Last updated: October 16, 2026
This policy explains what information jesscoburn.com collects, why, who helps process it, and what you can do about it. It's written to be read, not skimmed past. If anything here is unclear, email hello@jesscoburn.com.
The short version
- You can read every public article without giving me anything. Anonymous visits are measured with Ghost's cookie-free analytics and with Google Analytics, which uses cookies.
- If you subscribe, I store your email address, your name if you give it, your newsletter preferences, and how you found the site. I use it to send what you signed up for.
- Paid memberships are billed by Stripe. I never see or store your full card number.
- I don't sell your information, and I don't share it for advertising.
- You can unsubscribe from any email in one click, and you can ask me to export or delete your data at any time.
Who is responsible for your information
jesscoburn.com is run by Jess Coburn ("I", "me"), based in Florida, United States. I'm the controller of the personal information described here. Contact: hello@jesscoburn.com.
This site is separate from QIT Solutions, where I work. Information you give this site isn't shared with QIT Solutions unless you ask me to pass something along.
What I collect
When you subscribe or create an account
- Account details: your email address, your name (optional), the newsletters you've chosen, your membership tier, and when you signed up.
- How you found the site: the page you signed up from and the site that referred you. Ghost records this so I can see which articles bring in readers. Before you sign up, it's kept in your browser's session storage, not in a cookie.
- Sign-in activity: Ghost signs you in with an emailed link instead of a password. It records when you last signed in and keeps you signed in with a cookie (see Cookies).
If you buy a paid membership
Payments are handled by Stripe. Stripe collects your card details directly. I receive your name, email address, billing country and postcode, the card brand and last four digits, and your subscription status and payment history. I keep these records to manage your subscription and to meet tax and accounting obligations.
When you open or click a newsletter
Newsletters include a small tracking image that tells me whether an email was opened, and links route through a redirect that records the click. I use this to see which topics are useful and to keep the list healthy, for example by removing addresses that haven't opened anything in a long time. Most email apps let you block images, which turns off open tracking.
When you email me
If you write to me, including to request bulk copies of the book, I keep what you send: your name, organization, shipping address, quantities, and our correspondence. I use it to answer you and fulfil the order.
When you visit any page
- Ghost analytics (cookie-free). Ghost's built-in analytics records page views, the referring site, browser and device type, and approximate country. It doesn't set cookies or build a profile of you. The data is processed by Tinybird on my behalf.
- Google Analytics 4. Google Analytics sets cookies to tell visits apart and records pages viewed, how you arrived, device and browser details, and approximate location. Google uses your IP address to estimate location, but Google Analytics 4 doesn't log or store IP addresses. You can opt out with Google's opt-out browser add-on.
- Security and delivery logs. Cloudflare (which sits in front of the site) and Google Cloud (which hosts it) process your IP address and browser details to deliver pages, block attacks, and keep short-term logs.
- Fonts and scripts from other servers. Fonts load from Google Fonts, and Ghost's sign-up and search scripts load from jsDelivr. Your browser connects to those servers, which see your IP address.
When this site links to another site, the link may add ref=jesscoburn.com so the other site knows where the visit came from. That tag identifies the site, not you.
How I use it, and the legal basis
If you're in the European Economic Area or the UK, the law requires me to name a legal basis for each use.
| Use | Legal basis |
|---|---|
| Sending the newsletters you subscribed to | Your consent, which you can withdraw by unsubscribing |
| Providing your account and any paid membership | Performing our contract |
| Measuring which articles and emails are useful | My legitimate interest in improving the site, and your consent where the law requires it for cookies |
| Keeping the site secure and preventing abuse | My legitimate interest in running a safe site |
| Answering your emails and fulfilling bulk orders | Performing a contract or taking steps you asked for |
| Keeping payment and tax records | Legal obligation |
I don't use your information for automated decisions that have legal or similarly significant effects on you.
Cookies
| Cookie | Set by | Purpose | Lasts |
|---|---|---|---|
ghost-members-ssr, ghost-members-ssr.sig | This site (Ghost) | Keeps you signed in. Only set after you sign in. | Up to 6 months |
_ga, _ga_* | Google Analytics | Distinguishes visits and sessions for analytics | Up to 2 years |
__cf_bm and similar | Cloudflare | Bot detection and security | Typically 30 minutes |
| Stripe cookies | Stripe | Fraud prevention during checkout. Only on payment pages. | Varies |
You can block or delete cookies in your browser settings. Blocking the Ghost cookies will sign you out; blocking the others won't stop the site from working.
Who I share it with
I use these service providers to run the site. Each processes information only to provide its service to me.
- Google Cloud (hosting, database, and file storage, in the United States)
- Cloudflare (content delivery and security)
- Mailgun (newsletter delivery)
- Resend (sign-in links and account emails)
- Tinybird (Ghost's cookie-free analytics)
- Google Analytics (site analytics)
- Stripe (payments for paid memberships)
- Google Fonts and jsDelivr (fonts and scripts)
The site runs on Ghost, open-source publishing software that I host myself, so the Ghost Foundation doesn't receive your member data.
If you follow a link to buy the book on Amazon, Amazon's own privacy policy applies to that purchase. I don't receive your Amazon details.
I'll disclose information if the law requires it, to protect the rights or safety of others, or as part of a transfer if this site ever changes hands, in which case this policy would continue to apply to your information.
I don't sell personal information, and I don't share it for cross-context behavioral advertising.
International transfers
The site and its providers are based mainly in the United States. If you're outside the US, your information is transferred there. Where the law requires it, these transfers rely on safeguards such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.
How long I keep it
- Account and newsletter data: until you delete your account. Unsubscribing stops emails but keeps the account so you can sign back in. Ask me to delete it if you want it gone.
- After deletion: removed from the live database within 30 days. Database backups roll off within 14 days after that.
- Email engagement data: kept with your account and deleted with it.
- Google Analytics data: kept for no longer than 14 months.
- Payment and tax records: kept for as long as tax law requires, typically seven years.
- Emails you send me: kept as long as needed to answer you and fulfil any order, and then as normal business records.
Your rights and choices
- Unsubscribe: every newsletter has a one-click unsubscribe link.
- Update your details: sign in and open your account to change your name, email address, or newsletter preferences.
- Access, correct, export, or delete: email hello@jesscoburn.com and I'll respond within 30 days. I may ask you to confirm the request from the email address on the account.
- Object or withdraw consent: you can object to analytics or withdraw consent at any time. This doesn't affect anything done before you withdrew.
If you're in the EEA or the UK, you also have the right to restrict processing and to complain to your local data protection authority.
If you're in California or another US state with a consumer privacy law, you have similar rights to know, access, correct, and delete your information, and the right not to be discriminated against for using them. Because I don't sell or share personal information, there's nothing to opt out of. I honor these rights for everyone, wherever you live.
Browser "Do Not Track" and Global Privacy Control signals: since I don't sell or share personal information, these signals don't change anything on this site.
Security
The site is served only over HTTPS. Accounts use emailed sign-in links instead of passwords, so there's no password to leak. Access to the database and admin tools is limited to me. No system is perfectly secure, but if a breach ever affects your information, I'll notify you as the law requires.
Children
This site is written for business owners and professionals. It isn't directed at children, and I don't knowingly collect information from anyone under 16. If you believe a child has signed up, email me and I'll delete the account.
Changes to this policy
When this policy changes, I'll update the date at the top. If a change materially affects how your information is used, I'll email members before it takes effect.
Contact
Questions or requests: hello@jesscoburn.com.