What I do with your information.

The short version.

If you give me your email, I'll use it to send you the journal and a few honest notes. I won't sell it, share it, or hand it to advertisers. If you check out and buy a journal, Stripe handles the payment — I never see your card. I use Cloudflare to host this site and a couple of free analytics tools to know whether anyone is reading. That's basically it.

The long version follows for the people who need it for legal reasons or just want to know.

What I collect.

Email address. When you sign up via the form on this site, DM "SOBER" on Instagram, or buy a product, I collect your email address. I store it in MailerLite (my email service) so I can send you the journal and the welcome sequence.

First name (optional). The signup form asks for a first name. It's optional. I use it to say "Hey [name]" in emails instead of "Hey," and that's the only thing it does.

Payment information. If you buy a journal or membership, Stripe processes the payment. They collect your card number, billing address, and any other details required to complete the transaction. I never see your full card number — Stripe sends me a confirmation that says "Card ending in 4242" and that's all I get. Their privacy policy is at stripe.com/privacy.

Anonymous traffic data. I use Cloudflare Web Analytics to count visits and figure out which pages get read. It's privacy-friendly — no cookies, no fingerprinting, no individual tracking. I see numbers like "200 people visited the shop page this week," not "this specific person visited at 2:47pm from this IP."

DM conversations. If you message me on Instagram or another platform, Meta or that platform stores the conversation. I can see it. I don't export it, sell it, or use it for anything other than talking to you.

What I don't collect.

I don't use Facebook Pixel, Google Analytics, or any other third-party tracker that follows you around the web. I don't have heatmap or session-recording tools. I don't sell or share email lists with anyone. I don't use AI tools to scrape my own subscribers' messages for marketing copy. If those things change in the future, this page will say so and I'll send a note about it before anything changes.

Where your information lives.

Emails: MailerLite. They're a Lithuanian company subject to GDPR. Their privacy policy is at mailerlite.com/legal/privacy-policy.

Payment data: Stripe. US company, PCI-DSS Level 1 compliant. stripe.com/privacy.

Site hosting + analytics: Cloudflare. cloudflare.com/privacypolicy.

DM automation (if used): ManyChat. manychat.com/legal/privacy.

If you use any of these third-party services with me, their privacy policies also apply to your data. I've chosen each of them because they have reasonable privacy practices, but I can't promise that for every change they make in the future.

Your rights.

Unsubscribe anytime. Every email I send has an unsubscribe link at the bottom. Click it and you're done — no questions, no retention emails, nothing.

Ask what I have. Email rhett@rebuildwithrhett.com and I'll tell you what data of yours I have. I'll respond within a few days because I read every email myself.

Delete your data. Same email, ask me to delete it, I will. I'll confirm by email. Note: I can't delete data that's lived on Stripe's or MailerLite's servers if there's a legal retention requirement (like tax records for paid purchases), but I'll delete what I can.

Correct your data. If something I have on you is wrong, email me and I'll fix it.

If you're an EU/UK resident, you have GDPR rights, including the right to object to processing and the right to data portability. Use the same email. If you're a California resident, you have rights under CCPA — same.

Cookies.

This site uses one functional cookie related to Cloudflare's bot-protection layer, and no marketing/advertising cookies. There is no cookie consent banner because there are no cookies that require one under GDPR. If I ever add anything that requires consent, you'll see a banner before it's set.

Kids.

This site is intended for adults (18+). I don't knowingly collect information from children under 13. If you're a parent and you think your child has signed up, email me and I'll delete the account.

Changes to this policy.

If I change anything material, I'll update the "last updated" date below and send a note to current subscribers before the change takes effect. Minor edits (typos, link updates) won't get a notification.

Contact.

Email rhett@rebuildwithrhett.com. I'm the only person on the other side of that inbox.

Last updated: May 2026