What we keep,
and what we do not

What we collect, and why

• Your email address. So we can send you the Monday link and sign you in. This is the only thing we actually need.
• Your first name, if you gave it. Only so the emails do not open with "Hello,". It is optional and it stays optional.
• When and where you agreed. A timestamp and the page the form was on. We are required to be able to show that you asked for the emails.
• Your membership status, if you have one. Whether Go Deeper is active, and when the period ends.
• Donations. The amount and the date. Deliberately not linked to your account — see below.

What we deliberately do not collect

This part matters more than the list above, because it is the promise the Monday hour rests on.

• No record of who watched. There is no viewer table in our database. The endpoint the player calls performs no write at all, and the player sends no heartbeat, no watch time and no presence signal.
• No viewer list or count in the room. The player has no such feature. Cloudflare bills us per minute delivered, so we can see a total number of minutes in a billing dashboard — never who they belonged to.
• No advertising or tracking pixels. No Meta pixel, no Google Analytics, no ad network, nothing that follows you off this site.
• No card details. Stripe handles payment and we never see the number.
• No donor ledger. A donation is not joined to your account. We cannot tell you what you gave, because we did not write it next to your name.

Cookies

One cookie, and only after you sign in. It holds a signed session identifier so the site knows the door was opened for you. It cannot be read by JavaScript, it expires after sixty days, and there is no cookie banner because there is nothing to consent to beyond the thing you asked for.

Who else touches it

• Cloudflare — hosting, the database, and the video. Standard server logs, kept briefly.
• Resend — sends the emails.
• Stripe — takes the payments and holds the payment data under its own policy.

That is the whole list. Nobody buys data from us, because we do not sell it, and we would not be interested in an offer.

How long we keep it

• Sign-in links: fifteen minutes, then deleted. They also delete themselves the moment they are used.
• Your account: until you ask us to remove it.
• If you unsubscribe: we keep the address marked as unsubscribed, so that we do not accidentally email you again. Ask and we will delete it outright instead.
• Payment records: as long as accounting law requires, which is longer than we would otherwise keep anything.

Your rights

If you are in the EU or the UK, you can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to us using it. Write to us and we will do it — there is no form and we will not ask why.

You can also complain to your data protection authority. In Denmark that is Datatilsynet.

Changes

If this page changes in a way that matters, we will say so at a Monday Service and in the members' news. We will not quietly edit it and hope nobody re-reads it.

Ask us anything

Write to privacy@ethos.world and a person will answer.

Data controller: [COMPANY NAME], [ADDRESS], [CVR]. Fill this in before launch — it is legally required, and this page is a draft that has not yet been read by a lawyer.