Privacy notice

This notice describes how GetMyVision ("we," "us," or "our") accesses, collects, stores, uses, and shares personal information when you use getmyvision.com (the "Services"). If you do not agree, do not use the Services. The Terms of Use sit beside this notice. Together they are the rules for using getmyvision.com: this notice covers personal information, and the terms cover accounts, payments, content, and acceptable use.

What personal information do we process? Account email, Vision subscriptions, author content you publish, payment records, support mail, and limited device data. Information we process.

Do we process sensitive personal information? We do not process sensitive information such as racial or ethnic origin, sexual orientation, or religious beliefs.

Do we collect information from third parties? We do not buy marketing lists or pull profiles from public databases or social networks. Payment, identity, and email providers tell us the status of actions you take on our Services.

How do we process your information? To run the Services, keep them secure, communicate with you, and meet legal duties. How we use information.

When and with whom do we share personal information? With the processors who run the product, in a business transfer, or when the law requires it. We do not sell personal information. Sharing.

What are your rights, and how do you exercise them? Email support@getmyvision.com. There is no separate request form. Your rights.

GetMyVision operates the website at getmyvision.com. We provide private Vision series, reader subscriptions, creator publishing, and paid checkout through Stripe.

Privacy questions go to support@getmyvision.com.

In short: we collect personal information that you provide to us, plus a limited amount of technical data collected automatically when you use the Services.

Depending on how you use the service, we may process:

• Email address and Firebase identity used to sign in.
• Reader subscriptions, confirmation tokens, and delivery state.
• Author profiles, Vision drafts, and published episode source.
• Payment records (integer cents, currency, Stripe session ids) for creator plans and complete-solution orders.
• Support mail you send to the public contact address.
• Pseudonymous analytics identifiers and funnel events, described under Analytics (GA4).
• Technical data such as IP address, browser and device characteristics, language, referring URL, and the time of a visit, used to keep the Services secure and operating.

Sensitive information. We do not process sensitive information.

Information you give us must be true, and you must tell us when it changes. We do not collect information from public databases, marketing partners, or social media platforms.

In short: we process your information to provide, improve, and administer the Services, communicate with you, prevent fraud, and comply with law.

We use this information to:

• Authenticate you and keep a session on getmyvision.com.
• Deliver episodes, confirm subscriptions, and send product email.
• Take and record payments, fees, and payouts.
• Moderate reports and enforce account status.
• Measure public marketing and the subscribe-to-convert funnel.
• Investigate abuse and enforce the Terms of Use.

We process personal information only when we have a legal basis to do so, such as performing the contract with you, a legitimate interest in running and protecting the Services, a legal obligation, or your consent where we ask for it. You may withdraw consent by emailing the contact below. Withdrawal does not affect processing that already happened, or processing that the law allows on another basis.

In short: we share information with the processors below, in a business transfer, or when the law requires it. We do not sell personal information.

We share data with processors who run the product: Firebase (identity), Resend (transactional email), Stripe (payments), Google Analytics 4 via Firebase Analytics (measurement), and our Hostinger VPS host. We do not sell reader or author lists.

• Business transfers. We may share or transfer information in connection with a merger, sale of assets, financing, or acquisition of all or part of the business.
• Affiliates. If we share information with a company we control or that is under common control with us, that company must honor this notice.
• Legal and safety. We may disclose information if the law requires it, or to protect the Services, our users, or our rights.

We do not share personal information with business partners so they can advertise their own products to you.

In short: we use a sign-in cookie and, on some public pages, measurement cookies. We do not use them to sell advertising.

The signed-in app session uses an httpOnly cookie named __Host-gmv_session on the canonical host getmyvision.com (Secure, SameSite=Lax, Path=/, host-only — no Domain attribute; the __Host- prefix is what makes the browser enforce those constraints). Firebase Auth and the Firebase Analytics / GA4 SDK may also set their own cookies or local-storage keys in the browser to keep the pseudonymous client id and measurement state. We do not run a separate cookie-consent banner in this release. We do not permit third parties to place advertising cookies or pixels for tailored ads.

The facts below come from src/lib/firebase/analytics.ts and src/lib/firebase/funnel.ts.

• Firebase Analytics (Google Analytics 4) initializes only in the browser when client config is present and only on these public paths: /, /explore, /pricing, and /visions/:slug (the slug is replaced with a constant before a page view is recorded). This Privacy page is not on that list, so visiting it does not initialize Analytics.
• A URL hash, an unknown route, or campaign parameters that fail the allow-list all fail closed: no collection on that page view.
• Automatic page views are disabled (send_page_view: false). Page views that do fire use a sanitized path, not the raw browser URL. Internal identifiers such as a reader subscriptionId or a Stripe session_id are not sent to Google as page URLs (GET-191 mitigated state).
• GA4 attaches a pseudonymous client identifier (cid) at the transport layer. That identifier is not a GetMyVision account, email, or subscription id, and it is not written into funnel event payloads. GetMyVision currently accepts it as residual analytics risk.
• Funnel delivery is best-effort: a blocked or failing Analytics SDK cannot fail authoring, publishing, or reading.

Funnel events and payloads

Application code may send these 5 event names, with only the listed fields in the payload:

reading_time_bucket is estimated from the episode text, not from how a reader behaves. Payloads cannot include email, user or subscription identifiers, names, titles, body text, or raw URLs. Undeclared fields are rejected at compile time.

In short: we do not offer social login.

You cannot register or sign in with a Facebook, X, or other social account. We do not receive a friends list, profile picture, or other social profile from a third-party network.

In short: our processors may handle information in countries other than your own.

Firebase, Google, Stripe, Resend, and our host may transfer, store, and process information outside your country, including countries that do not have the same data-protection laws as yours. See Sharing. Where the law requires it, we protect that information in line with this notice.

In short: we keep information for as long as we need it for the purposes in this notice, unless a longer period is required by law.

We keep account, subscription, email-delivery, consent, audit, and payment records for as long as needed to run the service, meet Stripe and tax obligations, and handle disputes. When we no longer have a legitimate need to process personal information, we delete it, anonymize it, or, if a backup still holds it, isolate it until deletion is possible. Payment and tax records can outlive an account because Stripe and the law can require that. Delivery logs can outlive a cancelled subscription for the same reason.

In short: we use organizational and technical measures to protect personal information. No method of transmission or storage is completely secure.

The public site is served over HTTPS. The sign-in cookie is httpOnly and is not readable by page scripts. Access to production systems is limited to people and processors who need it to run the Services. Stripe handles card numbers; we store payment records as integer cents, currency, and Stripe identifiers, not a full card number. Firebase handles the email-link sign-in. We do not ask you to send a password, because there is no password on this service.

You are responsible for the email account you use to sign in and for the device you use. If you believe your account has been used without permission, email support@getmyvision.com and we will investigate. If a breach of personal information requires notice under the law that applies, we will give that notice.

In short: we do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age, and we do not knowingly sell such information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of a minor and consent to that minor's use. If we learn that we have collected personal information from a child under 18, we will deactivate the account where we can and delete that information from our active records. Email support@getmyvision.com if you believe we have information from a child under 18.

In short: email us to ask for access, correction, or deletion. Unsubscribe stops Vision delivery for that series; it is not account deletion.

Depending on where you live, you may have the right to know what we hold, to access it, to correct it, to delete it, to restrict or object to certain processing, to receive a portable copy, to withdraw consent, and to appeal a refusal. You also have the right not to be discriminated against for exercising a privacy right. Email support@getmyvision.com with the address on the account and what you are asking for. We will consider the request under the law that applies to you. These rights can be limited by that law, including where we must keep a payment, tax, or security record. In-product account deletion is not available yet. There is no separate data-request form. We do not sell personal information, so there is no sale to opt out of.

Unsubscribing from a Vision stops future episode email for that series. It does not delete the reader account, the payment record, or the privacy choices in this notice. Account, payment, and content rules also live in the Terms of Use.

In short: you can ask us to review, correct, or delete personal information by email. Some records stay while the law or an open delivery requires them.

Signed-in authors can edit a public profile in the product. Readers can set or change a display name in settings. Episode source stays under the author's control while the Vision is on the service, as the terms describe. For anything you cannot change in the product, including a request to delete an account, email support@getmyvision.com. We may need to confirm that the request comes from you. We may deny a request when the law allows us to keep the information, including to complete a delivery already promised, to resolve a dispute, or to meet a Stripe or tax duty.

In short: we do not use personal information to make a solely automated decision that produces a legal or similarly significant effect on you.

Account status, reports, and payout eligibility are not decided by a hidden scoring model that you cannot question. Stripe decides card acceptance and Connect onboarding under Stripe's own rules. Analytics events measure public pages and the subscribe-to-convert funnel. They are not used to deny you the service.

Most browsers offer a Do Not Track ("DNT") setting. No uniform standard for those signals is in place. We do not currently respond to Do Not Track signals or to any other mechanism that automatically communicates a choice not to be tracked online. If a standard we must follow is adopted, we will describe that practice in an update to this notice.

In short: we will update this notice when the product or the law requires it.

The updated version shows a new "Last updated" date at the top of this page. If we make a material change, we will post the update here or send a notification. Continued use of the Services after the update means you accept the updated notice.

Privacy questions: support@getmyvision.com. This is the same mailbox the footer Contact link uses. Use it for privacy requests, a suspected unauthorized sign-in, and questions about how this notice works with the Terms of Use.