with providers that run parts of the site for us:

  • Cloudflare: hosting, database and abuse protection.
  • Resend: sending sign-in code emails.
  • Bunny.net (Bunny Stream): video delivery. It receives your IP address when you play a video.
  • Google: sign-in, if you use Sign in with Google.

These providers may process data outside Mongolia.

Retention and deletion

We keep your data while your account exists. Sessions expire after 30 days. To delete your account, email support@chinggis-mindset.com from the account's address. Deleting the account removes your profile, sessions, linked sign-in methods (including Google tokens) and purchase records. You can also ask us for a copy of your data or to correct it.

Security

All traffic uses HTTPS. Passwords and sign-in codes are stored hashed. No system is perfectly secure, but we limit the data we keep to what the site needs.

Children

The site is not directed to children under 13, and we do not knowingly collect their data.

Changes

We will post any change on this page and update the effective date above.