Effective July 2026. Updated August 2026.
What we collect on the website. If we measure traffic at all, it's privacy-respecting, aggregate analytics: pages visited, referring site, country, and device type. No cross-site tracking or advertising cookies, and we never sell data.
The newsletter. If you subscribe, we store your email address and use it to send the newsletter. Issues sometimes carry affiliate links: if you buy, the vendor may pay us a commission at no extra cost to you. Those partners never see your address, and we never sell or rent it to anyone. Every email carries a way out, and unsubscribing removes you from the mailing list the same day.
Pass it on. If you send the site to someone, we ask for your first name and email address as well as theirs, and we keep a record of that send. We use their address once, for the single note, and your first name goes inside it so they know who it came from. Your email address is never shown to them. Neither address joins the mailing list. We keep that record so we can't send to the same address again for at least two weeks, and they can stop us for good with their mail app's unsubscribe button.
The app. If you create an account at app.proposaladvisor.com, we store your sign-in email and the plan data you enter. Only your account can read it, and it's never shared, sold, or used for advertising. When you open a vendor pick from the app, we also log that click against your account so we can see which picks earn their spot; the log loses its link to you if you delete your account. If you record a rehearsal take, the audio stays on your device and never reaches us. If you sign in with Google, we receive your name, email address, and profile photo from your Google account. Your password stays with Google, and we never see it. On your phone the app installs as Advisor, and Decoy Mode turns the screen into a dull dummy page in one tap. You control the emails: turn the planning emails or the weekly digest off in Settings, or use the one-click unsubscribe in any email. Delete your account in Settings and your plan data goes with it.
Service providers. Emails go out through Resend, app accounts run on Supabase, and Cloudflare checks that form submissions come from a person. Each works under its own security terms and uses your data only to run our service. The site's typefaces are served from this site directly, so reading a page sends no font request to any third party.
Outbound links. When you click a link to another site, that site may set its own cookies under its own privacy policy. Some of our links are affiliate links: if you buy, the vendor may pay us a commission at no extra cost to you. The vendor gets nothing about you from us.
Deleting what we hold. Every route is self-serve. Your app account and its plan data: Delete your account in Settings. One anonymous tally survives deletion: that an account existed, how far the plan got, and whether it ended in a yes. Nothing in it points back to you. A newsletter address: the unsubscribe link in any issue removes you the same day. A share note: the unsubscribe button in your mail app stops those for good.