Privacy

The free Teardown. The address of your website and your answers to six questions about your business. If you choose to unlock the full findings, your email address and whether you ticked the box asking for occasional email from me.

A purchase. Your name and email, and the details of what you bought. Card details go to Stripe and never reach the site’s servers.

A Blueprint engagement. Your onboarding answers, the material you share with me, and the notes and recordings from your interview and strategy session, so the Blueprint can be written from what you actually said.

Getting in touch. Whatever you put in the contact form or an email: name, email, website, and your message.

• Produce the thing you asked for: the Teardown, the Repair, the Blueprint, or a reply.
• Send you the email that delivers it, and a sign-in link when you ask for one.
• Send occasional email about my work, only if you ticked the box. Every one carries an unsubscribe link.
• Understand how the site is used, in aggregate, so it gets better.
• Keep the free tool free by stopping automated abuse.

How I use AI. For Teardown, Repair and Blueprint work, I send relevant public website content, your answers and research to third-party AI model providers for analysis and production support. I choose providers whose commercial terms do not permit training on customer data. The Teardown is automated. For a Repair, I review the research and make the recommendation. For a Blueprint, I lead the strategy and write the final copy.

I use Meta's advertising tools to measure which ads lead to completed Teardowns and purchases. When you unlock a Teardown, this includes sharing a hashed version of your email for matching, as described below. This measurement is separate from the optional email-marketing checkbox.

Each of these handles data only to do its job for the studio.

• Vercel hosts the site and keeps standard server logs.
• Supabase stores teardowns, purchases, engagement records, and a record of each visit to the Teardown and Repair pages: the page, your IP address, your browser, and the campaign that brought you.
• Stripe takes payment and holds your card details, along with the campaign and browser details the site attaches to each order.
• Resend sends the delivery and sign-in emails.
• Brevo sends the occasional marketing email, only to people who opted in.
• Google Analytics measures site usage. Google also receives completed Teardown, lead, checkout, purchase and refund events linked to its browser identifiers when available. I do not send Google your email, submitted website, quiz answers or private report links.
• Meta receives browser and server events to measure ad results. For a successful Teardown email unlock, I send a normalized, SHA-256 hashed version of your email, available ad-click and browser-cookie identifiers, your IP address and browser information. Hashing changes the form of the email; it still allows Meta to match it to an account. Checkout and purchase events include available matching identifiers and the amount. I do not send Meta your quiz answers, findings or private report link, and admin-created outbound Teardowns are not counted as leads.
• Cloudflare Turnstile checks that a Teardown request comes from a person, not a script.
• Firecrawl fetches the public pages of the website you submit, so the Teardown has something to analyze.
• AI model providers generate the Teardown and Repair text, as described above.
• Cal.com schedules your calls with me and holds the booking details you enter.
• Linear is where each Blueprint engagement is tracked as a project, with your name and company on it.

• A sign-in cookie, set only after you use a sign-in link, so your account stays open for 30 days on that browser.
• A portal cookie for Blueprint clients, set after you open your portal link.
• A first-visit cookie that remembers which campaign or link brought you here, so I know what is working.
• A cookie holding a random id that ties your visits to this site together for a year, so I can see which pages led to a Teardown or a purchase. It holds nothing about you, and it is never sent to Google or Meta.
• A cookie holding a random id, set when you start a Teardown, so the site can limit how many one browser starts in a day. It holds nothing about you.
• Your browser's own storage keeps the id of a Teardown you ran on that device, so the site can show you the way back to it.
• Google Analytics sets measurement cookies. A separate short-lived cookie carries its browser and session identifiers to the site’s server so completed actions can be associated with the visit. It expires after 30 minutes.
• Meta's browser and ad-click cookies, when available, help match successful actions to advertising activity.

Cookies are not required to read the marketing pages. Blocking them can affect sign-in, abuse prevention and measurement.

Teardowns, Repairs, and Blueprints are kept so you can come back to them. Purchase records are kept as long as tax and accounting rules require. Marketing consent is kept until you unsubscribe. Everything else is kept only as long as it is useful for the purpose above, and deleted when you ask.

Email hello@thebrandpunk.com and I will send you a copy of the information the studio holds about you, correct it, or delete it. I honor these requests for everyone, wherever you live, including the rights California residents have under the CCPA. I will not treat you differently for asking.

Every marketing email has an unsubscribe link. Delivery and sign-in emails are sent only when you ask for the thing they carry.

The site is for businesses and the people who run them. It is not directed at children, and I do not knowingly collect information from anyone under 16.

When this page changes, the date at the top changes with it. A change that affects how your information is used will be announced on the site before it takes effect.

Read the terms for what you are agreeing to when you use the site or buy from it.