This policy explains how information is handled when you browse DIY Plans, use an account, contact us, or interact with advertising and affiliate links.
Information you send us
The contact form collects your email address, message, and any name or plan link you choose to include. We use this information to review your question, respond and improve the plans. Contact messages are stored privately and are not published on the website.
Browsing and downloads
Fonts are served with the website. Browsing plans does not require an account. Downloads require email verification and a signed-in account. We store your email address, account records, and sessions with our service providers. An email delivery provider sends your sign-in codes. A necessary session cookie keeps you signed in for up to 30 days; signing out revokes that session. Sign-in codes expire after 10 minutes and are stored as hashes. Authentication also records IP addresses and browser information for session management and abuse prevention.
Payments
Stripe processes plan package payments and handles your payment details. We store order identifiers, payment status and plan access records linked to your account so you can return to your purchases. We do not store your full card number. Stripe processes payment information under its privacy policy.
Product analytics
We use Cloudflare Zaraz to understand which plans people request, whether they create an account, and whether we successfully serve their downloads. We also measure views and clicks on plan package offers, checkout starts, and confirmed purchases. We store the offer location and a random funnel identifier linked to the order so repeated payment notifications do not count as extra purchases. These events include the plan, file, browser information, and a random identifier that connects the steps. We do not include your email address or sign-in credentials in these analytics events. A first-party analytics cookie can retain the random visitor identifier for up to one year. You can delete it through your browser settings.
Experiments and session replay
We use Statsig to compare product experiences and measure the same plan, download and purchase events. On public browsing pages, Statsig also captures clicks, page visits and engagement, and can record a visual replay of the session. We block forms from replay and mask input fields. We exclude contact, sign-in, account and payment pages from browser capture. We send a random browser identifier, rather than your email address or account ID, to connect experiment assignments with confirmed purchases. This identifier does not follow you across devices.
Statsig follows Cookie preferences: enabled by default in the United States unless you decline, and enabled only after Allow elsewhere or when your country is unknown. We honor Global Privacy Control and Do Not Track. Declining stops capture and removes queued conversions associated with this browser; it cannot retract events already sent. Checkout attribution is retained for up to 30 days and pending delivery records for up to seven days. See Statsig's privacy policy.
Advertising
We may display ads through Google AdSense. When ads are shown, Google and other advertising partners may collect or receive your IP address, browser and device information, pages visited, and interactions with ads. They may use cookies, web beacons and similar technologies to deliver and measure ads and help prevent fraud.
Google and other third-party vendors may use advertising cookies to personalize ads based on your earlier visits to DIY Plans and other websites. These cookies allow Google and its partners to select ads based on your browsing activity. Read how Google uses information from sites that use its services and Google's privacy policy for details.
You can opt out of Google's personalized advertising through Google Ads Settings and manage participating third-party providers' advertising choices through YourAdChoices WebChoices. Opting out of personalization does not remove all ads or stop information being used to deliver and measure ads or prevent fraud.
Affiliate links
We use Impact to convert eligible product links into affiliate links and measure page impressions and referrals. Impact follows the same Cookie preferences, Global Privacy Control and Do Not Track choices described above.
If you follow an affiliate link, the merchant or affiliate network may use cookies, tracking links or similar technologies to record the referral and any qualifying purchase or action. They may process referral identifiers, IP addresses, browser and device information, and purchase details to attribute sales, calculate commissions and prevent fraud. We may receive reports about referrals, qualifying purchases and commissions.
Information you provide on a merchant's website is handled under that merchant's privacy policy. You can choose to visit a merchant directly instead of following an affiliate link.
Facebook advertising measurement
In the United States, this measurement is enabled by default unless you decline. Elsewhere, it starts only after you choose Allow in Cookie preferences. We use the Meta Pixel and Conversions API to measure visits, plan views, package selections, checkout starts, submitted payment information and confirmed purchases. We share page paths, plan identifiers, purchase value and currency, your browser user agent and IP address, and Meta browser and advertising click identifiers. For purchases, we also share a SHA-256 hash of your normalized email address so Meta can match events to an account. Hashing does not make that information anonymous. We never send card details, passwords or sign-in codes.
Meta cookies can last up to 90 days. We retain checkout attribution for up to 30 days and delivery records for up to seven days. Use Cookie preferences in the footer to allow or decline this measurement. Declining stops future browser events and removes queued conversion events linked to this browser. It cannot retract events already sent. We honor Global Privacy Control and Do Not Track for this measurement. Your choice is stored in a necessary first-party cookie for up to one year. See Meta’s privacy policy.
Optional DIY emails
If you opt in, we may email you new plans and interesting DIY content. This choice is separate from signing in, downloading plans and advertising preferences. We save your opt-in after you verify your email address, along with the time and version of the consent wording. Leaving the box unchecked on a later sign-in does not change an existing subscription. You can unsubscribe by signing in and changing Email preferences. Unsubscribing does not affect sign-in codes or access to your plans. We retain your latest subscription and withdrawal record with your account so we can honor your choice.
Cookies and consent
Where required, we will ask for consent before using optional advertising or affiliate tracking technologies and provide a way to change or withdraw that consent. You can also block or delete cookies through your browser settings. Blocking necessary cookies may prevent sign-in or downloads. Browser and advertising preferences may need to be set separately on each browser or device.
Hosting and spam protection
We use service providers to host the website, store files and records, and help protect the service. Hosting and security systems may process technical request information, such as IP addresses, browser details and request times, to deliver and protect the service. The public contact form may use a spam protection service that checks the browser to help prevent automated spam. These providers process information under their own terms and privacy policies.
Sharing and retention
We do not sell contact details. Sending a contact message does not subscribe you to DIY emails. Access to contact messages is limited to the site operator and the service providers needed to store and process them. Messages remain in the private database until the operator deletes them. There is currently no automatic deletion schedule. Service providers may retain operational records according to their own policies.
Advertising providers, merchants and affiliate networks may process and retain the information described above under their own privacy policies.
Your choices
Contacting us is optional. You can ask to access, correct or delete a contact message by using the contact form. Include enough information to locate the message, but do not include passwords or sensitive identity documents. We may need to verify that the request relates to your information.
Updates
We will update this page when the site's data practices change. The date above identifies the current version.