Privacy notice

GetMyVision operates the website at getmyvision.com. We provide private Vision series, reader subscriptions, creator publishing, and paid checkout through Stripe.

Depending on how you use the service, we may process:

• Email address and Firebase identity used to sign in.
• Reader subscriptions, confirmation tokens, and delivery state.
• Author profiles, Vision drafts, and published episode source.
• Payment records (integer cents, currency, Stripe session ids) for creator plans and complete-solution orders.
• Support mail you send to the public contact address.
• Pseudonymous analytics identifiers and funnel events, described under Analytics (GA4).

We use this information to:

• Authenticate you and keep a session on getmyvision.com.
• Deliver episodes, confirm subscriptions, and send product email.
• Take and record payments, fees, and payouts.
• Moderate reports and enforce account status.
• Measure public marketing and the subscribe-to-convert funnel.

We share data with processors who run the product: Firebase (identity), Resend (transactional email), Stripe (payments), Google Analytics 4 via Firebase Analytics (measurement), and our Hostinger VPS host. We do not sell reader or author lists. We may disclose information if the law requires it or to protect the service.

The facts below come from src/lib/firebase/analytics.ts and src/lib/firebase/funnel.ts.

• Firebase Analytics (Google Analytics 4) initializes only in the browser when client config is present and only on these public paths: /, /explore, /pricing, and /visions/:slug (the slug is replaced with a constant before a page view is recorded). This Privacy page is not on that list, so visiting it does not initialize Analytics.
• A URL hash, an unknown route, or campaign parameters that fail the allow-list all fail closed: no collection on that page view.
• Automatic page views are disabled (send_page_view: false). Page views that do fire use a sanitized path, not the raw browser URL. Internal identifiers such as a reader subscriptionId or a Stripe session_id are not sent to Google as page URLs (GET-191 mitigated state).
• GA4 attaches a pseudonymous client identifier (cid) at the transport layer. That identifier is not a GetMyVision account, email, or subscription id, and it is not written into funnel event payloads. GetMyVision currently accepts it as residual analytics risk.
• Funnel delivery is best-effort: a blocked or failing Analytics SDK cannot fail authoring, publishing, or reading.

Funnel events and payloads

Application code may send these 5 event names, with only the listed fields in the payload:

reading_time_bucket is estimated from the episode text, not from how a reader behaves. Payloads cannot include email, user or subscription identifiers, names, titles, body text, or raw URLs. Undeclared fields are rejected at compile time.

The signed-in app session uses an httpOnly cookie named __Host-gmv_session on the canonical host getmyvision.com (Secure, SameSite=Lax, Path=/, host-only — no Domain attribute; the __Host- prefix is what makes the browser enforce those constraints). Firebase Auth and the Firebase Analytics / GA4 SDK may also set their own cookies or local-storage keys in the browser to keep the pseudonymous client id and measurement state. We do not run a separate cookie-consent banner in this release.

We keep account, subscription, email-delivery, consent, audit, and payment records for as long as needed to run the service, meet Stripe and tax obligations, and handle disputes.

Depending on where you live, you may have rights to access, correct, delete, or restrict personal data, or to object to certain processing. Email the contact below. Unsubscribe stops Vision delivery for that series; it is not account deletion.

Privacy questions: support@getmyvision.com. This is the same mailbox the footer Contact link uses.