Privacy policy
Last updated: 18 October 2026. StrategistKit is operated by LAKI AS (org. no. 917 220 808), Oslo, Norway. LAKI AS is the data controller for personal data processed on strategistkit.com. Contact: [email protected].
What we collect, and why
The email list. If you sign up for the StrategistKit list — to receive a free starter skill, the monthly free skill, the Sunday digest, or a bundle waitlist notification — we process your email address, your chosen starter skill, and your signup context. The legal basis is your consent (GDPR art. 6(1)(a)), given through a double opt-in: you must click a confirmation link before you’re added to the list. You can withdraw consent at any time with the unsubscribe link in every email.
Email delivery. The list is managed in Brevo (Sendinblue SAS, France), our email service provider and data processor. Brevo processes your data within the EU under a data processing agreement. Emails from this site — such as the link to set your account password and delivery emails — are also sent through Brevo.
Accounts and purchases. Memberships and bundles are sold on this site. Checkout is run by Stripe through Stripe Managed Payments: Stripe (Link) is the merchant of record, handles payment, tax, receipts and refunds, and its own privacy policy applies. We never see your card details. When you buy, we create an account from the email address you give at checkout and store: your email address, your Stripe customer ID, your membership status and renewal date, the bundles you bought, your credit history including which skills you fetched, and any MCP access tokens (stored hashed). The legal basis is the contract with you (GDPR art. 6(1)(b)). You can manage or cancel your membership from your account page.
Downloads. Free-skill download links are tokenized and rotate monthly. We don’t track who downloads free skills beyond standard server logs. For members, the skills you fetch with credits are recorded in your account.
No tracking by default. We don’t load analytics or set non-essential cookies without your consent. If analytics are enabled, they run consent-gated with IP anonymization. If you have accepted analytics, your Google Analytics client ID is attached to your checkout so we can see which pages lead to a purchase.
Hosting. The site runs on servers at Hetzner in Germany and is delivered through Cloudflare, which processes technical data such as your IP address to deliver and protect the site.
Directory badge. The footer shows a “Featured on” badge that links to thesaasdir.com. The image is served from this site, so thesaasdir.com receives nothing unless you click the link.
Single skills on marketplaces
Single skills are sold on PromptBase and Agensi, whose own privacy policies apply. Links to PromptBase carry a referral parameter so the marketplace knows you came from us; the marketplace does not share your identity with us.
Retention and your rights
We keep list data for as long as you’re subscribed, and delete it when you unsubscribe (Brevo retains suppression entries to honor your opt-out). We keep account data for as long as your account exists, and purchase records for as long as accounting law requires. You have the right to access, correct, export and delete your data, and to complain to Datatilsynet (the Norwegian Data Protection Authority). Write to [email protected] and we’ll handle it within 30 days.