The RecordTheRECORD

Your name and email, at the start of the instrument. The onboarding instrument asks for them before its first question. They attach to your entry and nothing else: they are what make it yours to delete. Everywhere else an address stays optional - you give one to join the early access list, to claim a business page, or to subscribe - and name and address are the only identifiers we hold.

What you write in the onboarding instrument. Who you say you are becoming and where it stands, the record you intend to set, the obstacle you name, and your if-then plan, including a time, a place, and any business you pick as the place to do it. If you tap your age range or your part of town, those two chips ride along; both are optional and skipping them changes nothing. This is the whole list, and it is fixed in a published data contract rather than in a policy sentence.

Business claim details. If you claim a business page, the business you are claiming and how you reached the form.

Usage information. Page views and the specific moments listed under cookies below, plus general device information and IP address, from a privacy focused analytics tool.

We never ask for your date of birth, your conditions, your injuries, your medications, or any measurement of your body. There is no field for any of them. The age question is a coarse range you tap, or skip; it is never a birthday and never a number you type.

There is one exception and we would rather name it than let you find it. QUIT STREAKS is one of the disciplines you can choose, and it counts days on the sobriety-chip ladder. If you pick it, the choice itself says something about your health, because that is what the discipline is for. Nothing asks you to say what you are quitting and there is no field for it, but we are not going to pretend the count means nothing. Choosing it is up to you, every other discipline records the same way, and the deletion page below removes it like everything else.

Some of what you write is free text, which means you could type something about your health into it even though nothing asks you to. We cannot read your mind at the keyboard, and a policy sentence claiming we have made that impossible would be a claim about you rather than about us. So: please do not put health information in the box. If you already did, the deletion page below removes it along with everything else.

We never see your card. Payments run through our payment processor, which takes the card details directly and gives us back a reference, so no card number reaches this site or its database. And we never ask your device for your precise location: the part of town, if you give it, is one of a handful of areas you tap yourself.

What you write here never touches a rank, is never sold, and is never shown to a business as your individual answer unless you choose to send it. That is the same wall the awareness column already lives behind. A ranking here is earned by verified records and by nothing else, so nothing a person tells us about their own goals can move a business up or down, and no amount of money can either. Picking a business inside your own plan is a choice about your own week. It is never counted as a signal about that business.

To give you back a plan and point you somewhere useful. To email you if you asked us to. To understand, in aggregate, what people are trying to become, which is the reason the instrument exists. To keep the site working and safe. Nothing else.

We do not sell personal information and we do not share it for advertising. We use a small number of service providers to run the site: hosting, the database, analytics, email delivery, and a payment processor for anyone who subscribes. They may only use the information to provide that service to us. We will disclose information where the law requires it, or where it is necessary to protect people from harm. If the business is ever transferred, whoever receives it has to honor this policy or one at least as protective.

We run no advertising trackers and no cross site tracking, and we share nothing with data brokers. We do not use analytics to follow you around other sites.

Two cookies, and they are the important ones to know about. rec_holder is set when an account opens, which is the first day you close in the ritual or a trial or subscription you take, never before. It is how your account stays yours when you come back, it lasts 400 days, and your browser will not hand it to anything but this site. rec_entry is set when the instrument keeps your entry: it is a private key to that one entry, readable only by the /record page, and it points at the entry, not at you. It lasts a year, long enough to outlive the longest commitment window. Deleting your data below clears what both of them point at, and a key pointing at nothing opens nothing.

What analytics counts. Page views, and these specific moments: claim_submitted, delete_confirmed, delete_request, edition_submitted, guide_booking_offered, guide_booking_opened, guide_booking_skipped, guide_completed, guide_consented, guide_instrument_opened, guide_revealed, guide_reveal_empty, guide_reveal_matched, guide_reveal_unavailable, guide_step_1, guide_step_2, guide_submit_accepted, guide_submit_failed, guide_submit_rejected, guide_submit_unavailable, instrument_completed, instrument_consented, instrument_edition_submitted, instrument_obstacle_assist, instrument_obstacle_probe, instrument_offer_opened, instrument_reveal_empty, instrument_reveal_matched, instrument_reveal_unavailable, request_submitted, subscribe_declined_commit, subscribe_declined_options, waitlist_submitted. That is the whole list. It records that a thing happened, never what you wrote.

You can control cookies through your browser settings.

Go to /delete-my-data, enter your address, and click the link we send. Everything held for that address is deleted outright when you click it. Not flagged, not queued for review, and not in 30 days. Afterwards our log keeps only the date and the number of entries removed, so we can show a deletion happened without keeping the address of somebody who asked us to forget it. If you never gave an address, there is nothing tied to you to delete.

Everything means every store we keep, and we hold ourselves to a list rather than to a memory: what you wrote in the instrument, your account and everything hanging off it, any waitlist or claim signup, and any authoring key issued to your address. They all go in one pass, and if any part of it fails nothing is deleted at all, so you can press the link again rather than being told a half-finished erasure worked.

One thing is outside our reach and we would rather say so than imply otherwise: our payment processor keeps its own record of any payment you made. Tax law requires it. It holds the charge and the billing address you gave them, and nothing about what you wrote here.

You can unsubscribe from any email we send using the link in it. You can ask what we hold, ask us to correct it, or delete it yourself from the page above. If you live in California, Colorado, Connecticut, Virginia, or another state with a comprehensive privacy law, you also have the right to know what we collect and why, to have it corrected or deleted, to opt out of the sale or sharing of personal information, and not to be treated differently for exercising any of those rights. Because we do not sell personal information and do not share it for cross context behavioral advertising, there is no separate opt out link to operate. If that ever changes we will add one and we will honor browser signals such as Global Privacy Control.

We keep what you wrote until you delete it or until it is no longer needed for the reasons above. Analytics data is kept in aggregate. We do not keep a shadow copy of anything the deletion page removes.

What you write is stored in a database where the rows are closed to public access by default and reachable only by this site's own server. Deletion links are stored as hashes, never as usable links, and they expire. No system is perfectly secure, so we will not claim this one is.

This site is not directed to children and we do not knowingly collect information from anyone under 13. If we learn we have, we delete it.

The site is operated from the United States and information is processed there, where privacy laws may differ from those where you live.

If we make a material change we will update the date on this page. Consent copy is versioned separately, so anything already stored stays tied to the exact words it was collected under.

Breadchaser LLC operates this site. Questions about this policy, or requests about your information: privacy@therecord.city.