Privacy Policy
Last updated: October 23, 2026
1. Who we are
This Privacy Policy explains how Stefan Ciancio ("stefanciancio.com," "we," "us") collects, uses and shares personal information when you visit stefanciancio.com or use our products and services. It applies to every visitor, whether or not you have an account. Contact: stefan@stefanciancio.com.
2. Information we collect
Information you give us: your name, email address, phone number, billing details, account details, messages you send us (including chat messages), event registration details, quiz or form answers, and anything else you choose to submit. Payment card details are collected and processed by our payment processors; we do not store full card numbers.
Information collected automatically: your IP address, device and browser type, pages viewed, referring links, approximate location, and interactions with our pages and emails, collected through cookies, pixels and similar tools described in Section 4.
Information from others: advertising platforms, affiliates and partners may share information such as how you found us.
3. How we use information
To provide and deliver what you buy or request; to run your account; to reply to messages and support requests; to send transactional messages and, where you have agreed or as allowed by law, marketing messages (you can unsubscribe at any time); to measure and improve our website and advertising; to prevent fraud and abuse; and to comply with the law.
4. Cookies, pixels and your choices
We use the following tools:
| Tool | Provider | What it does | When it runs |
|---|---|---|---|
| Google Analytics (gtag.js) | Measures visits, pages viewed and how the website is used. | On by default in the US and most countries; off by default in the EU/EEA, UK and Switzerland until you turn it on; off when you opt out in Your Privacy Choices or send Global Privacy Control. | |
| Meta Pixel | Meta | Measures our ads and builds ad audiences from page views, content views, newsletter signups, checkout clicks, contact clicks and clicks to other websites. | On by default in the US and most countries; off by default in the EU/EEA, UK and Switzerland until you turn it on; off when you opt out in Your Privacy Choices or send Global Privacy Control. |
| Meta Conversions API (server side) | Meta | Sends the same events from our server to Meta, including when you use our short affiliate links, so they are counted once. | Only when the Meta Pixel is allowed for your visit. |
| Advertising cookies and storage (sc_vid, _fbp, _fbc cookies; sc_vid and sc_em_h browser storage) | stefanciancio.com, for Meta | Store a random visitor ID, Meta's browser and click IDs, and a hashed copy of your email after you subscribe, so ad results can be matched. | Only when the Meta Pixel is allowed for your visit. |
| Affiliate links and redirects (stefanciancio.com/lovable, /thrivecart, /campaignrefinery, /skool, /beehiiv) | stefanciancio.com, with affiliate networks such as Impact | Sends you to the partner's website with our affiliate code so the partner who referred you gets credit. | Always, so the partner who referred you gets credit. It is not used for advertising. |
| Privacy choice (consent_v1 cookie and browser storage) | stefanciancio.com | Remembers your cookie choice for 12 months. | Always; it is needed to honor your choice. |
| Region lookup | GeoJS | Looks up your approximate region from your IP address so the right defaults apply. Sets no cookies. | On your first page view in a browser session. |
How consent works on our website: Visitors in the United States (including California) and most other countries: our advertising and analytics tools, including the Meta Pixel, run by default and we show no cookie banner. You can turn them off at any time with the "Your Privacy Choices" link at the bottom of every page, and we treat a Global Privacy Control signal from your browser as an opt-out. Visitors in the European Union/EEA, the United Kingdom and Switzerland: advertising and analytics tools stay off, and we send no server-side advertising events about your visit, until you turn them on in "Your Privacy Choices". To apply the right default we look up your approximate country from your IP address using a geolocation service that sets no cookies; if that lookup fails, a European browser time zone is treated as EU/UK.
About the Meta Pixel. The Meta Pixel is a small piece of code from Meta Platforms, Inc. When it runs, your browser sends Meta information about your visit, such as the page address, the time, your IP address, browser and device details, Meta cookies (_fbp, _fbc) and actions you take on the page (for example viewing a page, signing up or buying). Meta may connect this with your Facebook or Instagram account and uses it to measure and deliver our ads, as described in Meta's Privacy Policy (https://www.facebook.com/privacy/policy). We disclose this here so you know before you browse; if you do not want it, use "Your Privacy Choices" or turn on Global Privacy Control.
5. How we share information
We share personal information with: service providers who work for us (such as hosting, databases, payment processing, email and SMS delivery, analytics and AI providers), listed in the table below; advertising partners such as Meta and Google, only as described in Section 4; professional advisers; authorities when the law requires it or to protect rights and safety; and a buyer or successor if our business is sold or reorganized.
| Provider | Purpose |
|---|---|
| Lovable (with Supabase) | Website hosting, database and server functions, including storing newsletter signups. |
| beehiiv | Newsletter email delivery and subscriber management. |
| Google (Google Analytics) | Website analytics. |
| Meta (Meta Pixel and Conversions API) | Advertising measurement and audiences. |
| GeoJS | Approximate region lookup for privacy defaults. |
| Affiliate networks and partners (such as Impact) | Tracking purchases made through our affiliate links. |
We do not sell personal information for money. Sharing information with advertising partners for targeted advertising may be considered "sharing" or a "sale" under some U.S. state privacy laws. You can opt out at any time with the "Your Privacy Choices" link or by emailing us, and we honor Global Privacy Control signals as an opt-out.
6. How long we keep information
We keep personal information only as long as needed for the purposes above, including to meet legal, tax and accounting requirements, and then delete or de-identify it.
7. Security
We use reasonable administrative, technical and physical safeguards. No method of transmission or storage is completely secure.
8. Your rights
Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy, to correct it, to delete it, and to opt out of targeted advertising, "sales" or "sharing." California residents have these rights under the California Consumer Privacy Act, and we provide them to all U.S. visitors who ask. To make a request, email stefan@stefanciancio.com with the subject "Privacy Request." We will verify your request using information we already have and respond within the time the law requires. You may use an authorized agent. We will not discriminate against you for exercising these rights.
9. Children
Our website and services are not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.
10. Where we process information
We are based in the United States and process information in the United States. See "Visitors in the EU/EEA, UK and Switzerland" below.
11. Emails
Our emails may contain small tracking pixels and tracked links so we can tell whether an email was opened or a link was clicked. You can limit this by turning off automatic image loading in your email app or by unsubscribing.
12. Consent records
When you make a choice in Your Privacy Choices, or your browser sends a Global Privacy Control signal, we keep a record of the choice, the time and the version of our privacy settings, so we can show that we honored it. This record does not include your name or email address.
13. Global Privacy Control
When your browser sends a Global Privacy Control signal, we treat it as a request to opt out of targeted advertising and the sale or sharing of personal information, and we show you that the request was honored.
14. California residents
California residents. This section is our notice at collection and privacy notice under the California Consumer Privacy Act (CCPA), as amended by the CPRA. Categories we collect: identifiers (name, email, phone, IP address, cookie and device IDs); customer records and commercial information (purchases and billing details, processed by our payment providers); internet and network activity (pages viewed, clicks, referring links); approximate geolocation from IP address; and any messages or form answers you send us. Sources: you, your browser and device, and our advertising, affiliate and service partners. Purposes: the purposes in "How we use information." Sale and sharing: we do not sell personal information for money. When advertising tools such as the Meta Pixel run, sharing information with those advertising partners for cross-context behavioral advertising may count as "selling" or "sharing" under California law. To opt out, use the "Your Privacy Choices" link at the bottom of every page (our "Do Not Sell or Share My Personal Information" choice) or turn on Global Privacy Control, and we will stop. We do not knowingly sell or share personal information of anyone under 16. Sensitive personal information: we do not use or disclose it for purposes that would require offering a right to limit. Retention: as described in "How long we keep information." Your rights: to know, access, correct and delete your personal information, to opt out of sale or sharing, and not to be discriminated against for using these rights. To use them, email stefan@stefanciancio.com with the subject "California Privacy Request"; we will verify your request with information we already have, and an authorized agent may make it for you. Website tracking notice: our website uses the tools listed in this policy, including the Meta Pixel, which let those providers receive information about your visit as described above. This notice is given so that you understand how your visit is recorded before you use the site, and you can stop it at any time with "Your Privacy Choices" or Global Privacy Control. Shine the Light: California residents may ask once a year, free of charge, whether we disclosed personal information to third parties for their own direct marketing in the prior year by emailing us.
15. Visitors in the EU/EEA, UK and Switzerland
Visitors in the EU/EEA, UK and Switzerland. Stefan Ciancio is the controller of your personal information. Legal bases: we process your information to perform our contract with you (for example to deliver a ticket, product or account), for our legitimate interests (running, securing and improving our website and business, in ways that do not override your rights), to meet legal obligations, and with your consent. Advertising and analytics cookies and pixels, including the Meta Pixel, run only after you turn them on in "Your Privacy Choices," and you can withdraw that consent at any time the same way, without affecting processing before you withdrew it. Your rights: access, correction, deletion, restriction, portability, and objection to processing based on legitimate interests or for direct marketing. To use them, email stefan@stefanciancio.com with the subject "Privacy Request." You also have the right to complain to your local data protection authority (in the UK, the Information Commissioner's Office). International transfers: we and our providers process information in the United States; where required, transfers rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) or on a provider's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.
16. Changes to this policy
We will post any changes here with a new "Last updated" date and, for material changes, give additional notice.
17. Contact
Stefan Ciancio
Email: stefan@stefanciancio.com
Mailing address: [needs Stefan]