What this site knows about you

Who you are dealing with

Get High is run by Leavitt & Company, LLC, a company registered in Boise, Idaho. That company decides what is collected here and what happens to it. It is named on this page and on the terms page because a company holding your details should be a company you can look up, and an Idaho LLC is public record.

The person you actually deal with is Dai. He is the only human being on the other end of any of this.

While you are just reading

Nothing happens. This is worth spelling out, because almost every site that says this is describing a banner it makes you click first.

• No cookies. These pages set none, of any kind, ever. Stripe's payment page is a different website on a different domain and it does what it says it does there.
• No analytics. No Google Analytics, no tag manager, no pixel, no heatmap, no session recorder, no counter.
• Nothing kept in your browser. Nothing written to local storage or session storage. There is one exception and it is not yours: the administrator's sign-in, further down.
• Nothing loaded from anybody else's servers. No hosted fonts, no CDN scripts, no embedded video. Every stylesheet, script and image on these pages comes from this site, so no third party learns you were here by serving you a file.
• No consent banner, because there is nothing to consent to. That is the point.

Vercel hosts the site and keeps ordinary server logs — that is what a web server does. Where its servers are is the gap below.

To be suppliedWhere this site runs, and therefore which country your data sits in. Vercel hosts it. Which region its servers are in is not written down anywhere yet, so no country is named here. This paragraph is one sentence long the day that is answered.

If you ask for a call

The call request form is the only place on this site you type anything. It takes no card and charges nothing.

It collects three things:

• Your name, as you type it.
• One way to reach you — an email address or a phone number.
• What you are asking for, in your own words.

Alongside them it records which of the two doors you came through, the date and time, and a random reference number. There is also one hidden field that no human being ever sees. If it comes back filled in, the submission was made by a bot and nothing is written down at all.

Where it goes

It is sent two ways so that a person actually reads it: an email, and a message into a private channel. Both carry the whole thing — your name, your contact detail and what you wrote. The host does not keep files the server writes, so those two messages are the record.

If it cannot be delivered, the form refuses and says so. You are not shown a confirmation for something nobody received.

The email is delivered by Resend and the channel is Slack. Those two companies handle it on the way through, and so does the host that runs the site. Nobody else does. No mailing list, no advertiser, no data broker, no lead service. We store nothing else about you at all.

One deliberate detail

Nothing you type ever goes into a web address. Not your name, not your number, not a word of what you wrote. A detail in a URL ends up in your browser history, in the referrer of the next page you open, and in every log in between. The form was rebuilt specifically to stop that happening, and the only things that travel in the address bar are which form it was and which field was left empty.

If you pay

$100,000 a month, charged monthly. Stripe takes the payment. The difference between "Stripe takes the payment" and "we take the payment with Stripe" is the whole of this section, so here it is plainly.

There is no card field anywhere on this website. The button hands your browser to a page hosted by stripe.com, and you type your card number there, into Stripe's own form, on Stripe's own domain. Your card number, its expiry and its security code never touch this site. They are never sent here, never seen here and never stored here. We could not show them to you if you asked.

Stripe is the payment processor and it holds the card. What Stripe does with it is covered by Stripe's own privacy policy, which you will see on their page before you type anything.

What comes back to us

When something happens to a payment, Stripe sends this site a signed notification. Three of them are recorded: a subscription starting, a subscription being cancelled, and a payment failing to collect. What gets written down is the email address you gave Stripe, Stripe's own reference numbers for you and the subscription, the amount, the currency and the status. Those are sent on to us the same two ways a call request is: an email, and a message into a private channel. The host does not keep files the server writes, so those two messages are the record.

The page you land on after paying does not look your payment up. It could — it is handed a reference in the address bar — and it deliberately does not, so that a link somebody shares or a page somebody leaves open cannot read anybody's details back.

The one account on this site

There is nothing for you to sign into. No visitor account exists, no password is ever asked for, and nothing on these pages needs one.

Behind the site there is a single administrator screen, and one administrator signs into it with a Google account through Firebase Authentication. Google handles that sign-in and keeps the session in that administrator's own browser. Exactly one email address is allowed in, checked on the server against a verified sign-in token every single time. Signing in proves who somebody is; it grants nothing on its own.

Everyone else who ever touches it

This is the complete list. If a company is not on it, your details have not been near it.

• StripeTakes the card and holds it. Handles the payment page, the monthly charge and the receipts.
• ResendDelivers the email that tells us you got in touch. Carries the whole submission.
• SlackThe private channel the same message is posted into. Read by us and nobody else.
• Google — FirebaseSigns one administrator in. Never involved in anything a visitor does.
• The hostVercel. Runs the site and keeps the server logs. Where its servers are is the gap above.

Nothing is sold, rented, shared for advertising or handed to anybody for any other reason. There is no mailing list. There is no newsletter. There is one client at a time, so there is no audience to market to and nothing to be gained by building one.

How long any of it is kept

The record of a call request is the email and the Slack message. We have no rule that deletes either of them, because no rule about deleting anything has been written yet. That is a description of what happens, not a policy, and it is not going to be dressed up as one here.

To be suppliedHow long any of this is kept, and what is deleted when. The records are the email and the Slack message, and no rule deletes either of them — which is a description of what happens, not a retention policy. No period has been set. It is written with a lawyer or it is not written.

Asking what we hold, or asking us to delete it

Ask, and you will get a straight answer. Depending on where you live you may have a legal right to a copy of what we hold, to have it corrected, or to have it deleted. Whether or not you do, the answer here is the same one: ask and we will tell you, and ask and we will delete it.

Right now the only way to reach us is the call request form, which is a poor way to make a privacy request and is the honest state of it.

To be suppliedThe address a privacy request goes to. A page that tells you we hold your name and then gives you no way to ask what we hold is half a page. There is no published email or postal address yet, because there is no domain yet for one to sit on, and the call request form is the only route in. That is a gap, and it is named here rather than filled with an address nobody reads.

When this page changes

This page is written from the code, and it is meant to be changed in the same breath as the code it describes. If the site starts collecting something it does not collect today, that belongs here before it ships, not afterwards.

The money side is on the terms page, and it has gaps of its own that it names out loud.