Privacy Policy
We built this site to hold almost nothing about you. The one personal detail we keep is an email address you chose to give us. Everything else — your answers, your scores, your progress — stays on your device, where we cannot read it. This page explains all of it, exactly.
The short version
- If you subscribe, we keep a signup record: your email address, when you signed up, the page you signed up from, a short source label for the form, and whether your address has reached our email provider. Hosting and service logs are separate.
- Your assessment answers, scan results and protocol progress are scored and stored in your own browser. They are never sent to us. We could not sell them if we wanted to, because we never have them.
- We run Google Analytics to count readers, but only if you allow Statistics cookies. You can decline and carry on using the site.
- We run no advertising, no remarketing, no tracking pixels, and we sell nothing about you to anyone.
- Ask us at contact@hiperformanceculture.com and we will show you, correct, or delete whatever we hold. These rights are written into law for some readers; we extend them to everyone.
Who is responsible
HiPerformance Culture is operated from the United Kingdom by N.Y Khan, its founder and editor, who is the data controller for the information described here. Our readers are worldwide, and this policy is written for all of them: wherever you are, you get the same treatment and the same rights. Reach us at contact@hiperformanceculture.com.
What we collect, and why
Your email address, if you give it
Every signup form on this site posts to our own server first. When you subscribe we record five things: your email address, the time, the page you signed up from, a short source label for the form, and whether your address has reached Kit yet. That record lives in our own WordPress database. We then pass your address, and only your address, to Kit (formerly ConvertKit), the service that sends our emails.
The signup page matters and we want to be plain about it: if you subscribed from an assessment, our record shows which one. We use this to know which parts of the site earn subscriptions, not to profile you. If you would rather we removed that detail from your record, ask and we will.
On assessments, the form includes a consent checkbox and our server rejects the signup without it. Every form also carries a hidden trap field that catches spam bots; a real reader never sees or fills it, and it stores nothing about you.
Some signups deliver a report: the confirmation email you receive from Kit is that report. Your answers are not in it and were never sent to us. The next section explains why.
The lawful basis for all of this is your consent. Every email carries an unsubscribe link that works immediately.
What stays on your device
The interactive parts of this site are built to work without telling us anything. When you take an assessment or the Performance Scan, your answers are scored by code running in your own browser and saved in your browser's local storage. When you run a 90-day protocol, your daily check-ins and diary entries are stored the same way. None of it is transmitted. There is no request that could carry it, which you can verify in your browser's network inspector.
Because that data lives only on your device, it is also yours to manage. The protocol pages give you an export button that writes your progress to a file — the file goes to you, not to us — and a delete-all control that clears everything in two clicks. Clearing your browser's site data removes all of it too. We cannot recover it for you, because we never had it.
Analytics
We use Google Analytics 4 to count visits and see which articles get read. It sets two cookies, _ga and _ga_Y4FZRSHC60, which last about thirteen months and let Google tell a returning browser from a new one. Measurement data goes to Google. We use it to decide what to write next. We do not use it to build advertising profiles.
Analytics measurement runs only if you allow Statistics cookies. When you first arrive, a consent banner asks. Until you accept, our analytics setting stays switched off and we do not send measurement requests. You can decline, or ignore the banner, and carry on using the site. If you withdraw consent, we stop further measurement and clear the Google Analytics cookies we can reach in your browser; any that remain on other paths, or that your browser keeps, last until they expire or you delete them. We have not verified that Do Not Track or Global Privacy Control signals are honoured, so please use the banner. To change your choice at any time, open the Manage consent tab at the bottom right of the screen, choose your Statistics setting and select Save preferences.
Fonts
Our pages load typefaces from Google Fonts, which means your browser requests the font files from Google directly and discloses your IP address to Google in doing so. We are weighing self-hosting the fonts, which would end this disclosure.
Server logs
Our hosting provider records ordinary web server logs, including IP addresses, as part of serving pages and defending against abuse. This is standard for nearly every website. The lawful basis is our legitimate interest in keeping the site running and secure. We do not combine these logs with anything else described on this page.
What we do not do
We do not sell personal information, and never have. We run no advertising networks, no remarketing, and no tracking pixels of any kind: no Meta pixel, no Hotjar, no Clarity, no Amazon tags. There are no user accounts. Comments are closed across the site, so there is no comment data. We do not try to work out who you are from what you read.
Who we share with
Three companies process data on our behalf. Kit receives your email address, if you subscribe, and sends our emails. Google receives analytics measurements and font requests, as described above. Our hosting provider serves the site and keeps its server logs. Nobody else receives anything, and no data changes hands as part of any commercial arrangement.
If the law ever compels us to disclose something, we will disclose the minimum it requires. It helps that there is very little to compel.
How long we keep things
Unsubscribing stops our emails; every email carries an unsubscribe link. A request to delete your data is handled separately: ask us and we remove your record from our own database and from Kit. Signup records for addresses that are no longer active subscribers are also cleared on a schedule, and we will state the exact period here once it has been confirmed. Analytics cookies expire about thirteen months after they are set. Server logs are kept for as long as our host retains them. Everything on your device stays exactly as long as you choose to keep it there.
Your rights
You can ask us for a copy of the personal data we hold about you, ask us to correct or delete it, object to how we use it, restrict its use, or receive it in a portable form. Write to contact@hiperformanceculture.com and we will answer within one month. In practice the exercise is short: the record is an email address, a timestamp, a page URL, a source label and a delivery status.
If you are in the UK or the European Economic Area, these rights are guaranteed by the UK GDPR and the GDPR, and you can complain to a regulator: in the UK, the Information Commissioner's Office at ico.org.uk. If you are in California, the CCPA gives you the right to know what we collect, to ask us to delete it, and not to be discriminated against for asking; we do not sell personal information, so there is nothing to opt out of. If you are anywhere else, write to us anyway. We apply the same rights to every reader.
Cookies, and how to control them
Besides the two Google Analytics cookies described above, which are set only if you allow Statistics, we set small cookies that remember your consent choice. The site sets no cookie of its own for reading, and nothing on the site requires cookies to work. Every major browser lets you block or delete cookies per site, and Google publishes an opt-out add-on at tools.google.com/dlpage/gaoptout. Blocking ours costs you nothing.
Security
The site is served over HTTPS. Signup forms are protected against bots by the trap field and by server-side rate limits, and your address goes from our server to Kit over an encrypted connection, and it never passes through a third-party form service. The larger truth is architectural: the most sensitive things a site like ours could hold, your answers about your own sleep, stress and habits, are never collected at all. The best protection we can offer that data is the one we chose: not having it.
Transfers outside the UK and EEA
Google and Kit are US companies and may process data outside the UK and EEA under the safeguards those providers publish, including their standard contractual clauses. The data transferred is what this page already describes: an email address to Kit, measurement data to Google.
Children
This site is written for adults and is not directed at children under 16. We do not knowingly collect their data. If you believe a child has subscribed, tell us and we will delete the record.
Other sites we link to
We link heavily to journals, publishers and DOI records, and our articles cite hundreds of external sources. Those sites have their own policies, and this one stops at our edge.
Changes
If we change this policy we will update the date below, and for anything significant we will say so plainly rather than let a quiet edit do the work. The version you read is the version that applies.