Privacy Policy

Last updated: April 2026

1. Introduction

Ether's, operating as Elite Outsiders ("we," "us," or "our"), collects, uses, stores, and protects personal data of users visiting or interacting with eliteoutsiders.com (the "Website").

This policy describes how we handle your data and your rights under the General Data Protection Regulation (GDPR), the UK-GDPR, the California Consumer Privacy Act (CCPA/CPRA), and other applicable privacy laws.

By using our Website, you agree to the terms of this Policy.

2. Data We Collect

2.1. Data You Provide Voluntarily

• Identity: first name (when you submit the Trauma Map or subscribe to the newsletter).
• Contact: email address.
• Self-assessment data: your responses to the Trauma Map interactive assessment, including calculated scores, severity levels, and your reading profile.
• Comments and ratings: any text you submit voluntarily on /library posts or via the rating widget on assessment results.
• Payment data: processed securely by Lemon Squeezy. We do not store card details.

2.2. How We Use This Data

• Deliver your personalized Trauma Map results.
• Send email sequences related to your assessment (via Kit/ConvertKit and Resend).
• Send the newsletter (with your consent).
• Process purchases of digital products (via Lemon Squeezy).
• Provide customer support and moderate user-submitted content (comments, ratings).
• Comply with legal and accounting obligations.

2.3. Data Collected Automatically

• Traffic attribution: UTM parameters (source / medium / campaign) when present in the URL, stored first-touch in your browser's localStorage.
• Session metadata: a random session ID (in sessionStorage), the referring URL, and your user agent string.
• Funnel events: page views and key interactions (assessment started, completed, CTA clicks), tied to the session ID — never to your identity unless you submit the assessment.
• Hashed IP: for rate-limiting comments and likes on /library, IP addresses are hashed (SHA-256, salted) before storage. The raw IP is never persisted.

We do not use Plausible, Google Analytics, Meta Pixel, or any third-party advertising tracker. No cross-site tracking. Our analytics are first-party and stored in our own database.

3. Cookies

We do not use tracking cookies. We use minimal first-party browser storage (localStorage for UTM attribution, sessionStorage for session ID) strictly necessary to operate the site and attribute conversions.

Cloudflare Access (used to gate certain pages such as the Manifesto reader) sets a session cookie (`CF_Authorization`) for the duration of an authenticated session. This is required for the gated experience and is removed when you log out or the session expires.

You can manage cookie and storage preferences via your browser settings at any time.

4. Third-Party Services

We share data with the following service providers, strictly for the purposes described:

• Cloudflare, Inc. — hosting, CDN, D1 database (EU region), and Cloudflare Access for gated pages. Privacy policy
• Lemon Squeezy — checkout and payment processing for digital products. Acts as merchant of record (handles VAT). Privacy policy
• Cal.com — appointment booking. Privacy policy
• Kit (ConvertKit) — email marketing and automation. Stores your name, email, assessment results, and tags. Privacy policy
• Resend — transactional email delivery. Privacy policy
• Substack — long-form content surfaced via RSS in our Library (no user data shared with Substack). Privacy policy

We never sell your personal data. We never share it with advertisers.

5. Self-Assessment Data (Trauma Map)

When you complete the Trauma Map, your responses are processed in your browser to generate personalized results. If you provide your email, the following data is sent to our systems:

• Your first name and email address.
• Your answers to the assessment questions.
• Your computed Past and Current Trauma Level scores, your Inner and Outer Journey readings.
• The UTM source (which platform referred you), if available.

This data is stored in Cloudflare D1 (EU region) and transmitted to Kit for email personalization. It is not shared with any other parties.

Sensitivity notice: We understand that self-assessment data related to trauma and emotional patterns is sensitive. We treat this data with the highest level of care and use it solely to personalize your experience and improve our services.

6. International Data Transfers

Some of our service providers (Lemon Squeezy, Kit, Resend, Cal.com, Cloudflare for some services) are based in the United States. When your data is transferred outside the EEA/UK, we rely on adequate safeguards including the European Commission's Standard Contractual Clauses and equivalent mechanisms.

7. Data Retention

• Email subscriber data: retained as long as you remain subscribed. Deleted upon unsubscribe request.
• Assessment submissions: retained for internal analytics. You may request deletion at any time.
• Funnel events: kept up to 24 months for analytics, then aggregated or deleted.
• Comments and ratings: retained until deletion is requested or content is moderated out.
• Payment records: retained for the legally required period (10 years in France for accounting purposes).
• UTM and session data in your browser: cleared when you clear your browser storage.

8. Your Rights

Under GDPR / UK-GDPR:

• Access your personal data.
• Rectify inaccurate data.
• Request erasure ("right to be forgotten").
• Restrict or object to processing.
• Data portability.
• Decide the fate of your data after death (France-specific).

Under CCPA/CPRA (California):

• Right to know what personal information we collect.
• Right to request deletion.
• Right to opt-out of sale or sharing (we do not sell data).
• Right to non-discrimination for exercising your rights.

To exercise any of these rights, email contact@eliteoutsiders.com. We will verify your identity before processing your request and respond within 30 days.

You may also lodge a complaint with the French data protection authority (CNIL, cnil.fr).

9. Children's Privacy

Our services are not intended for individuals under 18. We do not knowingly collect data from minors.

10. Data Security

We apply appropriate technical and organizational measures to protect personal data — including encryption in transit (HTTPS), restricted access controls, salted hashing of IPs, and gating of any product/admin areas via Cloudflare Access. However, no system is completely secure and we cannot guarantee absolute protection.

11. Changes to This Policy

We may update this Policy from time to time. The "Last updated" date at the top indicates the latest revision.

12. Contact

Data Controller: Ether's — Elite Outsiders

• SIREN: 879 425 049
• Address: Ether's — Paperboy — 6372, 20 quai de Lorraine, 11100 Narbonne, France
• Email: contact@eliteoutsiders.com