Privacy

The short version: everything here but the chat works without an account, and the tools keep their data on your device. Visits are counted, by this site and by Cloudflare, which delivers it. If you sign in, what is stored is the name, email address and picture on your Google account, plus whatever you choose to keep with the account, and you can delete all of it yourself at any time. If you write through the chat, your message is kept so that it can be answered.

What is collected

• Page views and tool use, counted by this site on its own server. What each record holds is set out below.
• Cloudflare Web Analytics: a small script from Cloudflare that measures how pages load in your browser and reports it to Cloudflare. It does not use cookies. Cloudflare’s own privacy policy covers what it does with that.
• A session cookie when you sign in, which keeps you signed in until you sign out. Cloudflare may set cookies of its own for security and performance. Reading the site signed out sets none from this site.
• The session cookie is read for one further purpose: if it belongs to the person who runs the site, the visit is left out of the counts.
• What you type into the Today page, and which lessons on the path you have read to the end, stay in your browser. If you sign in, your Today record and those lessons are kept with your account instead.
• If you write through the chat, what you send, set out under The chat below.
• If you buy the supporter pack, a record of that payment, set out under Payments below.

Usage counts

To know which pages help and which tools get used, the site records page views and tool steps. Each record holds the page path, the type of device and browser, the country and city Cloudflare reports for the connection, the site you came from, and a visitor label made by hashing your IP address and browser with a secret that changes every midnight UTC. The address itself is not kept in the clear. The label cannot be reversed, and the same person is a different label tomorrow. Raw records are deleted after ninety days; daily totals are kept.

Automated visitors — crawlers, preview bots, uptime checks — are recorded with a flag and left out of every figure, and so are visits from the person who runs the site, so that the numbers are true.

The browser also stores one timestamp of its first visit, used to report which of four broad ranges your tenure falls in. It is a label, not an identifier.

Your data in the tools

The Today page stores your start date, your daily check-ins and any notes in your browser’s own storage. You can export it as a file, import it on another device, or delete it with one control on that page. Clearing your browser’s site data also removes it. If you sign in, the Today page keeps the record with your account instead, and offers to bring in the one this browser holds.

The path remembers which lessons you have read to the end, so it can show you where to carry on. Signed out, that list stays in your browser. Signed in, it is kept with your account, along with any lessons this browser had already marked.

The chat

The chat button on every page writes to the person who runs the site. Writing takes an account, so that every conversation has someone to answer and a reply always has somewhere to reach you. It is read and answered by that one person, not around the clock, and it is not a crisis service: the help page lists people you can call.

What is kept: each message, the time, the page you wrote from, the topic if you picked one, and the replies. The conversation belongs to your account and is the same one your account page shows.

When you write, the person who runs the site gets an email with your message, delivered by Brevo (see Email). Your connection’s address is used, in memory and never stored, to limit how many messages can be sent in a short time.

Deleting your account deletes its messages, yours and the replies. Or write and ask.

Accounts

You need an account only to write in the chat. Signing in keeps your record with your account instead of with one device.

Sign-in is through Google. Stored against you: your email address, the display name and profile picture on your Google account, an identifier for that account, and the times you first signed in and last signed in. Google also returns sign-in tokens, which are kept with the record. Nothing is requested beyond your name and email address, and no Google service is read on your behalf.

While you are signed in, the days you mark, your line, your rule and the lessons you finish are stored with your account. Messages you send through the site, and replies to them, are stored too, and so are the email settings described below.

Deleting is immediate and yours to do: Settings, then Delete your account, removes the account, its record, its finished lessons and its messages outright, with no grace period and no copy kept. Records of payments stay, because payments have to be accounted for, but their link to the account is removed. You do not have to email anyone to ask. Signing in to the private dashboard is the same mechanism, restricted to the operator’s own addresses.

Email

The site emails you only if you ask it to. Signed in, you can turn on an evening note at an hour you choose, which asks how the day went and lets you mark it with one click. With it come a weekly note on Sundays, which you can turn off on its own, and a short note when you reach seven, fourteen and thirty days. If you write to the person who runs the site, an email tells you when there is a reply, unless you turn that off.

These come from [email protected] and are delivered by Brevo, an email delivery service, which receives your address and the message in order to send it. Every one carries a link that stops them. If you email us, we keep the thread only as long as it takes to answer.

Payments

The supporter pack is sold through Dodo Payments, the merchant of record: Dodo takes the payment, handles tax and receipts, and handles your card details. This site never sees them. Dodo’s own privacy policy covers what it keeps.

This site keeps a record of each payment: Dodo’s reference for it, what was bought, the amount and currency, whether it went through, the email address given at checkout, the time, and, if you were signed in, which account it belongs to.

To save typing, the checkout opens with some details filled in: the amount you picked, the country Cloudflare reports for your connection (you can change it there), and, if you are signed in, your name and email address. Dodo asks for the rest itself.

Hosting

The site is served from a server in the European Union, behind Cloudflare, which sees connections in order to deliver the site and provides the Web Analytics described above. Its handling of both is described in Cloudflare’s own policies.

Who to ask

[email protected]. See also the terms.