Privacy policy.

Information you choose to share

When you contact me, the site collects your name, email address, message, and any reason you select. Messages are stored so I can respond and track delivery. A hashed version of your request IP address helps limit abuse.

You can complete Community Finder and use the planner without an account or email address. Your answers and draft plan are kept in your browser’s session storage. They are not submitted to the server as assessment answers or plan content unless you request an emailed plan. Clearing site data removes the browser copy.

If you request an emailed plan, the site stores your email, optional first name, assessment answers and result, launch stage, plan content, submission ID, source page, and first-touch campaign tags, when present. It also records your subscription choice, the wording you agreed to, and the request and confirmation timestamps.

Please avoid putting sensitive personal information about yourself or others in your messages or plans.

How your information is used

Information is used to respond to inquiries, provide your requested result and private plan, maintain your email preferences, operate and improve the site, prevent abuse, and investigate delivery problems. Community recommendations use fixed scoring rules; an AI model does not assign your result.

Requesting your plan does not subscribe you to marketing. Marketing requires selecting the separate checkbox and confirming through an email link. Confirmed subscribers receive the five-part community starter series and may receive occasional practical emails about community, marketing, and technology. Repeating the assessment does not restart the series.

Marketing emails include an unsubscribe link. Unsubscribing stops queued marketing messages; it does not prevent a separate result email you explicitly request. Bounce, complaint, and suppression records help prevent unwanted or undeliverable email.

Private plan links

Emailed plans use an unguessable access link that expires after 90 days. Anyone with that link can access the plan, so keep it private. You can revoke access from the planner. Revocation clears the saved plan content. Plans and individual answers are not published in public pages or search metadata.

Analytics, browser storage, and technical data

The main website uses Umami, when enabled, to understand page visits and interactions such as contact and social-link clicks. These events do not include form names, email addresses, or message text. Hosting and analytics services may process technical information such as request IP addresses, browser and device information, referring pages, and access times to operate their services.

Community Finder, planner, and subscription pages do not load the Umami script. Instead, the application records limited first-party events such as assessment starts and completions, result category, planner visits, and destination clicks, using a random session identifier. These events do not contain your email, full answers, or plan text.

Session storage preserves assessment progress, draft plans, and first-touch campaign attribution. Protected administrator access uses a secure session cookie. The site does not use advertising pixels or sell personal information, and it does not share personal information for cross-context behavioral advertising.

Email services process delivery events, bounces, complaints, and unsubscribe requests. Depending on provider settings, they may also record link clicks or opens. Opens are not used to decide when the starter series advances.

Service providers and outside links

Service providers process information needed to operate the site: Manifest and its hosting infrastructure, including Vercel, for application hosting; Neon PostgreSQL for database storage; Resend for email delivery and confirmed subscriber management; and Umami for website analytics. Information may be processed in the United States and other countries where these providers operate.

Information may also be disclosed when reasonably necessary to comply with law, respond to valid legal requests, protect rights, or investigate abuse. Access to subscriber records is restricted to authorized administration.

Links to Mighty, social networks, and other apps take you to services with their own privacy policies. Visiting this website or receiving a community result does not automatically enroll you in those services.

How long information is kept

Saved plan access expires after 90 days. Scheduled maintenance removes expired plans, inactive delivery-only and unconfirmed subscriber records after 90 days, rate-limit records after two days, and ordinary Community Finder analytics events after 180 days. Completed job content and inactive answers and campaign data are eligible for clearing after 90 days when no active job or plan needs them. Cleanup depends on the maintenance worker running; expiration still prevents access to expired plans.

Confirmed subscriber and consent records are kept while the subscription relationship continues. Unsubscribe and suppression records may be retained to honor your preferences. Failed delivery jobs may remain while a problem is investigated, and limited confirmation and webhook records remain for reporting and duplicate prevention.

Contact-form messages do not currently have automatic deletion. You can request deletion using the contact details below. Service-provider logs and backups follow their respective retention processes; removal from active records may not immediately remove backup copies.

Your choices and privacy requests

You can use the assessment without giving an email address, leave the marketing checkbox unchecked, unsubscribe from marketing, clear your browser’s site data, or revoke a saved plan link.

To request access, correction, or deletion of information you have supplied, email support@nilssmith.com. Depending on where you live, you may have additional rights, such as requesting a portable copy or objecting to certain processing. I may need to verify your identity before fulfilling a request. Limited records may need to be retained for legal obligations, security, or to respect an unsubscribe request.

Security and children’s privacy

The site uses safeguards including encrypted connections, restricted administrative access, and expiring private-plan links. No internet service can guarantee absolute security.

This site is intended for adults and is not directed to children under 13. If you believe a child has submitted personal information, contact me so it can be addressed.

Updates and contact

This policy may be updated as the site changes. The date above identifies the latest revision. Material changes will be communicated as appropriate; an update does not by itself change your marketing consent.