Last updated: 7/30/2026
We collect the information you provide when you create an account (name, email) and when you make a purchase (handled directly by Stripe — we never see or store your full payment details). We use this information to provide access to purchased programs, track your workout progress, and send program-related emails such as receipts, welcome messages, and progress reminders.
We do not sell your personal information. We share data only with the service providers required to run the platform: Supabase (authentication and database), Stripe (payment processing), Resend (email delivery), and our video hosting provider (secure video playback).
You can request deletion of your account and associated data at any time by contacting us. Workout progress and purchase records may be retained as required for tax and accounting purposes.
With your permission, we use a few tools to understand how the site is used so we can improve it. You choose whether these run — the banner on your first visit asks, and you can change your answer at any time using the Analytics preferences link at the bottom of any page. The site works exactly the same either way, and nothing optional loads before you choose.
Google Analytics 4 measures traffic, where visitors came from, broad device and browser type, which pages are viewed, and which pages lead to a purchase. Microsoft Clarity produces heatmaps and session recordings — pointer movement, clicks and scrolling — so we can see where the site is confusing. Vercel Analytics and Speed Insights measure aggregate traffic and page performance; these are cookieless and do not track you across sites.
The categories of information these tools may collect include: pages visited and the order you visited them, the site or link that referred you, approximate location derived from your IP address (we ask Google to anonymise the address), device and browser type, screen size, and how you interact with the page. We use this only to understand which parts of the site work and which do not.
What we mask. Session recordings are configured to mask text and form fields. Every signed-in and credential-entry area — logging in, signing up, password reset, email verification, your account pages, checkout, the admin area, and the training content you have purchased — is masked so its contents are replaced before anything leaves your browser. We do not intentionally send your name, email address, password, payment details, authentication tokens, account identifiers, or the contents of your account records to any of these tools, and we do not use them to identify you individually. Payment details are entered on Stripe's own checkout page, which these tools cannot see.
We do not use Google advertising features on this site. Advertising, remarketing and ad personalisation signals are switched off and stay off, whatever you choose.
These are third-party services with their own privacy practices, which we do not control. You can read them at Google, Microsoft and Vercel. No masking or configuration is perfect, and we are describing how we have set these tools up rather than making a guarantee about every possible circumstance. If you are under 18, please check with a parent or guardian before accepting analytics.
Questions about this policy? Contact us at owen@defensewithowen.com.