Privacy Policy
Last updated
The short version
We collect as little as the site needs: your email address and a display handle for your account, your answers and ratings to run the training, and what you send us through the contact form.
- We never sell your information, share it for advertising, or use advertising or tracking cookies.
- We do not use third-party analytics; our own usage log stores no IP address, cookie or device identity.
- Pro is sold and paid for through Link, Stripe's payment service, as the seller of record. Your card details go to Link and never reach our servers.
- You can delete your account at any time in Settings.
1. Who we are
Own the Greeks LLC, a Florida limited liability company ("we", "us"), runs ownthegreeks.com, an options-education and training site based in Florida, USA. We decide how your information is used, and we are responsible for it. You can reach us about privacy through the contact form or at [email protected].
2. What we collect
| Information | When we collect it | Why |
|---|---|---|
| Email address | When you create an account (through our sign-in provider, Clerk) | To run your account, and to send you email about it |
| Display handle (generated, changeable) | When you create an account | The only name the site shows, on leaderboards and certificates |
| Plan, strategy choices and settings | As you use the site | To give you the right features and settings |
| Practice sessions, answers, time taken, ratings and your weakness map | As you train | To grade answers, track your progress and calibrate how hard each question is |
| Free test answers, with a random session token | When you take the free test without an account | To show your report, and to save it if you then create an account |
| Certificates: handle, strategy, score and date | When you pass a check-ride | To issue and verify your certificate |
| Subscription details: plan, status, renewal dates and Stripe's customer and subscription IDs | When you subscribe to Pro | To give you Pro and manage your membership |
| Name, email, message and topic | When you use the contact form | To reply to you and keep a record of the conversation |
| Usage events: which page or step, device type (phone, tablet or desktop), speed measurements, your account ID if signed in; if you arrive at the home page through one of our tagged links, the name of the site the link was posted on (such as x or reddit), never the address you came from; and which reading-list link is followed, kept without any account ID | As you use the site | To understand how the site is used and improve it |
| Your answer to 'Would you come back?' (Yes, Maybe or No) and any line you add | At the end of the free test, if you choose to answer | To improve the site; kept with that test's session only, never linked to your account |
| Optional reason for leaving | After you delete your account or cancel, if you choose to answer | To improve the site; stored anonymously, with no link to you |
| Terms acceptance: which version, when, whether at sign-up or at checkout, and a one-way hash of your email address | When you create an account or subscribe, and again when the terms change | To show you agreed to the terms in force |
| Arbitration opt-out: your account, your email address and the date we received your opt-out | If you email us to opt out of arbitration | To keep a record of your choice |
| Records of the emails we send you: which email, when, whether it went out, and a one-way hash of your email address | When we email you | So the same email is never sent twice, and to see that it went out |
3. What we do not collect
We do not ask for or store your real name (unless you write it in a contact message), postal address, phone number, date of birth or photo. We never receive your card details; you enter them on Link's checkout page. We do not store IP addresses or browser user agents. Our servers use your IP address briefly, in memory only, to limit abusive traffic. Cloudflare also sees it, because all traffic to the site passes through Cloudflare, and the contact form passes it to Cloudflare for a spam check (see section 5).
If you type a name to print on your certificate, it goes only into that printed PDF and is not stored.
4. How we use it, and the legal reasons
- To provide the site you signed up for: your account, training, ratings, certificates and membership. This is needed to perform our agreement with you.
- To improve the site and keep it safe: usage events, question calibration from anonymous answers, limits on abusive traffic and spam checks. These are our legitimate interests, kept proportionate by collecting little and identifying no devices.
- To email you: messages about your account and membership, and, if you have not unsubscribed, occasional training emails such as a question of the week. Every training email has a one-click unsubscribe link.
- To meet legal duties: for example keeping records of terms acceptance, or responding to lawful requests.
We do not use your information for automated decisions that have legal or similarly significant effects on you. Your rating is a training score, not such a decision.
5. Services that receive information
We use a small number of services to run the site. Each receives only what its job needs.
| Service | What it does for us | What it receives |
|---|---|---|
| Clerk | Sign-in and account security | What you enter to sign up or sign in (email, password if you set one, or your Google sign-in), and its own sign-in cookies |
| Stripe and Link | Payments, sales tax and receipts; Link is the seller of record for Pro | Your email and our internal account ID when you start checkout; your card, name and billing address, which you enter on Link's page. Of what Link sends back, we keep only what we need to run your membership: your plan, its status and renewal date, and for each payment its amount, date and refund status, with the card's fingerprint (a code that identifies the card but is not its number) |
| Cloudflare | Our domain, the spam check (Turnstile) on the contact form, and storage for our backups | Your IP address and the pages you request (all traffic passes through Cloudflare); a check token on the contact page; nightly copies of our database, kept 30 days |
| DigitalOcean | Hosting our servers and database, with backups | Everything we store, kept on our servers |
| Resend | Sending our emails | Your email address and the email's content |
| Google (Google Workspace) | Our email inboxes, such as [email protected] | Emails you send us, and our copy of each contact-form message |
Stripe and Link handle your payment and billing information under their own privacy policies, as the seller of record; this includes the tax records they must keep. We do not sell or rent your information to anyone, and we do not share it for advertising. We may disclose information if the law requires it, or if the site changes ownership, in which case this policy continues to apply to it.
6. What others can see
- Your handle is the only name other people see. We never show your email or real name.
- Leaderboards: if we show leaderboards, they show the handle and rating of top members to other Pro members.
- Certificates each have a public page that anyone with the link can open, showing your handle, strategy, score, rank and date. Search engines may list your certificate pages unless you switch that off in Settings. If you share a certificate on LinkedIn or X, that site handles what you post under its own policy.
The founder's portrait on the home page is a representative image, not a photo of a member.
7. Cookies and browser storage
We use no advertising, analytics or tracking cookies. What the site stores in your browser is only what it needs to work, or a setting you chose:
| Name | Set by | Purpose | How long |
|---|---|---|---|
| otg-theme (cookie) | Us | Remembers the light or dark theme, only if you pick one | 1 year |
| Clerk's sign-in cookies, such as __session | Clerk | Keep you signed in. Clerk's scripts run only on sign-in and member pages; elsewhere the site only checks the cookie to show whether you are signed in | Set by Clerk |
| Turnstile's storage | Cloudflare | The spam check on the contact page | Set by Cloudflare |
| otg.exam (local storage) | Us | Keeps your free test and its report if you reload the page | Until you start another test, or the site finds it has expired |
| otg.practice.levels, otg.practice.choice, otg.drill.levels (local storage) | Us | Remember the difficulty levels and strategy you last chose for Practice and the drill | Until you clear them |
| otg-internal (local storage) | Us | Set only on the site team's own browsers, so their visits are left out of our usage figures | Until the team removes it |
| otg_signin_bounce, otg_signed_in_return, otg_farewell (session storage) | Us | Prevent a sign-in loop; carry the optional leaving question after deletion | Until you close the tab |
| otg_terms (session storage) | Us | Carries your tick of the terms box on the sign-up page until your account exists | Until your account exists, or you close the tab |
Because none of these track you or serve advertising, we do not show a cookie banner. You can clear them in your browser at any time; the site will still work, though you may need to sign in again.
8. How long we keep it
| Information | How long |
|---|---|
| Account, settings, ratings, weakness map, subscription details | Until you delete your account |
| Answers and practice sessions | Kept to calibrate questions; when you delete your account, the link to you is removed, so they become anonymous |
| Usage events | 400 days; the link to you is removed if you delete your account |
| Contact messages | 2 years after your last message to us, then deleted |
| Certificates | Kept so they stay verifiable; after you delete your account they show "a former member" instead of your handle |
| Leaderboard history | Kept; your handle is replaced by "a former member" when you delete your account |
| Terms acceptance records | As long as needed to show what you agreed to, up to 6 years after your account ends; when you delete your account, the link to you is removed and only the one-way hash of your email address stays |
| Arbitration opt-out records | Kept as a legal record of your choice, with your email address, including after you delete your account |
| Refund records | 2 years after the refund, including after you delete your account (see below); when you subscribe, we also note on your account whether your card matches one of these records, and the date of that refund, until your account is deleted |
| Records of your data requests (exports, deletions, corrections) | 6 years after the request was completed, then deleted; when you delete your account, your email and handle are removed from them |
| Records of the emails we send you | Kept as a record of what we sent, including after you delete your account; they hold a one-way hash of your email address, not the address |
| Records of what our team does on your account, such as a refund issued, Pro given or a data request handled | Kept permanently as our audit record, with your account ID and, for a refund, Stripe's references for the payment and the refund; never your email address or handle |
| Backups | Copies of our database for 30 days, and our host's weekly copies of the server for up to 4 weeks; anything deleted leaves the backups as they expire |
| Server logs | Up to 30 days; they record the pages requested, without your IP address or browser |
| Payment records | Held by Stripe and Link for as long as tax and payment laws require |
When a payment is refunded, we keep a record of the refund's date with your card's fingerprint (a code Stripe gives us that identifies the card but is not its number) and a one-way coded form of your email address, for 2 years, so that the 30-day money-back guarantee applies once per person. These cannot be turned back into your card number or email address, and we keep them even if you delete your account.
9. Deleting your account and your rights
Deleting your account. In Settings, "Delete my account" works immediately. It cancels any live subscription, deletes your sign-in at Clerk, deletes your account, ratings, weakness map and subscription details, and makes your answers and usage events anonymous, as section 8 describes. Copies in our backups are removed as the backups expire (section 8). Deleting does not refund a payment automatically; ask us within the refund terms if you need one. A record of a refund you received stays for 2 years, as section 8 describes.
Your rights. Wherever you live, you can ask us to:
- give you a copy of the information we hold about you, in a portable format;
- correct anything that is wrong;
- delete your information;
- stop using it for a purpose based on our legitimate interests, or stop sending you training emails.
Send requests through the contact form or to [email protected]. We will reply within 30 days and may need to confirm the request comes from you. If you live in the EU, the UK or another place with a data protection authority, you also have the right to complain to that authority, though we would welcome the chance to put things right first.
When you export or delete your data, we keep a minimal record that the request was made and completed (its type and date) so we can show it was honored. After a deletion, that record no longer contains your email or handle.
We do not sell or share personal information as California law defines those terms, so there is nothing to opt out of.
10. Where data is stored and how it is protected
We are based in the United States, and our servers and the services above store data mainly in the United States. If you use the site from another country, your information is transferred to the United States, where privacy law may differ from yours. Where the law requires it, these transfers rely on the safeguards our service providers offer, such as the European Commission's standard contractual clauses.
We protect your information with encrypted connections, and restricted access to our servers, database and backups. The copies of our database kept off our server are stored encrypted at rest by our storage provider. No system is perfectly secure; if a breach affected your information, we would tell you and the relevant authorities as the law requires.
11. Age limit
Accounts are for people aged 18 or over. We do not knowingly collect information from anyone younger. If you believe someone under 18 has created an account, tell us and we will delete it.
12. Changes and contact
If we change this policy in a way that matters, we will tell you by email or on the site before the change takes effect; the date at the top shows the current version. Questions or requests about your information: the contact form, or [email protected].