Legal
Privacy.
What Brace Yourself collects, who processes it, and how to leave the list.
What gets collected
- Your email address, when you join the waitlist from the home page, the cheatsheet, or a lesson. Each signup is tagged with where it came from.
- Your email address again, when you sign in with a magic link. Supabase creates your account on the first link you complete; there’s no separate signup step.
- Your exercise progress, once you have an account: which lessons you’ve passed and when.
- Anonymous usage events on every visit (page views, exercise passes, signup attempts), sent to PostHog whether or not you’re signed in.
Who processes it
- Supabase holds the waitlist, your account, and your lesson progress, and sends the magic-link sign-in email.
- PostHog collects the usage events above, on PostHog’s US-hosted servers.
- Resend sends the waitlist welcome email and the magic-link email, both from jesse@braceyourself.dev.
- Cloudflare Turnstile runs a bot check on the signup and sign-in forms before either reaches the server.
- Vercel hosts the site and serves every request.
Cookies and local storage
by-unlock: a signed cookie set after you join the waitlist, unlocking the full cheatsheet on this device without asking again.- Your Supabase session cookie, which keeps you signed in across visits.
by-progress: a browser-only record of lessons you’ve passed, used before you have an account or alongside one.by:waitlist-joined: a browser-only flag remembering you’ve already joined the list, so other signup forms on the site don’t ask again.
Leaving
Every email carries an unsubscribe link. One click removes your row from the waitlist and stops the emails.
Unsubscribing doesn’t touch your account. The mailing list and your sign-in are separate systems.
There’s no self-serve account deletion yet. Email jesse@braceyourself.dev and I’ll delete it by hand.
Questions
About anything on this page, email jesse@braceyourself.dev.