Privacy Policy

Last updated: 21 April 2026.

This page explains what data Faceless collects, why, and who it touches. If anything here is unclear, email [email protected] and we will explain it in plain English.

Who Runs This Site

Faceless is a brand operated by WebMedic Internet Sdn Bhd (201601040346), a Malaysian company.

Registered address: Level 11, Menara KEN TTDI, 37, Jalan Burhanuddin Helmi, Taman Tun Dr Ismail, 60000 Kuala Lumpur, Malaysia.

Contact: [email protected].

What We Collect

When you subscribe to the newsletter:

Your email address (stored in Brevo, our email platform)
The page you subscribed from, and the source (newsletter form, quiz, exit popup)
Quiz answers and result profile, if you took the quiz

When you buy a product:

Billing name and email (handled by Stripe)
Payment method details (card, wallet). We never see or store your full card number. Stripe does.
The product and amount you purchased

When you just visit the site:

IP address and user-agent (via Cloudflare, for DDoS protection and rate limiting)
Anonymized page analytics via Google Analytics 4
Conversion events via Meta Pixel (Facebook/Instagram ad tracking)

How We Use It

Deliver your purchase. Send the download link to your email right after checkout.
Support. Reply when you email us. Troubleshoot broken links, bad downloads, refund requests.
Marketing emails. Send the free weekly newsletter and occasional product emails. Every email has a one-click unsubscribe link. Unsubscribe once and you’re off the list forever, no “are you sure” loop.
Conversion tracking. Measure which pages and ads drive purchases so we can stop running ones that don’t work.
Spam and abuse prevention. Block IPs that hammer the newsletter form or attempt to probe checkout.

We do not sell your data. We do not rent it. We do not swap it with other newsletters.

Third Parties We Use

Your data flows through these services. Each has its own privacy policy.

Stripe (payments) — stripe.com/privacy
Brevo (email delivery and newsletter) — brevo.com/privacy
Cloudflare (hosting, DNS, DDoS) — cloudflare.com/privacypolicy
Google Analytics 4 (site analytics) — policies.google.com/privacy
Meta (Facebook Pixel and Conversions API) (ad measurement) — facebook.com/privacy/policy

We picked each of these because they are industry-standard and have clean privacy track records. If you want zero analytics tracking, use a browser with tracker blocking (Firefox, Brave, Safari) or an ad blocker. The site works fine either way.

Cookies

The site sets two kinds of cookies:

Analytics cookies (Google Analytics 4) — anonymous session tracking.
Advertising cookies (Meta Pixel) — conversion measurement for our Facebook and Instagram ads.

No functional cookies are required to use the site. No data is persisted in localStorage beyond a 7-day popup cooldown flag.

Your Rights

You have the right to:

Access the data we hold about you. Email us and we’ll send it within 14 days.
Delete your data. Email us and we’ll remove you from Brevo and any other system we control within 14 days. Stripe keeps transaction records for tax and regulatory reasons (usually 7 years), which we cannot override.
Correct your data. Reply to any email with the correction and we’ll update it.
Object to marketing. One-click unsubscribe in any email does this immediately.

To exercise any right, email [email protected] with the word “privacy” in the subject line.

If you are in California (CCPA): You have the right to know, delete, and opt out of the sale of personal info. We do not sell personal info. The two rights above (access, delete) cover the rest.

If you are in the EU or UK (GDPR): The lawful bases we rely on are your consent (marketing emails, analytics) and contract (delivering a product you paid for).

Data Retention

Newsletter subscribers: kept until you unsubscribe, plus 30 days of backup retention.
Customers: kept for 7 years for tax records (Stripe and our own receipts).
Quiz respondents: kept until you unsubscribe. Quiz answers are linked to your email for segmentation.
Analytics: Google Analytics default (14 months), Cloudflare logs (30 days).

Changes to This Policy

We update this page when we add a tool, change a vendor, or a law requires it. The “Last updated” date at the top reflects the most recent change. Material changes will be emailed to newsletter subscribers.

Questions

Email [email protected].