DRAFT -- REVIEWED BY NOBODY QUALIFIED YET

LEGAL

Privacy Policy

What this site collects, who it passes it to, how long it keeps it, and what you can make us do with it.

Last updated 28 August 2026

Draft. This describes what the site genuinely does -- every service named is one it really sends data to. It has not been reviewed by a lawyer, and the bracketed items are facts that have to come from you. Get it reviewed before this collects anything from the public.
  1. 1

    Who we are

    This site is operated by Insight Information B.V., trading as JansenLucas.com, of Avignonlaan 16, 5627GA Eindhoven, Nederland. For anything in this policy, including the requests described in section 8, write to lucas@jansenlucas.com.

    Where this policy says “we” it means that entity. Where it says “the site” it means this domain and the pages served from it.

  2. 2

    What we collect

    Three groups, and nothing outside them.

    • When you register for the event: your name and email address.
    • When you sign up as an affiliate: your name, email address, a password, and optionally your country, phone number, website and a description of your audience. If you sign up with Google instead, we receive your name, email address and the fact that Google verified it -- not your Google password.
    • When you buy something: your payment is handled by Stripe on Stripe's own pages and systems. We never see or store your card number. We receive the fact of the payment, the amount, and the billing details Stripe passes back.
    • Automatically, on every visit: your IP address, browser and referring page, in standard server logs, plus a referral cookie if you arrived through an affiliate link.
  3. 3

    Cookies

    The site sets two cookies and no third-party advertising or analytics cookies at all.

    • jl_ref -- records which affiliate's link you arrived through, so they get credit if you register. It lasts 60 days and holds nothing but a short referral code. It is set on your first visit through a link and is not overwritten by later ones.
    • aff_session -- keeps you signed in to the affiliate dashboard. It lasts 30 days, is httpOnly so page scripts cannot read it, and holds your email address and a signature, nothing else.
  4. 4

    How we use it

    • To register you for the event and tell you how to attend.
    • To run the affiliate program: issue your referral code, count referrals, rank affiliates and award the prizes described in the Affiliate Terms.
    • To send you the Affiliate Toolkit and password reset links.
    • To take payment and deliver what you bought.
    • To send you launch updates, but only if you ticked the box asking for them. You can stop them at any time using the unsubscribe link in any of those emails.
  5. 5

    Who we share it with

    We do not sell your data, and we do not share it for anyone else's marketing. It reaches these processors because the site cannot work without them:

    • Notion Labs, Inc. -- stores the affiliate and referral records.
    • Resend, Inc. -- sends the Affiliate Toolkit, password reset links and launch emails.
    • Stripe, Inc. -- takes payment. Stripe is a controller in its own right for the payment data it handles.
    • Google LLC -- only if you choose the Google sign-in button, to verify who you are.
    • Vercel Inc. -- hosts the site and holds the server logs.
    • We will also disclose data where the law requires it, and to a buyer if the business is sold, in which case this policy follows the data.
  6. 6

    Where your data goes

    All of the processors above are United States companies and your data is processed there. If you are in the UK or the EEA, that is a transfer outside your jurisdiction, made under the standard contractual clauses in each provider's terms.

  7. 7

    How long we keep it

    • Affiliate and referral records: for the duration of the launch and [RETENTION PERIOD, e.g. 24 MONTHS] after it, because prize eligibility and disputes are judged on them.
    • Purchase records: as long as tax law requires us to keep them, which is 7 years in the Netherlands.
    • Server logs: as long as our host retains them by default.
    • Marketing consent: until you withdraw it, then a record of the withdrawal itself so we do not email you again by mistake.
  8. 8

    Your rights and how to use them

    Depending on where you live you can ask us for a copy of what we hold, ask us to correct it, ask us to delete it, object to us using it, ask for it in a portable format, or withdraw a consent you gave. We will not charge you and we will not treat you differently for asking.

    Write to lucas@jansenlucas.com. We will answer within 30 days. If you are in the UK or the EEA and you are not satisfied, you can complain to your national data protection authority; in the UK that is the Information Commissioner's Office.

    One limit worth stating plainly: deleting your affiliate record deletes your referral history with it, which forfeits any prize eligibility it carried.

  9. 9

    Children

    This site is not for anyone under 18 and we do not knowingly collect anything from them. If you believe a child has given us data, write to lucas@jansenlucas.com and we will delete it.

  10. 10

    Changes to this policy

    If we change it we will move the date at the top. If the change is significant we will email anyone it affects rather than relying on you to check.