Legal

Privacy

What we collect, why, and what you can do about it. Plain language. No dark patterns.

Who we are

whichidea.com is run by Paris Thomas and Christian Doll, private individuals. For privacy questions, write to hello@whichidea.com.

The short version

• If you register Masterclass interest or sign up for updates, the brochure or the CBL Studio waitlist, we keep your email and which form you submitted. For Studio, we also keep your name, optional company and whether you asked for personal contact. For Masterclass interest, we keep your name, chosen class type, optional company and message, and optional choice to receive ongoing news. The signup also sends the authors a notification containing your email address, signup source, timestamp and IP address.
• The website does not set cookies or track you across the web.
• We don't run any third-party analytics, advertising, or tracking pixels.
• You can ask us to delete your data at any time by emailing hello@whichidea.com. Unsubscribing stops marketing emails; it is not a request to erase every record.

What we collect, and why

Email signups

When you register Masterclass interest or sign up for book and masterclass updates, the brochure or the CBL Studio waitlist, we collect:

• Your email address.
• A short tag indicating which form on the page you used (preorder-hero, preorder-cta, masterclass-brochure, masterclass-interest or studio-waitlist; older book signups used hero or cta) so we can see which message resonates.
• For the pre-order list: your request to be notified when pre-orders open, your optional choice to receive broader book and masterclass emails, and the signup consent version, stored as an event on your subscriber record.
• For Masterclass interest: your name, chosen class type, optional company and message, your request for contact about that interest, and your optional choice to receive ongoing Masterclass news. These details and the consent version are stored as an event on your subscriber record and included in the authors’ notification.
• For the Studio waitlist: your name, company if provided, and your optional request for personal contact. We store these details with the version of the signup consent as an event on your subscriber record.

Legal basis: your consent (Art. 6(1)(a) GDPR), given by submitting the form. Purpose: to send book updates, early chapters, AI prompt guides and masterclass news, and to provide the brochure download when requested. Pre-order list submissions request an email when book pre-orders open; broader book and masterclass emails are optional. Masterclass interest submissions request contact about a team workshop or a future open class. Ongoing Masterclass news is optional, and leaving that box unchecked does not change any earlier subscriptions. You can withdraw your contact request by emailing hello@whichidea.com. Studio waitlist submissions are for Studio news and early-access opportunities; if you tick the optional contact box, we may also contact you personally about Studio and an early trial. You can withdraw that contact request by emailing hello@whichidea.com. You can withdraw consent using the unsubscribe link in our emails. We keep your subscription while you remain on the list; an unsubscribe or suppression record may remain to prevent further marketing. You can contact us to request deletion.

This data is stored in Sender.net, our email service provider based in Lithuania. Sender describes its role as a data processor in its privacy policy.

Pre-order confirmations

We send an immediate confirmation of your pre-order request through Sender.net. To avoid sending it again when a request is retried, we store a hashed identifier derived from your email address and signup group, your confirmation choice, and the send status in Upstash Redis. This record contains no plain-text email address. It remains until removed as part of a deletion request or retirement of the pre-order service. A confirmation delivery failure does not cancel your saved request. Leaving the optional news box unchecked does not cancel any broader updates you previously requested.

Signup notifications

When you sign up, Sender.net emails the authors a notification with your email address, signup source, timestamp and IP address. For Studio, the notification also includes your name, optional company and whether you requested personal contact. These notifications are held in the authors’ email accounts. The signup endpoint also uses your IP address for short-lived rate limiting to reduce abuse. Contact us if you want signup records, including notification emails, deleted.

Server logs

Our hosting provider, Vercel (USA), keeps short-lived access logs (IP address, user agent, request path, status code) for operational purposes: debugging, abuse prevention, performance. Our subscription function also logs signup outcomes, including the email address and form source. Retention depends on the hosting configuration; we do not promise a fixed deletion period here. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Who else sees your data

We use the following service providers for the purposes described here:

• Sender.net (EU/Lithuania): email delivery and subscriber storage.
• Upstash: storage of the confirmation records described above to prevent duplicate emails.
• Vercel (USA): hosting and serverless functions. See its privacy notice.
• Google Workspace (USA): email correspondence and delivery of signup notifications to the authors.
• Cloudflare (USA): DNS for our domain.

We do not sell or rent your data to anyone, ever.

International transfers

Some providers process personal data outside the EU/EEA. Their published terms describe transfer safeguards such as Standard Contractual Clauses and, where applicable, adequacy frameworks. Contact hello@whichidea.com for information about the safeguards applicable to your data.

Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Have it corrected if it is wrong.
• Have it deleted ("right to be forgotten").
• Receive a copy in a portable format.
• Object to or restrict our processing of it.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email hello@whichidea.com. We aim to respond within 30 days. You also have the right to lodge a complaint with a supervisory authority. For us, that's the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.

Security

We use HTTPS everywhere, scoped API tokens, and least-privilege access for the small team that runs the site. We will never email you asking for a password.

Cookies

The website does not set cookies or use browser storage. See the cookies page for details.

Changes to this policy

If we change anything material, we'll update the date below and, if you're on our list, let you know by email.

Last updated: 2026-09-26.