Privacy Policy
We built this site to hold almost nothing about you. The one personal detail we keep is an email address you chose to give us. Everything else — your answers, your scores, your progress — stays on your device, where we cannot read it. This page explains all of it, exactly.
The short version
- If you subscribe, we keep your email address, when you signed up, and which page you signed up from. That is the whole record.
- Your assessment answers, scan results and protocol progress are scored and stored in your own browser. They are never sent to us. We could not sell them if we wanted to, because we never have them.
- We run Google Analytics to count readers, and we are honest below about a consent problem with it that we are fixing.
- We run no advertising, no remarketing, no tracking pixels, and we sell nothing about you to anyone.
- Ask us at contact@hiperformanceculture.com and we will show you, correct, or delete whatever we hold. These rights are written into law for some readers; we extend them to everyone.
Who is responsible
HiPerformance Culture is operated from the United Kingdom by Nas Khan, its founder and editor, who is the data controller for the information described here. Our readers are worldwide, and this policy is written for all of them: wherever you are, you get the same treatment and the same rights. Reach us at contact@hiperformanceculture.com.
What we collect, and why
Your email address, if you give it
Every signup form on this site posts to our own server first. When you subscribe we record four things: your email address, the time, the page you signed up from, and whether the welcome email has been delivered yet. That record lives in our own WordPress database. We then pass your address, and only your address, to Kit (formerly ConvertKit), the service that sends our emails.
The signup page matters and we want to be plain about it: if you subscribed from an assessment, our record shows which one. We use this to know which parts of the site earn subscriptions, not to profile you. If you would rather we removed that detail from your record, ask and we will.
On assessments, the form includes a consent checkbox and our server rejects the signup without it. Every form also carries a hidden trap field that catches spam bots; a real reader never sees or fills it, and it stores nothing about you.
Some signups deliver a report: the confirmation email you receive from Kit is that report. Your answers are not in it and were never sent to us. The next section explains why.
The lawful basis for all of this is your consent. Every email carries an unsubscribe link that works immediately.
What stays on your device
The interactive parts of this site are built to work without telling us anything. When you take an assessment or the Performance Scan, your answers are scored by code running in your own browser and saved in your browser's local storage. When you run a 90-day protocol, your daily check-ins and diary entries are stored the same way. None of it is transmitted. There is no request that could carry it, which you can verify in your browser's network inspector.
Because that data lives only on your device, it is also yours to manage. The protocol pages give you an export button that writes your progress to a file — the file goes to you, not to us — and a delete-all control that clears everything in two clicks. Clearing your browser's site data removes all of it too. We cannot recover it for you, because we never had it.
Analytics
We use Google Analytics 4 to count visits and see which articles get read. It sets two cookies, _ga and _ga_Y4FZRSHC60, which last about thirteen months and let Google tell a returning browser from a new one. Measurement data goes to Google. We use it to decide what to write next. We do not use it to build advertising profiles.
Analytics runs only if you say yes. When you first arrive, a consent banner asks; until you accept, the analytics code does not load, no measurement request is made, and no analytics cookie is set. Decline, or simply ignore the banner, and the site works exactly the same. If your browser sends a Do Not Track or Global Privacy Control signal, we treat that as a no without asking. You can change your choice at any time using the Manage Consent control at the foot of the page.
Fonts
Our pages load typefaces from Google Fonts, which means your browser requests the font files from Google directly and discloses your IP address to Google in doing so. We are weighing self-hosting the fonts, which would end this disclosure.
Server logs
Our hosting provider records ordinary web server logs, including IP addresses, as part of serving pages and defending against abuse. This is standard for nearly every website. The lawful basis is our legitimate interest in keeping the site running and secure. We do not combine these logs with anything else described on this page.
What we do not do
We do not sell personal information, and never have. We run no advertising networks, no remarketing, and no tracking pixels of any kind: no Meta pixel, no Hotjar, no Clarity, no Amazon tags. There are no user accounts. Comments are closed across the site, so there is no comment data. We do not try to work out who you are from what you read.
Who we share with
Three companies process data on our behalf. Kit receives your email address, if you subscribe, and sends our emails. Google receives analytics measurements and font requests, as described above. Our hosting provider serves the site and keeps its server logs. Nobody else receives anything, and no data changes hands as part of any commercial arrangement.
If the law ever compels us to disclose something, we will disclose the minimum it requires. It helps that there is very little to compel.
How long we keep things
Your email record stays until you unsubscribe or ask us to delete it. When you ask, we delete it from both places it exists: our own database and Kit. We also purge our own signup records within 24 months of an unsubscribe, so an address you have walked away from does not sit in our database indefinitely. Analytics cookies expire about thirteen months after they are set. Server logs are kept for as long as our host retains them. Everything on your device stays exactly as long as you choose to keep it there.
Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct or delete it, object to how we use it, restrict its use, or receive it in a portable form. Write to contact@hiperformanceculture.com and we will answer within one month. In practice the exercise is short: the record is an email address, a timestamp, and a page URL.
If you are in the UK or the European Economic Area, these rights are guaranteed by the UK GDPR and the GDPR, and you can complain to a regulator: in the UK, the Information Commissioner's Office at ico.org.uk. If you are in California, the CCPA gives you the right to know what we collect, to ask us to delete it, and not to be discriminated against for asking; we do not sell personal information, so there is nothing to opt out of. If you are anywhere else, write to us anyway. We apply the same rights to every reader.
Cookies, and how to control them
The only cookies we set are the two Google Analytics cookies described above. The site sets no cookie of its own for reading, and nothing on the site requires cookies to work. Every major browser lets you block or delete cookies per site, and Google publishes an opt-out add-on at tools.google.com/dlpage/gaoptout. Blocking ours costs you nothing.
Security
The site is served over HTTPS. Signup forms are protected against bots by the trap field and by server-side rate limits, and your address goes from our server to Kit over an encrypted connection, and it never passes through a third-party form service. The larger truth is architectural: the most sensitive things a site like ours could hold, your answers about your own sleep, stress and habits, are never collected at all. The best protection we can offer that data is the one we chose: not having it.
Transfers outside the UK and EEA
Google and Kit are US companies and may process data outside the UK and EEA under the safeguards those providers publish, including their standard contractual clauses. The data transferred is what this page already describes: an email address to Kit, measurement data to Google.
Children
This site is written for adults and is not directed at children under 16. We do not knowingly collect their data. If you believe a child has subscribed, tell us and we will delete the record.
Other sites we link to
We link heavily to journals, publishers and DOI records, and our articles cite hundreds of external sources. Those sites have their own policies, and this one stops at our edge.
Changes
If we change this policy we will update the date below, and for anything significant we will say so plainly rather than let a quiet edit do the work. The version you read is the version that applies.