Privacy.

Who this covers

This policy covers stantscherenkow.com. Stan Tscherenkow is the controller of the information described here. Contact: [email protected].

Coaching engagements are covered separately by the confidentiality clause in your signed engagement letter. That clause is stricter than this page.

What you hand over

• Forms. Name, email, company, role, and the free text you write in the application or newsletter form. You choose what goes in the free text. Do not put a social security number, a passport number, a bank credential, or health information in it. There is no field that asks for those and I have no reason to hold them.
• Email replies. Whatever is in the message you send, held in the mailbox until the thread is closed out.

What is collected while you read

• Plausible. Aggregate page views, referrer, approximate country, device category. No cookies, no cross-site identifier.
• Google Analytics 4. Page views, source, approximate geography, device and browser category, basic engagement. Configured with Google Signals off and ad personalization signals off.
• Meta Pixel. Installed 18 May 2026. Records that a browser loaded a page on this site and reports it to Meta for advertising attribution and retargeting. Meta may set advertising cookies and may connect the visit to a Meta account under Meta terms, not mine.
• Cloudflare. Serves the site, stores application and contact submissions in the site's private database, sends the notification to Stan's verified inbox, and processes technical log information for delivery and abuse prevention.
• Form abuse control. The contact endpoint turns the connecting IP address into a one-way token used only to limit repeated submissions. The token is not stored with the inquiry and its rate-limit record is deleted within 24 hours.

What is not collected

• No session recording, no heatmaps, no scroll or mouse replay.
• No LinkedIn Insight Tag and no advertising audience tracker beyond the Meta Pixel named above.
• No phone number field anywhere on this site. You will not get a marketing text from me, because I never asked for the number.
• No purchased contact lists and no third-party data appended to what you submit.

Selling, sharing, and targeted advertising

Plain answer: no money is ever exchanged for your data.

The longer answer matters, because US state privacy laws define "sale" and "share" more broadly than money changing hands. Running the Meta Pixel discloses visit data to Meta, and Meta uses it for cross-context behavioral advertising. Several states treat that as a sale or a share regardless of payment. So it is stated here rather than argued about.

• Categories shared for targeted advertising: internet and device activity, meaning the pages you loaded on this site, plus the identifiers your browser presents to Meta.
• Who receives it: Meta Platforms, Inc.
• Categories sold for money: none.
• Sensitive data shared or sold: none.
• Data from anyone under 16 shared or sold: none knowingly.

If you want a written list of the third parties your personal data has gone to, ask for it and you will get one.

AI and model training

Nothing you submit through a form or by email is collected, used, or sold for training large language models or any other AI model. That binds me and it is a condition on every processor I contract with.

The public writing on this site is a separate matter, and the honest answer is that it is open. The robots file grants AI crawlers permission to read and train on the published pages, because the point of publishing is being read, by people and by machines. That permission covers the essays and the pages. It does not cover anything you send me.

One limit I cannot make on your behalf: measurement data that reaches Meta and Google is governed by their terms, not mine. If that concerns you, the opt-out below removes you from it.

If any of this changes, this section changes first and the date at the top moves.

How the information is used

• To answer your inquiry or work through your application.
• To send the newsletter you asked for.
• To see which pages are worth keeping.
• To run advertising and measure whether it worked.
• To keep the records a business is required to keep.
• To stop abuse and unauthorized access.
• To meet a legal obligation, and to protect the rights and safety of this site and the people using it.

Your information is never used to make an automated decision about you. Every decision about whether to work together is made by a person, and that person is me.

Who processes it

• Beehiiv hosts the newsletter list.
• Plausible provides cookieless measurement.
• Google Analytics 4 provides aggregate visitor measurement.
• Meta Pixel provides advertising attribution and retargeting.
• Cloudflare serves and protects the site, stores application and contact submissions in the site's private D1 database, and delivers submission notifications to Stan's verified inbox.

How long it is kept

• Application and contact submissions: kept while the conversation is live, then for as long as needed for business records, contract, dispute, and tax obligations.
• Newsletter subscriptions: kept until you unsubscribe, then a suppression record is kept so you are not added back by accident.
• Measurement data: aggregate, and not tied back to you by name.
• Cloudflare technical logs: short retention, set by Cloudflare for security and delivery.
• Form rate-limit tokens: no more than 24 hours.

You can ask for deletion at any point, including while a conversation is still open.

Security

Reasonable administrative, technical, and organizational safeguards protect what is submitted here. No transmission or storage method is absolutely secure.

Your rights and how to use them

Send one email to [email protected]. Say what you want. There is no form and no account to create.

• Access: a copy of what is held about you, including the categories, the sources, and who it went to.
• Correction of anything inaccurate.
• Deletion, subject to the records I am legally required to keep.
• Portability: a copy in a format you can take elsewhere.
• Opt-out from targeted advertising and from any processing that counts as a sale or a share.
• Restriction of, or objection to, processing, and withdrawal of consent where consent is the basis.

Requests are answered within 45 days. If a request is genuinely complicated, that can extend once by another 45 days, and you will be told why before the first 45 days run out. If a request is refused, the reason is given in writing and you can appeal by replying to that email. An appeal is answered within 45 days, and if it is still refused you will be given the contact details for your state attorney general.

You will never be charged, refused service, or given a worse price for using any of these rights.

Do Not Track and Global Privacy Control

This site does not respond differently to a Do Not Track browser header, because there is still no agreed standard for what that header should do.

Several states now treat a Global Privacy Control signal as a legally valid opt-out. This site does not yet detect that signal automatically, so it would be false to tell you it is honored the moment you arrive. Until the detection is built, the opt-out route is one email to [email protected], and it is honored the same way a browser signal would be: your data is excluded from Meta advertising measurement and from anything else that counts as a sale or a share. When automatic detection ships, this paragraph changes and the date at the top moves.

If you are in the EU, the UK, or Switzerland

This site is run from the United States, in English, priced in US dollars, and aimed at owners of US businesses. It is not marketed into the EU or the UK. If you contact me from there anyway, here is where you stand.

• Why your data is processed: to take steps at your request before entering a contract and to perform that contract; consent for the newsletter and for advertising cookies; legitimate interest in keeping the site secure.
• Transfers: your information reaches the United States. Where a transfer mechanism is required, the European Commission Standard Contractual Clauses apply, together with the UK addendum for UK data.
• Complaints: complain to me first at [email protected]. Your complaint is acknowledged within 30 days and answered as soon as it can be. You keep the right to go to your supervisory authority, or to the Information Commissioner's Office in the UK, at any time and without asking me first.

Children

This site is for people running businesses. It is not directed to anyone under 13, and information from children under 13 is not knowingly collected. Nothing is knowingly sold or shared for advertising where the person is under 16. If you think a child has submitted something, email [email protected] and it gets deleted.

When information is disclosed

Information is disclosed when the law requires it, which means a court order, a subpoena, or a regulatory demand, or when it is reasonably necessary to protect the rights, property, or safety of Stan Tscherenkow, the people using this site, or others.

If this business is ever sold or merged, your information may transfer with it. You would be told before that happened, and you could ask for deletion first.

Changes to this policy

This policy can change. Material changes move the "Last updated" date at the top, and the change is described in the first paragraph of the affected section rather than buried. Continuing to use the site after an update means you accept the revised policy.

Governing law

This policy is governed by the laws of the State of California, United States. That does not remove any right your own state or country gives you.

Contact

One address for everything on this page: [email protected].

---

If you reached this page while deciding whether to work with Stan, the work options are at /ways-to-work and the application is at /apply. The terms cover money, scope, and what is not promised.