Privacy

Effective date: October 24, 2026.

Grease the Journey LLC, a Utah limited liability company. Grease the Journey LLC, 7533 S Center View CT, STE N, West Jordan, Utah 84084, USA. This draft describes the site as it works today and the processors we expect to use once payments and email are connected. It is written so a lawyer can review it before launch. It is not a claim that every state privacy law already applies to us. Where a law such as the California Consumer Privacy Act, as amended by the California Privacy Rights Act, or the Utah Consumer Privacy Act applies, we intend to honor the rights below anyway.

Who this covers

This policy covers greasethejourney.com and the pages on it. It does not cover a flight school, an airline, a lender, Stripe, or Resend once you leave our site. Those companies have their own policies.

Information we collect

• Quiz answers stay on your device. They are not sent to our server.
• Badge progress, hour totals, checklist checks, photos, and a development plan preview stay in localStorage on that browser. Photos are redrawn in the browser before they are saved so location data is dropped. We do not receive the photo file.
• If you turn on a public profile, we store the handle, rank name, badge names, and, only if you ask, a rounded hours tier. We do not store a note, a CFI note, an airport, a school, or an exact hour total on that page.
• If you join the list, we store the email address, your birth month and year, which boxes you checked, and that you agreed we may email you. The birth month and year are used to decide whether the sign-up is allowed and to keep a public profile and social sharing off until age 18. We do not store a birth day.
• When Stripe is connected, Stripe processes the card. We do not store a full card number. Our server stores a plan (free, Base, or Premium) tied to a browser id and, when Stripe sends it, a customer id. Until the keys are set, checkout does not create a payment.
• We do not ask for a password on this version of the site.

How we use it

We use an email address to send what you asked for: the newsletter, a note when paid plans open, or a tracker link. We use a plan record to turn Base or Premium features on. We use a public profile only to show the page you opted into. We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not use it to decide a loan, a medical, or a job.

Although we continually check for updates, prices can change at any time. Check with each company for exact pricing.

Processors

When RESEND_API_KEY and RESEND_AUDIENCE_ID are set, the address is added to that Resend audience. When they are not set, the address is written to a local signup log, or to a short server log line if the disk write fails. When STRIPE_SECRET_KEY and the price ids are set, Stripe hosts checkout. The public profile and billing files on the server are best-effort and are not a durable account system. We do not sell addresses. There is no ad network. Vercel hosts this website and processes basic request data, such as IP addresses, browser type, and pages visited, to serve and protect it. We can see these request logs for about one day.

Cookies and analytics

This version does not set non-essential cookies and does not load analytics. A session cookie can record that this browser cannot finish sign-up. That cookie does not store a birth month or year. Progress and the plan live in localStorage that you choose on this device. A cookie notice is wired in and stays hidden until a non-essential tracker is actually added. Our site does not respond to Do Not Track signals, because we do not track you across other sites.

Do Not Sell or Share My Personal Information

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. Those words follow the California Consumer Privacy Act and the California Privacy Rights Act, and the same idea in other state privacy laws, including Utah's. You can still submit a do-not-sell-or-share request. Email privacy@greasethejourney.com from the address you used, and say that you do not want that address sold or shared.

Access, correction, deletion, and other state privacy rights

If you are a resident of California, Utah, Colorado, Connecticut, Virginia, or another state with a consumer privacy law, you can ask us to:

• Tell you whether we have personal information about you, and for a copy of it.
• Correct information that is wrong.
• Delete the email address, the public profile, and the billing plan record we hold.
• Opt out of a sale or share. We do not sell or share, and the request is still honored.
• Appeal a refusal, by replying to the same thread.

Email privacy@greasethejourney.com with the address you signed up with and the request. An authorized agent may write for you if they show they are allowed to. We may ask you to confirm you control that inbox. We aim to answer within 45 days. We will not treat you worse for asking. Browser data in localStorage is deleted from the device by clearing site data. We cannot reach that copy from our server.

privacy@greasethejourney.com is the intended address. The domain is not receiving mail until it is registered. Until then, the operator can delete an address from the signup log directly.

EEA, UK, and Switzerland

If you are in the European Economic Area, the United Kingdom, or Switzerland, you can ask for access, correction, deletion, or restriction, and you can object to processing that is based on a legitimate interest. Email on this site is based on the consent you give in the signup form. You can withdraw that consent by unsubscribing, or by the deletion request above. You can also complain to your local data protection authority.

Email

Commercial email will name Grease the Journey, include a physical mailing address, and include a way to unsubscribe. You can unsubscribe at any time. Live sending is off until Resend is configured. The mailing address is below.

Grease the Journey LLC, 7533 S Center View CT, STE N, West Jordan, Utah 84084, USA.

Children

We ask for a birth month and year at sign-up for this check. We do not allow sign-ups from anyone under 13. If a sign-up cannot be completed, we do not keep the birth month and year that were entered. If we learn an account belongs to a child under 13, we will delete it. Public profiles and social sharing stay off until age 18.

Changes

When this draft is replaced with a reviewed policy, the date at the top of the page will change. The current banner means a lawyer has not signed off yet.