Privacy Policy
This page explains what data forgingtheresoluteman.com collects, why, how it is stored, and your rights under the EU General Data Protection Regulation (GDPR). It is written in plain English, not legalese.
Who runs this site
Tony Corocher, the author of Forging the Resolute Man. Italy.
Contact for any privacy matter: tony@forgingtheresoluteman.com.
What this site does
This site is the public home of the book Forging the Resolute Man. It hosts:
- The book’s marketing landing page (the apex of
forgingtheresoluteman.com) - A free companion mobile app — the Resolute App — installed as a Progressive Web App at
/app/ - An activation page at
/unlockwhere book buyers redeem a one-time code that gates the companion app
What we collect, and why
Marketing landing page (/) — nothing. No analytics, no cookies, no tracking pixels. Browsing the page sends no data to us beyond the standard server access log (request URL, timestamp, IP, User-Agent), which is held by our CDN (Cloudflare) for a short retention window.
Unlock page (/unlock) — Amazon order ID. If you bought the book on Amazon and want the free companion app, you type your Amazon order ID into the form. We use it to verify you are a real buyer, issue you a one-time activation code, and prevent abuse (a single order can redeem one code). The order ID is stored in our database alongside the code we issue. We do not transmit it to Amazon or to any third party.
App activation (/api/activate) — installation ID + activation code. When you activate the companion app, the app generates a random anonymous installation identifier on your device and sends it together with your activation code to verify the redemption. The installation ID is not tied to your name, email, or any account.
Companion app data — stays on your device. Once activated, the companion app records your daily protocol progress, journal entries, Iron Line, and other tracking data locally on your device only. None of that data leaves your device. We never see it. If you uninstall the app or clear its storage, the data is gone — we cannot recover it for you.
Server logs — IP + User-Agent. Like any web service, our edge (Cloudflare) records request metadata in short-retention logs for security and abuse-prevention purposes. We do not link these logs to identified individuals beyond the minimum needed to enforce rate limits.
Third parties (sub-processors)
This site uses the following service providers. Each operates under their own privacy policy:
- Cloudflare, Inc. — CDN, DNS, Workers runtime, D1 database, Email Routing. Cloudflare’s privacy policy.
- Amazon — handles the purchase of the book itself. We do not see your Amazon account; we only see the order ID you provide on the unlock page. Amazon’s privacy notice.
How long we keep your data
- Activation records (Amazon order ID + assigned code + redemption timestamp): kept for the lifetime of the product so we can support you if you reinstall the app or change devices.
- Server / abuse logs: 30 days (Cloudflare default), then deleted.
- Companion app data on your device: under your control — delete the app or clear its storage to remove it.
Your rights under GDPR
If you are an EU/EEA/UK resident (or in fact wherever you live, we extend the same rights to everyone), you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — request that we correct inaccurate data
- Deletion ("right to be forgotten") — request that we delete your data
- Restriction — request that we limit how we process your data
- Portability — request your data in a portable, machine-readable form
- Objection — object to certain kinds of processing
- Complaint — lodge a complaint with your supervisory authority. In Italy this is the Garante per la Protezione dei Dati Personali.
To exercise any of these rights, email tony@forgingtheresoluteman.com. We respond within 30 days.
Cookies
This site does not use cookies. No tracking cookies, no analytics cookies, no preference cookies. The companion app stores its data in your browser’s local storage on your device, which is functionally similar to cookies but is not transmitted to us.
Children
This site is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe we have collected such data, email us and we will delete it.
Changes to this policy
If we make material changes to what data we collect, why, or who we share it with, we will update this page and bump the "Last updated" date at the top. For minor changes (typos, clarifications), we update without notice.
Governing law
Italian law governs this policy. Disputes are subject to the courts of the author’s residence in Italy.