Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how thrivinghenry.com ("we," "us," "our," or, more accurately, "Henry, sitting at a desk") collects, uses, and discloses information about visitors ("you," "User," or "the person who actually scrolled this far") when you access or use the website located at thrivinghenry.com (the "Site"). By using the Site, you acknowledge that you have read and understood this Policy. We acknowledge, in turn, that almost no one ever does.

2. Information We Collect

We collect the following categories of information:

• Information you give us voluntarily: Your email address and, when available, your name if you subscribe to the newsletter; your name, email, and message if you write through the connect page. When membership is available, we also keep the membership, track, access, and billing-status details needed to deliver what you join.
• Information collected automatically: Aggregate page views and interaction counts through Umami (see Section 4). Hosting, email, and payment providers also process technical information needed to operate their services, prevent abuse, and deliver messages or payments. We do not attach your email address to page views.
• Where a signup came from: The first and most recent source observed during the browsing session, an opaque link tag when present, the referring website’s hostname, and the landing-page path. When you submit the signup form, we save this limited context together with your email address, before you confirm. Confirmation is recorded separately. We exclude URL query strings and fragments from analytics and source paths. Unknown sources stay unknown.
• Information you submit through future interactive features: Comments, votes, and other engagement data, if and when those features are enabled. As of the date above, they are politely waiting backstage.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To send you the newsletter you actually signed up for.
• To understand which articles people read all the way to the end (a genuinely small number).
• To improve the Site and understand which invitations and pages lead to confirmed subscriptions or, when available, memberships. A link shows a route, not why you made a choice.
• To reply to your notes and deliver membership access, preferences, and billing support when applicable.
• To comply with applicable laws, respond to lawful requests, and otherwise act like grown-ups.

4. Cookies and Analytics

The Site uses Umami (opens in a new tab) for cookieless aggregate analytics: page views, reading progress, and interactions such as newsletter-button clicks. We exclude email addresses, email domains, link tags, URL query strings, and fragments from these analytics. Your browser’s Do Not Track setting is respected by the analytics script.

The Site itself sets a small number of strictly necessary cookies for functions like authentication and session management - and only when you actively use those features. We do not use advertising cookies, marketing pixels, or any of the surveillance-economy machinery that has made the modern internet exhausting.

Source capture uses browser session storage, not a tracking cookie or a persistent visitor ID. It normally lasts for the tab’s browsing session; browsers may restore it when you restore a session. If storage is blocked, the current page still works and earlier context may be unknown. Signing up saves the observed source alongside the signup; closing the tab does not erase a record you already submitted.

Confirmation emails contain an encrypted, seven-day link that lets you confirm even if the signup-record database is temporarily unavailable. Treat that link as private. Older versions could read an email stored under th-email in local storage. This version removes that saved value when possible and retires identified page-view collection. The Thriving Wage calculator can separately save a scenario on your device when you choose to save it; its own reset control removes that scenario. Essential sign-in and payment features may use their own cookies when you use them.

5. Third-Party Services

We use a small number of third-party service providers to operate the Site:

• Resend - newsletter delivery. They receive your email address and, when available, your name when you subscribe. They have a perfectly reasonable privacy policy (opens in a new tab) of their own.
• Kit - the former newsletter provider used to invite existing subscribers to the new list. If you accept that invitation, the contact details Kit already holds for you are transferred to Resend.
• Neon - database hosting, including signup receipts and their source context, verified accounts, original membership terms, founder benefits, purchase receipts, checkout allocation records, and exact welcome-message copies with their recipients for reliable retries. The same database stores the site’s own email, Google, and LinkedIn sign-in records (Henry runs the sign-in software himself; Resend delivers sign-in emails). A verified sign-in creates an account with your email and sign-in identity even if you have not made a purchase; signing in does not subscribe you to the newsletter. A separate private relationship system receives your email address, the observed source context, and submission or confirmation records so Henry can understand subscriptions and purchases. A forwarded link never determines the subscriber’s identity.
• Account sign-in - you can sign in with a link sent to your email through Resend, or with Google or LinkedIn. Google and LinkedIn confirm who you are and share your verified email and basic profile; we never receive your password for those services. Signing in creates an account record even if you haven’t bought anything, and it does not subscribe you to the newsletter.
• Stripe - payment processing when paid membership is available. Stripe processes payment information; the site uses payment references and billing status to manage membership, not full card numbers. See Stripe’s privacy policy (opens in a new tab).
• Membership calendar invitations - sent by email through Resend from Henry’s address, with joining details, using your selected tracks and email. Each member receives a private invitation, so there is no shared guest list; our account database records which session invitations you hold so cancellations and track changes reach you. Resend also delivers membership welcomes; exact welcome copies are stored in our account database for reliable retries, and older copies may remain in Stripe metadata.
• Membership reminders and lists - Resend also holds a list of members for each track, kept in step with your active membership, and emails you a reminder the day before each session on your tracks. Paid members are added to the Thriving with AI newsletter, unless they had already unsubscribed from it; unsubscribing from the newsletter does not affect your membership or your session reminders.
• Vercel - website hosting and content delivery.
• Umami - privacy-first analytics, as described above.

We do not share your information with any other third parties for marketing, advertising, or data-broker purposes. We do not sell your personal information. We have considered selling it and concluded that (a) it would be wrong, and (b) no one is offering.

6. Data Retention

Browser source context lasts for the browsing session. Signup and conversion receipts are kept separately from editable subscriber details so a temporary service outage does not lose a signup’s original source or time. These records and membership account records do not currently have an automatic deletion schedule. Account deletion requires separate review of active billing, sign-in identities, purchased terms, welcome-delivery records, and calendar access; removing a login does not cancel a subscription. Minimal payment/account references can remain without an email, name, amount, or benefit history so old payment notifications cannot recreate an erased account. These suppression records have no automatic expiry. Henry handles deletion requests individually, reviewing the website database, newsletter provider, and separate relationship system; removing a record from one does not remove it from the others. After deletion, an opaque signup identifier can remain temporarily to prevent an old confirmation link from restoring the signup. It contains no email or source history, and the block expires after the link’s seven-day lifetime plus a short clock allowance. Expired markers are removed during subsequent deletion processing or a manual retention review. Unsubscribing stops newsletter delivery; it does not automatically erase consent, suppression, billing, or conversion records. You can request deletion through the connect page, including deletion of historical identified page views from older versions. We aim to respond within thirty (30) days. Some billing or security records may need to be retained to meet legal obligations; we will explain any exception.

7. Children's Privacy

The Site is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. Family stories on the Site are written with the privacy of the people in them in mind.

8. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information, including the right to access, correct, delete, or port your data, and to object to or restrict certain processing. To exercise any of these rights, please use the connect page linked in Section 11. We will respond within thirty (30) days. We will probably respond sooner, because the inbox is not large.

9. Security

We use commercially reasonable administrative, technical, and physical safeguards to protect the personal information in our possession from loss, theft, and unauthorized access. No method of transmission over the internet is 100% secure, however, and we cannot guarantee absolute security. We do, at minimum, promise not to email anything sensitive to ourselves and then leave it open in a coffee shop.

10. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, applicable law, or the gentle suggestions of people who know more about this than we do. When we make a material change, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Continued use of the Site after such changes constitutes your acceptance of the revised Policy. If you have read this far, we sincerely hope you have a wonderful day.

11. Contact Us

If you have any questions, concerns, or requests regarding this Policy or our privacy practices, please use the connect page. A real human (Henry) will read your message.