Last updated July 2026

Privacy Policy

Roots & Mirrors ("we," "us") operates rootsandmirrors.com. This policy explains what information we collect, why, and how we handle it. We serve an adult audience of youth leaders, parents, pastors, and educators, and we do not knowingly collect information from children under 13.

Information we collect

When you create an account, we collect your email address and a securely hashed password. When you buy a lesson, our payment processor collects your payment details; we receive a record of the purchase but never see or store your full card number. We also keep a record of which lessons you own so you can download them. If you subscribe to our email list, we store your email address.

We use analytics to understand how the site is used, such as which pages are visited and which lesson links draw interest.

How we use it

We use your information to provide your account and downloads, process purchases, send requested emails, respond to questions, and keep the site secure and working. We do not sell your personal information.

Service providers

We rely on trusted providers to run the site, and share only what each needs to do its job: Stripe for payments, Supabase for accounts and file storage, Resend for email delivery, Cloudflare for hosting and security, and Google Analytics for aggregate site usage. Each provider has its own privacy practices.

Your choices

You can unsubscribe from emails at any time using the link in any message. You can ask us to access, correct, or delete your account information by emailing us. We keep purchase records as needed for accounting and legal purposes.

Security

We use encrypted connections and access controls to protect your information. No method of transmission or storage is perfectly secure, but we work to protect your data.

Contact

Questions about this policy? Email elias.phillips@rootsandmirrors.com.

This policy describes the current Roots & Mirrors site structure: adult accounts, digital lesson downloads, email signup, and third-party payment processing.