HAND THERAPY TOOLBOX

Privacy Policy

Effective October 8, 2026

This policy explains what the Hand Therapy Toolbox, operated by Alex Salinas Villar, OTR/L, collects and how it is used.

What is collected

• Your email address, when you sign in. It identifies your account and receives your sign-in codes.
• Purchase record: that you bought access, the amount, the date and Stripe’s reference for the payment.
• Saved protocols: the protocols you bookmark.
• Sign-in sessions: when each of your devices signed in, so the two-device limit can be applied. Sign-in codes and session tokens are stored only in scrambled (hashed) form.
• Technical logs: the hosting provider records standard request data such as IP address and browser type to deliver and protect the site.

What is not collected

No passwords: sign-in uses emailed codes. No card details: payment is entered on Stripe’s page and never reaches this site. No advertising or analytics trackers. The only cookie is the one that keeps you signed in.

How it is used

To sign you in, give you the access you paid for, remember your saved protocols, answer support requests and keep the service secure. Your information is not sold or used for advertising.

Who processes it

• Cloudflare hosts the site and its database.
• Stripe processes payments.
• Resend delivers sign-in emails.

Each handles your information under its own privacy policy and only to provide that service.

How long it is kept

Account and purchase records are kept for as long as your account exists and as needed for tax and accounting. Sign-in codes expire within minutes; sessions expire after 30 days.

Your choices

Email support@handtherapytoolbox.com to ask what is held about you, to correct your email address, or to delete your account. Deleting an account ends access to the Toolbox.

Children

The Toolbox is for clinicians and students and is not directed to anyone under 18.

Changes

If this policy changes, the effective date above will be updated.