← Back to Build Season

Your data, and your customers' data

Privacy

Last updated: July 25, 2026

Short version: an email address if you hand us one, a record of what you bought if you buy, and plain counts of which pages get used. No ad trackers, no data brokers, no third-party analytics scripts, no cookie banner. The longer version is below, including the part about your customers' details — that section matters more than the rest of this page.

If you join the email list

We store the email address you type, your trade if you choose to add it, which page you signed up from, and the date. That is all — no name, no phone number.

We use it to tell you when a season opens and to send occasional Build Season updates. We don't sell, rent, or share your email with anyone. Every email we send you about new seasons or updates will include a working unsubscribe link, and unsubscribes are honored promptly. Unsubscribing doesn't touch the emails about something you bought — those are part of the purchase.

The form is rate-limited to keep bots off it, which means our host reads the IP address a request came from for a moment. We don't store that IP alongside your signup.

If you buy a season

Stripe runs the payment. You type your card details on Stripe's page, not ours — we never see or store your card number, and we could not if we wanted to.

What we keep is our sales record: the email address you gave Stripe, which season or bundle you bought, the amount and currency, Stripe's reference numbers for the payment, and the date.

We use your email address to get you access to what you bought — including getting you back in if you lose it — and to answer you if you write to us.

We email you one message about your purchase, and it contains a permanent link that restores your access on any device. Treat that link like a key: anyone who has it gets what you bought, and it does not expire. Don't post it or forward it, and tell us if it gets out. The link has your email address encoded inside it, which is how we can match it back to your purchase if you ever need help.

The one cookie

There is exactly one, and it is called bs_access. It is set only after a purchase has been verified with Stripe. It cannot be read by JavaScript in your browser, and all it holds is a signed list of which seasons you own plus the date it was issued — no name, no email, nothing else. It is what lets a paid lesson page know you are allowed in. We ask your browser to keep it for years, but most browsers cap cookies at about 13 months, and clearing your browser wipes it — which is why the permanent link is the thing to keep.

No advertising cookies. No tracking cookies. No consent banner, because there is nothing here to consent to.

Your progress stays on your device

The steps you tick off are stored in your own browser's storage, not on our server. That is why your progress doesn't follow you to a new phone. Separately we do count that a step or a mission was finished, so we can see where people get stuck — but those counts carry no name, no email and no account, and nothing you type into a lesson is ever sent to us. The next section lists exactly what gets counted.

The missed-call calculator works the same way: the numbers you type stay in your browser and are never sent to us.

How we count visits, and why it is all first-party

We need to know whether anyone is reading this and where people give up. That counting is our own code writing to our own database — there is no Google Analytics, no Meta pixel, no advertising tag, and no third-party script of any kind on this site.

The whole list of what we count: a page being viewed, the free-season index being opened, a mission being opened, a step being finished, a mission being finished, the Stuck? panel being opened, and the signup form being submitted.

What goes with a count: the page path (never the query string), a random id your browser makes up so one visit's steps aren't counted as seven people, and a short tag if you arrived from a link we posted. No IP address, no device fingerprint, nothing about you or your device. If your browser sends a Do Not Track signal, we record nothing at all.

Who else touches it

Four companies, all US-based. Vercel hosts the site and keeps short-lived server logs, which include IP addresses, for security and abuse prevention. Supabase runs the database where the email list, the sales records and the visit counts live. Stripe handles payments and holds the card details we never see. Resend sends our email, so it sees the address we are sending to and the contents of the message.

They handle this data to run the service for us. Nobody else gets it: we don't sell it, we don't trade it, and we don't hand it to advertisers.

There is no login on this site, so there is no password of yours for anyone to steal.

How long we keep it

Sales records: as long as tax and accounting rules require — plan on seven years. Email list: until you unsubscribe or ask us to delete you. Visit counts: they are not tied to you, and we keep them while they are useful. Server logs: however long our host holds them, which is a short window.

Get a copy, fix it, or delete it

Email us from the address you signed up or bought with. We will tell you what we have, correct it, or delete it.

One limit, said plainly: we have to keep the record of a completed sale for tax purposes. We will delete everything else and keep that.

What happens to your customers' details when you follow the lessons

This section matters more than anything above it, because it is not about our data. It is about yours, and your customers'.

The missions have you paste real work into Claude: job notes, a name, an address, what you charged. That happens in your own Claude account, on Anthropic's computers, under Anthropic's terms — not ours. None of it routes through Build Season and we never see it.

Two things to do about that. First: on Claude's free and consumer plans, Anthropic can use your chats to improve their models and hang onto them a while unless you switch that off in Claude's settings. Season 2 walks you through the switch. If you are going to paste customer details, do it before you paste. Their terms are theirs to change, so check the setting when you set up.

Second, the rule the seasons teach: give the job what the job needs. A subcontractor gets the job, not the keys to the filing cabinet. Full addresses, phone numbers and money details usually stay home.

Same goes for what you build. The quote, the tracker, the booking form, the invoices — they live in your own Google account, not ours. And if you publish an intake form, you become the keeper of whatever customers type into it: ask only for what the job needs, and don't paste form responses anywhere you wouldn't pin to a shop corkboard.

Children

Build Season is for adults running a business. We don't knowingly collect anything from anyone under 18.

If this page changes

The date at the top changes with it, and anything material gets said plainly right here rather than buried.

Contact

Email hello@buildseason.ai for anything on this page — a copy of what we hold, a correction, a deletion, or a question. A person reads it.