Privacy Policy

Last updated 3 October 2026

This policy explains what personal data Reach For handles and why. In short: we collect the minimum needed to sell you access, keep you logged in, and understand how the course is used; we do not run advertising or tracking cookies, and we do not sell your data. Reach For is operated by an individual based in the United Kingdom, who is the data controller.

Purchasing

Checkout and payment are handled entirely by Lemon Squeezy, the merchant of record. They collect your name, email address, payment details and the billing/location information needed for tax. We never receive or store your card details. From Lemon Squeezy we receive your email address and a licence key so we can give you access. See Lemon Squeezy’s privacy policy for how they process your data.

Access and your session

When you activate a licence key we send that key (and your email, if you enter it) to Lemon Squeezy’s licensing service to verify the purchase and register a device activation. We then place a signed session token in a cookie on your device (rf_session, HttpOnly, roughly 90 days) that keeps your browser unlocked. We do not run a user-account database — that cookie on your device is the only record of your session, and it is periodically re-checked against Lemon Squeezy so that a refund or chargeback ends access automatically.

Cookies and local storage

The only cookie we set is rf_session, which is strictly necessary — it is what unlocks the course. Your browser’s local storage also holds your lesson progress, your spaced-repetition review schedule and any personal notes you make in the cue log. That stays in your browser, is never sent to us, and you can clear it at any time from your browser settings. Our analytics set no cookie and store nothing in your browser. See the Cookie Policy for the full list.

Hosting and security logs

The site runs on Cloudflare Pages. Cloudflare processes technical data such as your IP address and request metadata to serve the site, protect it against abuse, and provide basic aggregate traffic statistics. See Cloudflare’s privacy policy for detail.

Analytics and email

We use Betterlytics to understand which pages and lessons are used and where people get stuck, so we can improve the course. It sets no cookie, stores nothing in your browser and does not track you across other sites. It shortens your IP address (dropping the last part) before any processing and does not keep the full address; a visit is counted from a hash of that shortened address, a rounded screen size and your browser name, with a secret that changes daily, and is never linked to your name, email or licence. Betterlytics acts as our processor under UK/EU data protection law and processes and stores this data in the EU. We do not use it to build a profile about you or to advertise. The legal basis is our legitimate interest in maintaining and improving the service.

Your receipt and licence key are emailed by Lemon Squeezy. We may occasionally email you about material changes to the course or these policies, using the address from your purchase; we do not send marketing email without your opt-in.

Legal bases (UK GDPR)

We rely on performance of a contract (providing the access you bought), our legitimate interests (keeping the service secure and working), and consent where it is required.

Retention

Lemon Squeezy retains order and tax records under its own policy and applicable law. The session cookie expires about 90 days after it is issued, or when you sign out. We do not keep a separate profile about you.

Your rights

You have the right to access, correct, delete, port or object to the processing of your personal data, and to complain to the UK Information Commissioner’s Office (ico.org.uk). For data held by the merchant of record, contact Lemon Squeezy directly or email us and we will help. Some processing by Lemon Squeezy and Cloudflare may take place outside the UK under appropriate safeguards.

Children

The course is not directed at children under 16.

Contact

Privacy questions or requests: [email protected].