Privacy Policy

Last updated: October 27, 2026

This policy explains what Fortymen ("we", "us") collects when you use fortymen.app, why, who else sees it, and the choices you have. We keep it short and specific; if anything is unclear, write to us.

1. What we collect

• Quiz and email capture: your quiz answers and result, and the email address you enter to see the result. We also store basic attribution (which ad or link brought you, for example a Meta click id or UTM tags) so we know which advertising works.
• Membership: your email, the name Hotmart sends us with your purchase, your plan, status, next charge date and the Hotmart transaction and subscriber codes. We never see or store your card or bank details; Hotmart handles payment.
• Study activity: which days you complete and when, your answers to daily and weekly questions, scores, streaks, your time zone (reported by your browser so a new day opens at your local midnight), and the name you type on your certificate.
• Technical: a sign-in session cookie, server logs (IP address, browser type, pages requested) kept for up to 30 days for security and troubleshooting, and email delivery events (delivered, bounced, complained) from our email provider.

We do not collect sensitive categories of data on purpose. Quiz questions ask how you tend to react in everyday situations; they do not ask about your health, religion or other protected characteristics, and we do not infer them.

2. How we use it

• To show your quiz result and build your plan around it.
• To run your membership: sign-in links, access control, progress, reviews, the certificate.
• To send service emails: sign-in links, your welcome email, a reminder before a renewal charge and, once the feature is available, daily study reminders that you switch on or off on your Account page.
• If you took the quiz but did not join, to send a short series of emails about the program. Every such email has a one-click unsubscribe link.
• To measure and improve our advertising and the Service (aggregate statistics, conversion events).
• To prevent abuse and comply with the law.

Legal bases where the GDPR or UK GDPR applies: performance of our contract with you (membership and service emails), our legitimate interests (security, measuring and improving the Service, marketing to people who asked for a quiz result, which you can object to at any time), and consent where we ask for it (advertising cookies in regions that require consent).

3. Who else sees your data

• Hotmart (payments and subscription management) — receives your email, name and payment details directly from you at checkout; see Hotmart's privacy policy. Manage your subscription at your Hotmart purchase settings.
• Email delivery providers (Resend; Brevo as a backup) — receive your email address and the content of the emails we send you.
• Advertising measurement — the Meta Pixel and Google Analytics on our public pages (quiz, result, plan) record page views and events such as "Lead" and "InitiateCheckout". Meta may match these with its own data under Meta's policy. These tools are not loaded inside the member area.
• Hosting — the application and its database run on servers we administer with our hosting provider; Cloudflare provides the network in front of them.

We do not sell your personal data and we do not share it with other advertisers. We disclose data if the law requires it or to protect our rights and users.

4. Cookies

• sfd_session — keeps you signed in for 30 days (essential).
• sfd_lead — remembers that this browser gave an email for a quiz result, for 90 days, so you are not asked twice (essential to the quiz flow).
• _fbp, _fbc, sfd_src and similar — advertising attribution on public pages (Meta Pixel, UTM capture), up to 90 days.
• Local storage on your device remembers small preferences, such as that you dismissed the "add to home screen" tip. It never leaves your device.

You can delete cookies in your browser at any time; you will simply be signed out.

5. How long we keep data

Membership and study data: while your account exists and for 24 months after your last activity, then deleted or anonymised. Quiz leads who never joined: 12 months after the last email you opened or clicked. Payment and webhook records: 7 years where accounting rules require it. Server logs: up to 30 days.

6. Your rights and choices

• Unsubscribe from marketing emails with the link in any of them; service emails about your paid membership continue while it is active.
• Access, correct, export or delete your data: email us and we will act within 30 days (we may ask you to confirm from the email on the account). Deleting your account ends your membership; refunds follow our Terms.
• Object or restrict processing based on legitimate interests, and withdraw consent where processing is based on consent.
• If you are in the EU/UK you may complain to your data protection authority; in California you have the rights described in the CCPA, and we do not "sell" or "share" personal information as defined there beyond the advertising measurement described above, which you can opt out of by using browser tracking protection or blocking the Meta Pixel.

7. Security

Sign-in links and session cookies are stored only as one-way hashes; the database is reachable only from our application and not from the internet; all traffic uses HTTPS. No system is perfectly secure; if a breach ever affects your data we will tell you and the relevant authorities as the law requires.

8. Children

The Service is written for adults. We do not knowingly collect data from children under 16; if you believe a child has given us data, write to us and we will delete it.

9. Changes

We will post updates here and change the date above; for material changes we will also email members.

10. Contact

Privacy questions and requests: [email protected].