Legal

Privacy Policy

Last updated · 29 May 2026

1. What we collect

We collect the minimum data needed to deliver the course:

Email address — provided to Stripe at checkout, used for purchase receipt and graduation webinar invitation
Stripe Checkout Session ID — used to verify your purchase and grant access
Payment metadata from Stripe — amount, date, country code (no card numbers, ever)

2. What we don't collect

No tracking pixels
No third-party advertising cookies
No behavioral profiling
No card data (Stripe handles this; we never see or store it)
No name, phone, address — unless you put it in a support email yourself

3. Cookies and local storage

The bootcamp app uses your browser's localStorage to remember your progress and keep you logged in. Specifically:

bootcamp.token.v1 — your signed access token
bootcamp.lessons.v1 — cached lesson content
bootcamp.v1 — your day progress, streak, journal, and quiz answers

This is technical storage required for the app to work, not tracking. We do not use cookies for advertising or analytics.

4. Analytics

We use Plausible Analytics, a privacy-respecting service that counts page visits in aggregate without tracking individuals. Plausible does not use cookies, does not collect personal information, and is fully GDPR-compliant. Plausible's data policy describes what they record (essentially: page URL, referrer, country, device type — no PII).

5. Payment processing

All payments are processed by Stripe. We never see or store your card data. Stripe's own privacy policy governs how they handle your payment information.

6. Data sharing

We do not sell, rent, or share your data with third parties for marketing purposes. Your data is shared only with the operational service providers required to deliver the course (Stripe for payments, Netlify for hosting, Plausible for aggregate analytics).

7. Data retention

Purchase records (email, Stripe session ID, payment date, amount) are retained for approximately 7 years to meet tax and legal recordkeeping requirements in most jurisdictions. Aggregate analytics data is retained indefinitely but contains no PII.

8. Your rights

You can request a copy of the data we hold about you, or request deletion of your data, by emailing mikinabusiness@protonmail.com. Deletion of purchase records may not be possible if required for legal/tax compliance, but we'll delete everything we lawfully can.

9. Children

The Course is not intended for users under 18. We do not knowingly collect data from minors.

10. Changes to this Policy

We may update this Privacy Policy. Material changes will be communicated by email to the address used at checkout.

11. Contact

Privacy questions: mikinabusiness@protonmail.com