Privacy policy

WhatIfInLearning is a static classroom. There is no account password and no database we operate. This page is what actually happens when you visit, subscribe, or pay.

Effective 2026-09-08 · Written by Thomas Sanders · Questions: contact

On your device

The site uses localStorage in this browser. We do not set a first-party tracking cookie today.

Key	What it holds
`wil_account_v1`	Email you typed, a SHA-256 of that email, subscribe/premium flags. Required before PayPal buttons fire so restore can work later.
`wil_premium_v1`	Plan, paid time, and the `WIL-` restore code after a successful PayPal capture on this browser.

Clearing site data for this domain removes premium on that browser until you restore at /account.

Email and the member list

Newsletter and purchase notices POST to Formspree form xkooqoqe. Formspree’s processor is the inbox. Raw buyer emails stay there, not in git.
The public file /data/members.json stores only SHA-256 hashes of lowercase emails and of uppercase WIL- restore codes, plus plan and paid date. That is how a new phone can unlock after the owner runs the free GitHub Action.
We do not sell, rent, or share the list with advertisers. There is no Mailchimp, Klaviyo, or paid ESP.

PayPal

Checkout uses PayPal JS Buttons (Venmo enabled). PayPal is the merchant of record for the charge. Their privacy policy governs card data, wallet, and fraud checks. We receive a client-side capture result and write the unlock on this device. We do not see your full card number.

Fonts, host, and ads

Google Fonts (Figtree, Fraunces) load from Google. Google may see the request.
Host (Cloudflare) sees IP, user-agent, and the URL as any CDN does. Logs follow their policy.
Analytics: no Google Analytics, Meta pixel, or similar on these pages today.
Ads: the Google AdSense loader (ca-pub-2868508772018395) is on classroom pages so Google can review the site. No ad units are placed in the page yet. When ads run, they are meant for guides — not inside calculator inputs and not on the PayPal wall. Google may set cookies and use the visit to measure and personalize ads (How Google uses advertising cookies). We do not sell the email list.

Children

The classroom is written for adults making household money decisions. Do not subscribe a child.

Deletion

Email [email protected] from the address you used. We will delete the Formspree row and the matching hash in members.json. You can wipe this browser’s localStorage yourself anytime.

Related: disclaimer · about · contact