Privacy policy
What we collect, why we collect it, who else touches it, and how to get it removed.
Last updated: August 2026
1. Who we are
The 500 Sprint operates this website and is the data controller for the personal data described below. If you have a privacy question or want to exercise any of the rights in this policy, contact us through the contact details published on the site and we will respond within one month.
2. Account information
When you create an account we collect your email address, a display name if you provide one, and an authentication record. Passwords are hashed by our authentication provider and are never visible to us. If you sign in with Google, we receive your email address, name and profile identifier from Google — not your Google password. We also record the date and time you accepted our Terms of Service and Earnings Disclaimer, and your membership tier.
3. Payment information
Premium subscriptions are processed by Stripe. Card numbers and payment credentials are entered on Stripe's systems and are never sent to, seen by, or stored on our servers. We store only the identifiers Stripe gives us — a customer reference, a subscription reference, your plan, its status and its renewal date — so we can show your billing page and unlock the right content. Stripe processes your payment data as an independent controller under its own privacy policy.
4. Content you create in the site
We store the progress and notes you enter: completed roadmap days and tasks, 3-Day Cash Sprint progress, the confidence-builder exercise from onboarding, and calculator or generator inputs where saving them is part of the feature. This is stored against your account so it is there when you return, and it is visible only to you and to site administrators carrying out support or maintenance.
5. Usage and technical data
We collect basic usage data such as pages viewed, which methods and resources are opened, approximate country derived from your IP address or browser locale (used to pick your display currency), device and browser type, and error diagnostics. This is used in aggregate to improve the content and to keep the site working; we do not use it to build advertising profiles.
6. How we use your data and our legal bases
We use your data to provide the membership you signed up for and to save your progress (performance of a contract); to take payment and manage subscriptions (performance of a contract); to keep the site secure, prevent abuse and improve our content (legitimate interests); to send service emails such as confirmations, receipts and important account notices (performance of a contract and legitimate interests); and to send marketing emails only where you have opted in (consent, withdrawable at any time via the unsubscribe link).
7. Who we share it with
We share data only with the service providers needed to run the site: our hosting and database provider, our authentication provider, Stripe for payments, and our email delivery provider. Each processes data on our instructions under a data-processing agreement. We do not sell your personal data, we do not share it with advertisers or data brokers, and we disclose it to authorities only where we are legally required to.
8. International transfers
Some of our providers process data outside the UK and European Economic Area, including in the United States. Where that happens, transfers are covered by appropriate safeguards such as the UK International Data Transfer Addendum or the European Commission's Standard Contractual Clauses.
9. How long we keep it
We keep account data for as long as your account is open, and for a short wind-down period after closure so it can be restored if the request was a mistake. Records we are legally required to retain — chiefly payment and tax records — are kept for the period required by law, typically six years. Anonymised, aggregated analytics may be kept indefinitely because it can no longer identify you.
10. Deleting your account
You can request deletion of your account and personal data at any time from your account page or by contacting us. We will delete your profile, progress, notes and preferences, and remove your marketing subscriptions. We may retain the minimum billing records the law requires us to keep, and anonymised usage statistics that cannot be linked back to you.
11. Cookies and similar technologies
We use cookies and browser local storage that are strictly necessary for the site to function: keeping you signed in, remembering your currency preference, and holding progress for visitors who are not signed in. We also use privacy-friendly analytics to understand which content helps most. We do not use advertising or cross-site tracking cookies. You can clear or block cookies in your browser, but signing in and progress saving will stop working if you block the essential ones.
12. Your rights (including GDPR and UK GDPR)
If you are in the UK or European Economic Area you have the right to access a copy of your data, to have inaccurate data corrected, to have your data erased, to restrict or object to certain processing, to receive your data in a portable format, and to withdraw consent at any time where processing is based on consent. Exercising these rights is free and we will respond within one month. If you are not satisfied with our response you can complain to your national data protection authority — in the UK, the Information Commissioner's Office.
13. Children
This site is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will remove it.
14. Changes to this policy
We will update this policy as the site changes. The date at the top shows the current version, and we will notify members by email of any change that materially affects how we handle personal data.
This page is a general starting draft provided for information only. It is not legal advice, and it should be reviewed by a qualified professional for your jurisdiction before you rely on it.