Legal
Cookie Policy & California Privacy Notice
Last updated: May 18, 2026
Plain English summary: We use the minimum cookies required to make the site work, plus anonymous analytics. We do not sell personal information. We do not currently run ads on the site or use retargeting cookies. If you are a California resident, you have specific rights under the CCPA / CPRA, listed below.
1. What cookies and similar technologies we use
| Category | Purpose | Examples | Opt out |
|---|---|---|---|
| Strictly necessary | Required for the site to function — login session, shopping cart for checkout, security tokens, fraud prevention. | pyp-dashboard-auth (member login), Stripe checkout session, CSRF tokens. | Cannot be disabled — the site does not work without them. |
| Functional | Remember your preferences and improve your experience on return visits. | Reading position in the online book, locale (English / Spanish), accepted disclaimer cookie. | Clear in your browser settings. The site still works without them but will feel less personalized. |
| Analytics | Anonymous usage statistics — which pages people read, where they drop off, how the site is performing. | Google Analytics (_ga), Vercel Analytics, Plausible if enabled. | Opt out via your browser's Do Not Track / Global Privacy Control, or use a browser extension that blocks analytics. |
| Advertising / Retargeting | Currently NOT used on planyourpassing.org. If we ever enable advertising, this page will be updated and we will obtain consent first. | None at this time. | n/a — none currently active. |
2. How to control cookies in your browser
Every modern browser lets you view, block, and delete cookies. Look for “Privacy and security” in your browser settings. You can also enable Global Privacy Control in browsers that support it (Firefox, Brave, DuckDuckGo, and others) — we honor GPC signals as an opt-out of analytics tracking and any future sale-of-data scenarios.
3. Third-party services
Some pages embed third-party services that may set their own cookies, including:
- Stripe — checkout pages. Stripe Privacy Policy.
- Resend — transactional and broadcast email delivery. Resend Privacy Policy.
- Vercel — hosting and edge analytics. Vercel Privacy Policy.
- Google Analytics / Tag Manager — anonymous usage statistics, if enabled. Google Privacy Policy.
- Telnyx — SMS notifications, only for users who opt in. Telnyx Privacy Policy.
California Privacy Notice (CCPA / CPRA)
California residents have specific rights under the California Consumer Privacy Act of 2018 (CCPA) as amended by the California Privacy Rights Act of 2020 (CPRA). This section is the supplemental notice for California consumers, in addition to our main Privacy Policy.
Categories of personal information we collect
- Identifiers — email address, name (optional), IP address.
- Commercial information — purchase history (book, community, white-label).
- Internet activity — pages viewed, links clicked, anonymous device info.
- Geolocation — coarse (state-level) derived from IP; no precise location.
- Inferences — derived from the above to personalize content.
We do not collect biometric information, health information (other than what users voluntarily enter into a tool such as the Advance Directive Builder, which stays on their device unless they email it to themselves), or sensitive personal information beyond what is listed above.
Your California rights
- Right to know — request the categories and specific pieces of personal information we have collected about you.
- Right to delete — request we delete the personal information we have collected about you, subject to limited exceptions (legal record-keeping, fraud detection, transactional record retention).
- Right to correct — request we correct inaccurate personal information.
- Right to opt out of sale or sharing — note: we do not sell personal information and we do not share personal information for cross-context behavioral advertising. Nothing to opt out of in that category at this time.
- Right to limit use of sensitive personal information — we do not use sensitive personal information for profiling or behavioral targeting.
- Right to non-discrimination — we will not discriminate against you for exercising any of these rights.
How to exercise your California rights
Email privacy@planyourpassing.org (or roger@planyourpassing.org) with the subject line “California Privacy Request.” Include the email address on file and a description of the request. We respond within 45 days as required by statute (extendable once for 45 additional days with notice).
We will verify your identity before fulfilling a delete or know request. Verification is typically a match on the email address you used to interact with the site.
Authorized agents
You may designate an authorized agent to make a CCPA/CPRA request on your behalf. We require written proof of the agent's authority (a signed permission letter or a power of attorney).
Shine the Light (California Civil Code §1798.83)
California residents may also request information about disclosures of personal information to third parties for those third parties' direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.
See also: Privacy Policy · Terms · Affiliate disclosure