Overview
Pipeline Punks is a static website and educational initiative operated by
True North Data Strategies LLC. We collect minimal data and prioritize your privacy.
What We Collect
1. Analytics Data
We use Vercel Web Analytics, a privacy-focused analytics service, to understand how our site is used.
This includes:
- Page views and visitor counts (aggregated, anonymous)
- Referring websites
- Browser and device type (general categories)
- Geographic location (country/region level only)
We do not use cookies for tracking. Our analytics provider uses
privacy-preserving methods that don't require cookie consent banners.
2. Registration & Payment Data
When you register for labs, workshops, or cohorts, we collect:
- Name and email address
- Payment information (processed securely by our payment processor)
- GitHub username (for labs and cohorts, to provide access and code reviews)
We do not store credit card information. All payments are processed
through a third-party payment processor (Gumroad or Stripe) with PCI-DSS compliance.
3. Communication Data
If you email us or participate in cohorts/workshops:
- Email address and correspondence content
- Discord/Slack messages (for cohorts and workshop participants)
- GitHub Issues and pull request comments (for labs)
What We Don't Collect
- Social Security Numbers or government IDs
- Detailed personal information beyond what's needed for education delivery
- Browsing behavior across other websites (no third-party tracking pixels)
- Precise geolocation data
How We Use Your Data
- Deliver education: Provide access to labs, workshops, and cohorts
- Communication: Send registration confirmations, course materials, and support
- Improve content: Understand which pages are useful to visitors
- Legal compliance: Maintain records as required by law
We do not sell or rent your data to third parties. Period.
Third-Party Services
We use the following third-party services that may access your data:
- Analytics: Vercel Web Analytics (privacy-focused, no cookies, GDPR-compliant)
- Payment Processing: Gumroad or Stripe (PCI-DSS compliant)
- Email: Resend, SendGrid, or similar transactional email provider
- Communication: Discord or Slack (for cohorts and workshops)
- Code Hosting: GitHub (for labs)
Each service has its own privacy policy. We choose providers that respect privacy
and comply with relevant regulations.
Your Rights
You have the right to:
- Access: Request a copy of the data we have about you
- Correction: Request corrections to inaccurate data
- Deletion: Request deletion of your data (subject to legal record-keeping requirements)
- Opt-out: Unsubscribe from email communications at any time
To exercise these rights, email: jacob@truenorthstrategyops.com
Legal Basis for Processing (GDPR)
For visitors and customers in the European Economic Area (EEA), United Kingdom, and Switzerland,
we process personal data under the following legal bases:
- Contract Performance: Processing registration, payment, and course delivery data is necessary to fulfill our agreement with you when you purchase a lab, workshop, or cohort.
- Legitimate Interest: We process analytics data (aggregated, anonymous) to improve our website and educational content. This processing is minimal and does not override your privacy rights.
- Consent: If you join our waitlist or subscribe to communications, we process your email based on your explicit consent. You may withdraw consent at any time.
International Transfers: Your data may be transferred to and processed in the United States,
where our service providers (Vercel, Gumroad, Discord) are located. These transfers rely on
Standard Contractual Clauses or the service provider's certification under applicable data protection frameworks.
Right to Complain: If you are in the EEA, you have the right to lodge a complaint with your
local data protection supervisory authority.
Data Retention
We retain data for as long as necessary to deliver services and meet legal obligations:
- Registration data: Duration of course + 1 year
- Payment records: 7 years (tax and accounting compliance)
- Analytics data: Aggregated indefinitely (no personal identifiers)
Security
We implement reasonable security measures including:
- HTTPS encryption for all site traffic
- Secure third-party services with industry-standard encryption
- Limited access to personal data (only necessary personnel)
- Regular security updates and monitoring
However, no system is 100% secure. We cannot guarantee absolute security
of data transmitted over the internet.
Changes to This Policy
We may update this privacy policy as our services evolve. Changes will be posted
on this page with an updated "Last Updated" date. Significant changes will be
communicated via email to registered participants.
Contact
Questions about this privacy policy?
Email: jacob@truenorthstrategyops.com
Response time: Within 2 business days
True North Data Strategies LLC
Colorado Springs, CO
United States
For detailed information about how long we keep different types of data, see our
Data Retention Policy.