What we keep,
and what we do not
The short version: we keep an email address, and whatever you chose to pay. We do not keep a record of who watched the Monday hour, and we never sell anything to anyone.
What we collect, and why
- Your email address. So we can send you the Monday link and sign you in. This is the only thing we actually need.
- Your first name, if you gave it. Only so the emails do not open with "Hello,". It is optional and it stays optional.
- When and where you agreed. A timestamp and the page the form was on. We are required to be able to show that you asked for the emails.
- Your membership status, if you have one. Whether Go Deeper is active, and when the period ends.
- Donations. The amount and the date. Deliberately not linked to your account — see below.
What we deliberately do not collect
This part matters more than the list above, because it is the promise the Monday hour rests on.
- No record of who watched. There is no viewer table in our database. The endpoint the player calls performs no write at all, and the player sends no heartbeat, no watch time and no presence signal.
- No viewer list or count in the room. The player has no such feature. Cloudflare bills us per minute delivered, so we can see a total number of minutes in a billing dashboard — never who they belonged to.
- No record of who watched. Worth saying twice: the measurement below never touches the Monday hour.
- No card details. Stripe handles payment and we never see the number.
- No donor ledger. A donation is not joined to your account. We cannot tell you what you gave, because we did not write it next to your name.
Measurement
We count pages. We do not follow people. There is no cookie banner on this site because there is nothing here to consent to — that is a design decision, not an oversight.
How it is set up:
- No analytics cookies. Consent for advertising and analytics storage is set to denied before any tag loads, and we leave it denied. Nothing is written to your browser for measurement.
- No advertising or remarketing pixels. No Meta pixel, no ad network, nothing that recognises you on another website.
- It never touches the Monday hour. No measurement reports who watched, for how long, or whether they stayed. The live page is counted as a page, never as an audience.
- What we do see: how many visits a page had, roughly where they came from, and whether people who saw the sign-up form used it. Nothing that identifies you.
We use Google Tag Manager to load this. It is a loader, not a tracker — and everything we load through it has to work without cookies, or it does not go in.
If you would rather not be counted at all, any tracker blocker stops it, and nothing on the site breaks when you do.
Cookies
One cookie, and only after you sign in. It holds a signed session identifier so the site knows the door was opened for you. It cannot be read by JavaScript, it expires after sixty days, and there is no cookie banner because there is nothing to consent to beyond the thing you asked for.
Who else touches it
- Cloudflare — hosting, the database, and the video. Standard server logs, kept briefly.
- Resend — sends the emails.
- Stripe — takes the payments and holds the payment data under its own policy.
- Google — Tag Manager, and the measurement tools loaded through it.
That is the whole list. Nobody buys data from us, because we do not sell it, and we would not be interested in an offer.
How long we keep it
- Sign-in links: fifteen minutes, then deleted. They also delete themselves the moment they are used.
- Your account: until you ask us to remove it.
- If you unsubscribe: we keep the address marked as unsubscribed, so that we do not accidentally email you again. Ask and we will delete it outright instead.
- Payment records: as long as accounting law requires, which is longer than we would otherwise keep anything.
Your rights
If you are in the EU or the UK, you can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to us using it. Write to us and we will do it — there is no form and we will not ask why.
You can also complain to your data protection authority. In Denmark that is Datatilsynet.
Changes
If this page changes in a way that matters, we will say so at a Monday Service and in the members' news. We will not quietly edit it and hope nobody re-reads it.
Ask us anything
Write to [email protected] and a person will answer.
Data controller: [COMPANY NAME], [ADDRESS], [CVR]. Fill this in before launch — it is legally required, and this page is a draft that has not yet been read by a lawyer.