Privacy Policy
Last updated: October 10, 2026
This Privacy Policy explains how Note Hoppers, a brand of Hydra Constellation SRL, collects and uses personal information when you visit this website or buy from us.
1. Who we are (data controller)
Hydra Constellation SRL, Via Riace 76, 00118 Roma, Italy. Email: productadvice.info@gmail.com. Because we are established in the European Union, we process personal data under the EU General Data Protection Regulation (GDPR), and we also respect the privacy rights of US residents described below.
2. What we collect
- Contact and order details: your email address, the products you bought, order amounts, dates and order identifiers.
- Payment information: payments are handled by Stripe. We do not receive or store your full card number. Stripe shares limited details with us, such as the payment status, card brand and last four digits, and the country of the card.
- Device and usage data: IP address, browser and device type, pages viewed, referring page and similar data, collected through cookies and the Meta Pixel in your browser, and through the Meta Conversions API from our server. When we send purchase events to Meta from our server, your email address is hashed (converted into a coded string) before it is sent.
- Messages: what you write when you email us.
- Marketing preferences: whether you agreed to receive marketing emails.
We do not ask for, and do not knowingly collect, any information about children.
3. Why we use it and our legal bases (GDPR)
- To deliver your purchase, send download links, refresh links at /access and provide support: performance of a contract.
- To process payments, prevent fraud and keep tax and accounting records: performance of a contract and legal obligation.
- To measure and improve our ads and website with the Meta Pixel and Conversions API: your consent where required (EEA, UK and Switzerland), otherwise our legitimate interest in measuring advertising, subject to your opt-out rights.
- To send marketing emails through Klaviyo: your consent, which you can withdraw at any time with the unsubscribe link.
- To keep the website secure and working: legitimate interest.
4. Cookies and consent
We use essential cookies to run the site and checkout, and advertising cookies from Meta. Visitors from the European Economic Area, the United Kingdom and Switzerland see a consent banner, and advertising cookies and the Meta Pixel load only after you accept. You can change your choice at any time with the Your Privacy Choices link at the bottom of every page. Elsewhere, advertising cookies are on by default and you can turn them off with Your Privacy Choices or with Global Privacy Control.
5. Who we share data with (processors)
- Stripe (payment processing)
- Resend (transactional emails such as download links)
- Klaviyo (marketing emails, only with your consent)
- Meta Platforms (advertising measurement through the Meta Pixel and Conversions API)
- Lovable and Supabase (website hosting and database)
These providers process data on our behalf under contracts that require them to protect it. We may also disclose data when the law requires it. We do not sell personal information for money.
6. How long we keep it
Order and invoice records: for as long as Italian tax and accounting law requires (generally 10 years). Support emails: up to 3 years after the last contact. Marketing data: until you unsubscribe or withdraw consent. Advertising cookie data: according to the cookie's lifetime and Meta's own retention.
7. International transfers
Some of our providers are based in or process data in the United States and other countries outside the EEA. Where this happens, transfers rely on adequacy decisions such as the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
8. Your rights under GDPR
You can ask to access, correct, delete, restrict or port your data, object to processing based on legitimate interest, and withdraw consent at any time. You can also complain to a supervisory authority, in Italy the Garante per la protezione dei dati personali (www.garanteprivacy.it), or the authority where you live.
9. Your rights as a US resident
Depending on your state, including California, you may have the right to know what personal information we collect and how we use it, to delete it, to correct it, and to opt out of the sharing of personal information for targeted advertising. We don't sell personal information for money. To opt out of sharing for advertising, use the Your Privacy Choices link at the bottom of every page, turn on Global Privacy Control in your browser, or email us with the subject line "Do not share my information." We will not discriminate against you for using these rights. You may use an authorized agent, and we may need to verify your request with your purchase email.
10. Children's privacy
This website and its products are for parents, caregivers and teachers. The site is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, email us and we will delete it.
11. Security
We use reputable providers, encrypted connections and limited access to protect your data. No method is perfectly secure, but we work to keep your information safe.
12. Changes
We may update this policy. The date at the top shows the latest version.
13. Contact
Hydra Constellation SRL, Via Riace 76, 00118 Roma, Italy. Email: productadvice.info@gmail.com.