Privacy Policy
Last updated: 23 August 2026
This policy explains what we collect when you visit thepuppywindow.com or buy The First 30 Days Protocol, why we collect it, and what you can do about it. It is written to be read, not to be survived.
Who we are
The First 30 Days Protocol is operated by The Puppy Window. For any privacy question, or to exercise any right below, email support@thepuppywindow.com or use our contact form.
What we collect
When you buy
- Your email address and first name. Your email is your login to the member portal — that is its main job. We also use it to send your access link and order-related messages.
- Your order details — what you bought, the amount, and the Stripe payment reference.
We never see your card details. Card numbers, expiry dates and security codes are entered directly into Stripe's payment form and go straight to Stripe. They never touch our servers and we cannot retrieve them.
When you start a checkout
If you enter your email in the checkout and do not complete the purchase, we may store that email and name so we can help if something went wrong with your order. You can ask us to delete it at any time.
When you just browse
- Standard server logs handled by Cloudflare (IP address, browser type, pages requested) for security and to keep the site running.
- Advertising and analytics data via the Meta Pixel — see the next section.
Advertising: the Meta Pixel and Conversions API
We advertise this program on Facebook and Instagram. To know which ads actually lead to purchases, we use two tools from Meta:
- The Meta Pixel, a small script in your browser that records page views, checkout starts, and completed purchases.
- The Meta Conversions API, which sends the same purchase event from our server. When it does, your email address is hashed with SHA-256 before it leaves our server — Meta receives an irreversible fingerprint, never your address in readable form.
Both carry the same event identifier so a single purchase is counted once, not twice. Meta may use this data to measure and target advertising in line with its own Data Policy. You can limit this in your Facebook or Instagram ad settings, or with a browser-level tracking blocker.
Cookies
We keep cookies to a minimum:
- Your login session (
pp_portal) — a signed, HttpOnly cookie that keeps you logged into the member portal. Strictly necessary; without it the portal cannot know it is you. It expires after 60 days, and signing out clears it immediately. - Meta Pixel cookies — advertising cookies set by Meta as described above.
Your progress through the 30 days (which days you have ticked off) is stored in your browser's local storage on your own device, not on our servers.
Who we share data with
We do not sell your personal data, ever. We share only what each of these providers needs to do its job:
- Stripe — payment processing. Stripe's privacy policy.
- Cloudflare — website hosting, storage, and security. Cloudflare's privacy policy.
- Resend — sending your access email and replying to support messages. Resend's privacy policy.
- Meta — advertising measurement, as described above.
How long we keep it
We keep your purchase record for as long as you have access to the program, because it is your access — deleting it removes your ability to log in. Tax and accounting law may require us to retain transaction records for several years after a sale. Abandoned-checkout emails are deleted on request.
Your rights
Wherever you live, you can ask us to:
- tell you what personal data we hold about you;
- correct anything that is wrong;
- delete your data (note: this ends your access to the program);
- send you a copy of your data in a portable format;
- stop using your data for advertising measurement.
If you are in the UK, EU, or EEA, these rights come from the GDPR. If you are in California, the CCPA/CPRA gives you comparable rights, including the right not to be discriminated against for exercising them. Email support@thepuppywindow.com or use the contact form, and we will respond within 30 days. You also have the right to complain to your local data protection authority.
Children
This program is sold to adults. We do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.
Changes
If we change this policy we will update the date at the top. Material changes affecting existing customers will be emailed.