Legal

Privacy Policy

Last updated 2026-05-11

Who we are

This site (glenneggleton.com) is operated by Glenn Eggleton, a sole proprietor based in Ontario, Canada. "We," "us," and "our" refer to that operator.

What we collect

  • Account information: when you sign up, we receive your email address and any profile details (name, avatar) you provide through your authentication method.
  • Purchase information: when you buy a course, we receive a Stripe customer ID, the line items, and a payment status. We do not see or store full card numbers or CVCs — Stripe handles those directly.
  • Course progress and entitlements: the courses you've purchased and the lessons you've accessed are stored against your user ID.
  • Usage analytics: page views, clicks, and feature events. These are tied to a PostHog distinct ID, which may be associated with your user ID after sign-in.
  • Logs: standard request metadata (IP address, user agent, timestamp, requested path) collected by our hosting provider for debugging, security, and abuse prevention.

Who processes your data

We rely on the following sub-processors. Each has its own privacy policy that governs the data it handles on our behalf:

How we use your data

  • Operating the site, courses, and dashboard.
  • Processing payments and granting course entitlements.
  • Sending transactional email related to your account or purchases.
  • Improving the product through aggregate analytics.
  • Preventing fraud and abuse.

We do not sell your personal data, and we do not use it for third-party advertising.

Cookies and similar technologies

  • Session cookies set by Clerk to keep you signed in.
  • Analytics identifiers set by PostHog (cookies and/or local storage) to recognize a returning browser.
  • Theme preference stored in your browser's local storage — never leaves your device.

Retention

Account, entitlement, and progress data is retained while your account is active. Payment and invoice records are retained for as long as required for tax and accounting purposes (typically up to 7 years under Canadian law). Analytics events are retained for up to 12 months. Request logs are retained according to Vercel's defaults.

On request, we will delete your account and associated personal data within 30 days, except where we are legally required to retain certain records (for example, invoices for tax purposes).

Your rights

Depending on your jurisdiction (PIPEDA in Canada, GDPR in the EU/UK, CCPA/CPRA in California, and similar laws elsewhere), you may have the right to access, correct, port, or delete your personal data, and to withdraw consent for analytics. To exercise any of these rights, email geggleto@gmail.com from the address on your account.

International transfers

Our sub-processors operate in Canada, the United States, and other regions. By using the site you understand that your data may be transferred to and processed in those regions, subject to appropriate safeguards.

Contact

Questions, data requests, or deletion requests: geggleto@gmail.com.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by a new "Last updated" date at the top of this page.