Privacy

Last changed 5 November 2026

This page covers learn.promptityourself.com, where you register and take the courses. The public site has its own privacy page, which also covers the newsletter. I never sell what you give me, and I use it only to run your account and the courses.

What your account holds

Your details: your first name, last name, email address and country. You can change them on your profile. There is no password.
What brought you here: the page the form was on, the labels in the address you arrived on (utm_source, utm_medium, utm_campaign, utm_content) and an ad platform's click number (fbclid, gclid, ttclid), if there was one. I use them to count which ads and posts bring sign-ups. The counts I share with the team that runs the ads have no addresses or click numbers in them.
The emails I send you: one when the course opens, and a reminder about 24 hours before each live webinar. I keep which of them you got, so you get each one once. You can switch the reminders off in your profile, or from the link in any reminder.
Your vote: the idea you chose for the next project. Others see only the totals.
A problem you report: your words, the page you were on, your browser and the screenshot, if you send one. The screenshot shows what was on your screen, and you see it before you send it, so you can remove it.
Your private sessions, if I add you as a private client: the date, the title, my notes, the recap video and its sections, the links to the Google Meet recording, and the PDF of each session. The recap video is on Cloudflare Stream and plays only on this site, only for you, through a link that lasts an hour; the PDF is in my own Cloudflare storage and comes only through this site. Nobody else sees them. Delete your account and they go with it.

The box on the form is empty until you tick it. If you tick it, nothing happens until you confirm your email. I then record the words beside the box, the time, your IP address and your browser, and pass them with your address and first name to the public site, which keeps the list. The same happens if you press the newsletter button after you confirm, or switch it on in your profile. Switch it off there and you leave the list. If you change your email address, the list follows. The public site's privacy page says what it keeps, and every newsletter carries an unsubscribe link.

Cookies and your browser

piy-session keeps you signed in for 60 days. It carries your account number and a signature, scripts on the page cannot read it, and Sign out removes it.
piy-new lasts ten minutes after you first confirm, so your sign-up is counted once. piy-welcome lasts as long and offers you the newsletter button once, if you left the box empty. piy-eid lasts as long and carries an event number, so the ad platforms count it once. It is set only if the ad tags are allowed.
piy-consent and piy-ads keep your answers below, for promptityourself.com and its subdomains, in a cookie and in local storage.
piy-src keeps the labels of the address you arrived on, for that tab only, and only when analytics are allowed.
piy-not-counted stays in this browser only if someone turns on this switch, which keeps that browser out of every count here. It is for me and my team, and it holds no personal details.

Analytics

Step counts, with no cookie. The course pages count a page opened, a question passed and the form started, per day, per landing page and per ad label. No IP address is kept, and nothing tells one visitor from another. Visits from my own team's network are counted apart and load none of the tools below: the server reads the address, compares it and does not keep it.

Google Analytics shows me which pages people read and where they came from. It sets _ga and _ga_9D7CHFQ1CB, and Google receives your IP address, your browser and the pages you visit. What Google does with it is under their privacy policy.

Microsoft Clarity runs on the landing pages and the registration form only, never on your account pages. It records clicks, taps and scrolling, so I can see where people get stuck. The form fields are hidden from it, so what you type is not recorded. It sets _clck and _clsk, and Microsoft receives your IP address and browser. What Microsoft does with it is under their privacy statement.

In the EU, Iceland, Liechtenstein, Norway, the UK and Switzerland, and wherever the server cannot tell your country, Google Analytics and Clarity stay off until you say yes. Everywhere else they are on. You can change your answer here at any time, and turning them off also deletes their cookies from this browser:

The ad tags

Meta's pixel, LinkedIn's Insight Tag and TikTok's pixel let me show my ads to people who visited, and count which ads bring sign-ups. They send the address of the page, your IP address and your browser. Meta, TikTok and Google can also receive your email address, hashed, to match the visit to an account with them.

The first time you confirm your email, my server also tells Meta and TikTok, with the same hashed address, your IP address, your browser and the cookie each one's tag set, if there is one. This happens only if your ads answer is yes, or you have not answered and the site would not ask you.

These tags follow the same rule about asking first, with their own answer. Read what each platform does on the public site's privacy page.

Who else handles it

Cloudflare hosts this site and its database, in my account, and runs the spam check on the forms, which loads when you touch a field and is not set up to leave a cookie. Like any host, it processes your IP address and browser to deliver the page. See their privacy policy.
Amazon Web Services carries the emails, from hello@promptityourself.com.
Google, Microsoft, Meta, LinkedIn and TikTok receive what the sections above say, while those answers allow it.
ingest.piy.show is my own address for the numbers of my Shorts. The vote pages ask it for them, so it sees your IP address and browser, as any website does. It gets no cookie and nothing about your account.
Google Meet: runs the live webinar. If you join, Google handles the call, and others on it can see the name you join with.

How long I keep it

Your account stays until you delete it. A registration that is never confirmed is deleted after 90 days, except a private client I invited: that stays until you or I delete it. A screenshot in a problem report is deleted after 90 days, and your words stay with your account. Download my data, on your profile, gives you all of it as one file. Delete my account, on your profile, deletes your details, what brought you here, your vote, your problem reports, your private sessions with their videos and PDFs, and the record of your newsletter tick here, at once. I keep one line: a keyed fingerprint of your address, which cannot be turned back into it, the date, and whether you were a private client. It tells me you deleted your account and do not want your data kept, so I do not add you again by mistake. It also takes you off the list on the public site, whose consent record keeps one line that you left. The step counts name nobody, and they are deleted after 400 days.

Your rights

Australian privacy law lets you ask what I hold about you, ask me to correct it and ask me to delete it. Write to contact@promptityourself.com. If you are unhappy with how I handle it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Who I am

I'm one person, writing as Prompt It Yourself, in Brisbane, Australia. The site is operated by Mergodon Pty Ltd, which is legally responsible for the information on this page.