Privacy Policy

Herculean Male operates the website at https://herculeanmale.com and provides fitness education courses and related digital content. For privacy purposes, we are the data controller of your personal information.

Contact: support@herculeanmale.com

Information you provide

• Account data: email address and password (hashed) when you register.
• Payment data: processed entirely by Stripe. We never store card numbers or banking details.
• Communications: messages you send us via email or the contact form.
• Newsletter: email address if you subscribe to the Herculean Brief.

Information collected automatically

• Usage data: pages visited, session duration, referring URLs.
• Technical data: IP address, browser type, device type, operating system.
• Cookies: authentication session tokens and CSRF tokens required for secure login. See Section 7.

• To create and manage your account.
• To process payments and deliver purchased content.
• To send transactional emails (receipts, password resets, email verification).
• To send the Herculean Brief newsletter if you subscribed (you may unsubscribe at any time).
• To improve our platform based on aggregate usage patterns.
• To comply with legal obligations.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We process your data based on:

• Contract performance: to deliver the course you purchased.
• Legitimate interests: to operate, secure, and improve the platform.
• Consent: for newsletter communications (withdrawable at any time).
• Legal obligation: to comply with applicable tax and financial regulations.

We share data only with the following categories of service providers, under strict data processing agreements:

• Stripe: payment processing. Stripe Privacy Policy
• Amazon Web Services (AWS): cloud infrastructure, email delivery (SES), and video storage (S3/CloudFront).

We do not share data with advertisers or data brokers.

We retain your account data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law (e.g., financial records for tax purposes — retained for 5 years per Mexican fiscal regulations).

We use the following cookies:

• __Secure-authjs.session-token: your authentication session. Required for login. Expires with your session or after 30 days.
• __Host-authjs.csrf-token: security token preventing cross-site request forgery. Required for forms.
• __Secure-authjs.callback-url: remembers where to redirect after login.

We do not use advertising cookies or third-party tracking pixels. For more detail see our Cookie Policy.

Under Mexican privacy law, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Cancellation: request deletion of your data.
• Opposition: object to processing for specific purposes.

To exercise any of these rights, email us at support@herculeanmale.com with the subject line "Privacy Request". We will respond within 20 business days.

We implement industry-standard security measures: HTTPS/TLS encryption in transit, bcrypt password hashing, TLS-encrypted database connections, and restricted access to production systems. No transmission over the internet is 100% secure — if you believe your account has been compromised, contact us immediately.

Herculean Male is intended for users 18 years and older. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from a minor, contact us and we will delete it promptly.

We may update this policy periodically. When we do, we will update the "Last updated" date at the top and notify active users by email for material changes. Continued use of the platform after changes constitutes acceptance.

Questions about this policy? Reach us at support@herculeanmale.com.