Privacy Policy
We don’t sell your data. Ever.
Last reviewed: May 6, 2026. Plain-English summary first. Full detail after. If anything is unclear, email eddie@oopsmethod.com and I’ll answer in plain English.
The plain-English version.
- We collect what we need to run the site, send the emails you signed up for, and improve the experience. Nothing more.
- We do not sell your personal information. We have never sold it. We will never sell it.
- We use Google Analytics, Google Search Console, and Microsoft Clarity to see how the site is used in aggregate. They can identify visitors via cookies. You can opt out.
- If you’re a California resident, you have specific rights under the CCPA and CPRA. They’re listed below. Exercising them won’t change your price or get you locked out.
- If you’re a paying student, your purchase data is held by our payment processor, not us. We see the metadata (email, plan, status), not your card.
- If you want your data deleted, email eddie@oopsmethod.com. Subject line: DELETE MY DATA. Done within 30 days.
What we collect.
Information you give us directly. Name and email when you join the email list, take the Overwhelm Test, contact us, or buy a course. Payment details (card, billing address) when you check out, processed by our payment provider, not stored on our server.
Information collected automatically. IP address, browser type, device, pages visited, time on page, referrer, and similar usage data. Standard server logs and analytics.
Cookies and similar tech. A small set: WordPress login (if you have an account), preferences, and analytics cookies from Google Analytics, Google Search Console, and Microsoft Clarity. We do not use advertising or retargeting cookies.
What we don’t collect. We don’t collect Social Security numbers, financial account numbers, government IDs, biometric data, or precise geolocation. We don’t collect data from anyone we know to be under 13.
How we use it.
To deliver the things you signed up for: emails, course access, the community, support replies. To run the business: send invoices, prevent fraud, comply with the law. To improve the site: see which pages help and which ones confuse. To keep in touch: occasional product updates and free resources, and you can unsubscribe with one click.
We do not use your data to train machine-learning models. We do not feed your responses into anyone else’s system.
Who we share it with.
We share data only with the service providers who run the site, and only the data they need to do their job. Specifically:
- Hosting: Hostinger (web hosting infrastructure)
- Email delivery: ConvertKit / Kit (newsletter and transactional email)
- Payments: Stripe (card processing, PCI-DSS compliant)
- Analytics: Google Analytics 4 and Google Search Console (aggregate site usage and search traffic)
- Behavior insights: Microsoft Clarity (anonymized session recordings and heatmaps)
- Course delivery: the course platform we use to host video and community (currently being finalized; this section will name it once chosen)
We do not share data with advertisers, data brokers, or any party that would use it for purposes other than running the service you signed up for.
We will share data if we’re required to by law (subpoena, court order, regulatory request) or to protect our rights or someone’s safety. If that ever happens, we’ll tell you unless legally prohibited.
California residents (CCPA / CPRA).
If you live in California, you have these rights under the California Consumer Privacy Act and California Privacy Rights Act:
- Right to know. What categories of personal information we’ve collected about you, where we got it, why we collected it, and who we shared it with in the last 12 months.
- Right to delete. Ask us to delete the personal information we have on you, with limited exceptions (legal compliance, fraud prevention, completing a transaction you started).
- Right to correct. Ask us to fix inaccurate personal information.
- Right to opt out of sale or sharing. We do not sell your personal information. We do not share it for cross-context behavioral advertising. So nothing to opt out of, but you have the right anyway.
- Right to limit use of sensitive personal information. We do not collect sensitive personal information as defined by CPRA, so this doesn’t apply, but you have the right.
- Right to non-discrimination. If you exercise any of these rights, we won’t charge you a different price, deny you service, or downgrade what you get.
To exercise any of these rights, email eddie@oopsmethod.com from the email address associated with your account, with a subject line that says what you want (KNOW, DELETE, CORRECT). We’ll respond within 45 days.
Cookies.
We use cookies for three things: keeping you logged in, remembering your preferences, and aggregate analytics. You can disable cookies in your browser settings. The site will still work; some preferences won’t persist across sessions.
To opt out of Google Analytics: install the Google Analytics opt-out browser add-on. To opt out of Microsoft Clarity: enable Do Not Track in your browser, which Clarity respects.
Data retention.
We keep your data for as long as you have an active relationship with us, plus a reasonable wind-down period for backups, accounting, and legal compliance. Specifically: email subscriber data is kept until you unsubscribe and request deletion. Course purchase data is kept for 7 years for tax and dispute reasons. Anonymized analytics is kept for 26 months in Google Analytics.
Security.
We use HTTPS site-wide. Passwords are hashed, never stored in plain text. Payment data never touches our server, it goes directly to Stripe. We use 2FA on the admin accounts that can access user data. We are a small operation, so the surface area is small, which is one of the few advantages of being small.
That said, no system is 100 percent secure. If we ever have a breach affecting your data, we will notify you under California breach-notification rules (currently within 60 days for most cases, sooner if required).
Children.
OOPS Method is for adults running businesses. We do not knowingly collect data from anyone under 13. If you believe we have, email eddie@oopsmethod.com and we will delete it within 14 days.
Changes to this policy.
If we change this policy in a meaningful way, we’ll update the “Last reviewed” date at the top and email anyone who’s subscribed. For minor edits (typo fixes, clarifications, no change to what we collect or how we use it) we’ll just update the date.
Contact.
For privacy questions, requests, or complaints:
Email eddie@oopsmethod.com with subject line PRIVACY.
OOPS Method
San Diego, California, United States
If you have a privacy concern we haven’t resolved to your satisfaction, you can also contact the California Attorney General at oag.ca.gov/privacy.