Skip to content

Privacy Policy

Last updated: April 12, 2026

01Who runs this site

This site is operated by Michael Dishmon, a sole proprietor based in the Pacific Time Zone. When this policy says “I” or “me,” that’s Michael. There’s one person behind this, and that person is accountable for how your data is handled.

02What I collect and why

Here’s a straightforward list of the data I collect, and the reason for each piece.

Name and email

Collected when you fill out the contact form, create an account, or purchase a product. Used to respond to your message, manage your account, and deliver what you bought.

Payment information

Processed entirely by Stripe. I never see or store your card number. Stripe handles PCI compliance. I receive a confirmation with the amount, product, and a Stripe customer ID.

Usage analytics

Collected via PostHog and Google Analytics 4 (GA4). This includes pages visited, time on site, browser type, approximate location (city-level), and referral source. The purpose is to understand which content is useful and which pages need work.

Account data

If you create an account, I store your email, display name, and purchase history in Supabase (hosted on AWS). This lets you access your purchases, download products, and manage your account.

03Cookies and tracking

This site uses cookies. Here’s what they do.

PostHog

Product analytics. Tracks page views, clicks, and session replays to help me understand how people use the site. You can opt out via your browser's Do Not Track setting.

Google Analytics 4

Traffic analytics. Collects anonymized usage data including page views, session duration, and traffic sources. Google processes this data under their own privacy policy.

Authentication cookies

Session cookies from Supabase Auth that keep you logged in. These are strictly necessary for the site to function if you have an account.

Stripe

Stripe sets cookies during the checkout process to prevent fraud and process payments. These are necessary for purchases to work.

04How I use your data

Your data is used to deliver the service you asked for. Specifically: to respond to contact form submissions, to process purchases and deliver digital products, to manage your account, and to improve the site based on aggregate usage patterns.

I do not sell your data. I do not share your email with third parties for marketing purposes. If I send you an email, it’s because you bought something, asked me a question, or explicitly signed up for updates.

05Third-party services

The following services process data on my behalf. Each has their own privacy policy.

Stripe

Payment processing. stripe.com/privacy

Supabase

Database and authentication. supabase.com/privacy

Vercel

Site hosting. vercel.com/legal/privacy-policy

PostHog

Product analytics. posthog.com/privacy

Google Analytics

Traffic analytics. policies.google.com/privacy

Resend

Transactional email. resend.com/legal/privacy-policy

06Data retention

Account data is kept as long as your account is active. If you delete your account, your personal data is removed within 30 days. Purchase records may be retained longer for tax and legal compliance.

Analytics data is retained according to each provider’s default retention periods (PostHog: 1 year, GA4: 14 months).

07Your rights

You can request a copy of your data, ask me to correct it, or ask me to delete it. Just email me. I’ll respond within a reasonable timeframe, typically a few days.

If you’re in the EU, you have additional rights under GDPR including data portability and the right to object to processing. If you’re in California, you have rights under the CCPA. I respect both regardless of where you live.

08Security

The site is served over HTTPS. Authentication is handled by Supabase with bcrypt password hashing and secure session tokens. Payment data is processed by Stripe and never touches my servers. I take reasonable measures to protect your data, but I also want to be honest: this is a one-person operation, not a Fortune 500 security team. If I ever discover a breach, I’ll notify affected users directly.

09Changes to this policy

If I make meaningful changes, I’ll update the “last updated” date at the top. For significant changes that affect how your data is handled, I’ll do my best to notify you via email if you have an account.

10Contact

Questions about this policy? Email me at hello@michaeldishmon.com. I read every email and respond personally.

$ michael dishmon / sole proprietor / pacific time zone