Limited Time

Flash Sale: 70% OFF "NO BS STARTUP GUIDE" — USE CODE: NOBSPATRON

00 Days
00 Hrs
00 Min
00 Sec
Claim Discount

Privacy Policy

Last updated: June 10, 2026.

This site is nobsstartupcoach.com, run by Farzad Khosravi as No BS Startup Coach, based in New York City.

The short version: I collect anonymous usage stats, plus your email and name when you choose to give them. I don't sell your data. I don't run ad trackers. If your browser asks not to be tracked, the analytics stay off.

What this site collects

Usage analytics. Pages you view, how far you scroll, and clicks on a few key buttons. These events carry a random device id, not your name. They help me see which pages work.

Email and name, when you give them. Newsletter signups, lead magnet downloads, the growth quiz, and program applications all ask for an email. Some ask for a first name.

Quiz results. If you finish the growth quiz, your result label (for example, "Leaky Bucket") is saved with your email so I can send relevant follow-ups. Your individual answers stay in your browser.

Form behavior. If you start a form and leave, the site records which field you last touched and how long you spent. It never records what you typed.

Payment details. Stripe handles all checkout. Card numbers go to Stripe, never to this site. I see your email and what you bought.

The services behind the site, and why

Each of these processes some data under its own privacy policy.

  • Google Analytics 4 measures traffic. Google sets its own cookies. It loads only if your browser doesn't signal Do Not Track or Global Privacy Control.
  • Cloudflare hosts the site and runs Cloudflare Web Analytics, a cookieless traffic counter. The analytics beacon is also skipped when your browser signals Do Not Track or GPC. Browsers may also send security error reports to the host; I read those in server logs and don't keep them.
  • Kit (formerly ConvertKit) stores the email list and sends the emails. When you submit an email form, it goes straight to Kit.
  • Calendly handles call scheduling. Its widget loads only when you interact with a booking section. What you enter there goes to Calendly.
  • Stripe processes payments on Stripe-hosted checkout pages.
  • Supabase stores this site's own usage events (page views, scroll depth, form events), keyed to the random device id described above.

Do Not Track and Global Privacy Control

This site honors both signals. If your browser sends Do Not Track or GPC, the site skips Google Analytics, the Cloudflare beacon, and its own Supabase event tracking entirely. No opt-out banner needed. Set the flag and the trackers never load.

Cookies and localStorage

The site sets no cookies on normal pages. Google Analytics sets its standard cookies when it runs. Embedded tools like Calendly may set their own when you use them. If you buy gated content and activate it, one authentication cookie keeps you signed in.

The site does use your browser's localStorage. It holds a random device id, the campaign tags and referrer from your first visit, and a small queue of analytics events if you go offline. Some interactive pages also save reading progress there. All of it stays on your device. You can clear it any time through your browser settings.

How long data is kept

Honest answer: there's no automated deletion schedule today. Emails stay in Kit until you unsubscribe or ask for deletion. Purchase records stay in Stripe. Usage events stay in Supabase and Google Analytics under their defaults. Ask and I'll delete what's deletable. Stripe records may need to stay longer for tax and accounting reasons.

Your choices

  • Email [email protected] to ask what I hold about you, or to have it deleted.
  • Every email I send has an unsubscribe link. One click and you're out.
  • Turn on Do Not Track or GPC in your browser and the analytics never load.
  • Clear your browser's localStorage to remove the device id and saved progress.

Children

This site is for founders and business operators. It isn't directed at children, and I don't knowingly collect data from anyone under 16. If you believe a child gave me their data, email me and I'll delete it.

Jurisdiction

Privacy matters here run under New York, USA law. If you're somewhere with stronger privacy rights, like the EU or California, email me and I'll honor the access or deletion request the same way.

Changes to this policy

When the site's data practices change, this page changes with them, and the date at the top moves.

  • 2026-06-10: Ownership and jurisdiction details filled in.
  • 2026-06-09: First published.

Questions? Email [email protected]. A person reads it.