Skip to content
PrivacySign In
Home
Legal

Privacy Policy

Last updated: September 2, 2026

I'm Taylor. TS Coaching (tscoaching.org) is a site I built. This page explains, in plain language, what information I collect, why, and what I do with it. This is informational, not legal advice.

What I collect

Most of the site works without an account. The free tools and calculators are all open.

If you create a free account, I collect your name, email, and a hashed password (I never see your actual password). During setup I also collect the profile details you enter: your goals, activity level, and body metrics (things like age, height, and weight). Your account stores what you save as you use the site: calculator and tool results, AI plan history, tool flow progress, and, if you are on Pro, your coach chat messages (what you asked Your Corner and what it answered, so the conversation is there next time). The mental health check-in is the exception: your answers there are never stored, though they are sent to Anthropic to generate that one response, the same as the other AI features below. You control what you fill in, and you can edit or clear it in settings.

If you donate, subscribe to Pro, or apply for 1:1 coaching, I collect whatever you include in the donation or subscription (payments are handled by Stripe, so I never see your full card details). For Pro, Stripe tells me your subscription status and renewal date so the app knows to unlock Pro features; I do not store your card number.

The coaching application is the longest form on the site, so it is worth being specific: it asks for your name and email, your age, height, and weight, your goals and training experience, your schedule, equipment, and preferred training days, how you eat (meals per day, cooking skill, dietary restrictions), your sleep and stress levels, any injuries you want me to know about, what supplements you take, and any notes you add. If you become a coaching client, the intake form asks the same kinds of questions again in more depth. That is real detail about your body and your health, you are handing it to me on purpose, and I hold it so I can actually coach you.

Beyond that, here is the rest of it in one place, so nothing is collected that this page does not name:

  • The contact form. Your name, email, subject, and message are saved, not just emailed to me.
  • The coaching waitlist. Your name, email, and any note you leave.
  • Cancellation feedback. If you cancel Pro and tell me why, the reason and any comment are saved.
  • A profile photo, if you upload one. It is stored at a public URL. Anyone with that URL can open the image, so do not upload something you would not want reachable.
  • Email records. Your address, which topics you opted into, and a log of what was sent to you. That log records whether an email was opened and whether a link in it was clicked, which Resend reports back to me.
  • Usage analytics I keep myself. Separately from Vercel, my own database records which tool and flow pages get opened and whether a result was calculated, saved, or exported. Each row carries a random id that lives in your browser tab and is thrown away when you close it, plus your account id if you are signed in. It records the page, not what you typed into it.
  • A log of AI runs. Which feature ran, which model answered, whether it worked, how long it took, and how long the request and reply were. The content of the request and the reply is not in that log.
  • Your IP address, for rate limiting. Public forms and the AI endpoints count recent requests per IP so one script cannot flood them. That means your IP is briefly stored as part of a counter.
  • Error reports. When a page breaks, the error message, the technical stack trace, the page URL, and your browser version are emailed to me so I can fix it.

Why I collect it

  • To let you save your data across sessions and devices.
  • To power AI features (plans, projections, the plan chat, the Pro coach chat, and the mental health check-in): the profile details, tool inputs, and questions you provide for that feature are sent to Anthropic to generate the response; see below for what that means.
  • To reply to coaching applications and support emails personally.
  • To keep the site running (basic analytics, error logs).

Where AI is involved

Parts of this site are written by an AI model rather than by me, and I would rather say so here than let you find out. The model is run by Anthropic. When you use one of these features, the inputs for that request leave my server and go to Anthropic to produce the response.

  • AI plans and projections. Your profile details and the numbers you enter go over. The plan that comes back is saved to your account, along with a snapshot of the inputs it was built from, so you can reopen it later.
  • Asking questions about a plan. Your question, the plan it is about, and the earlier messages in that conversation go over.
  • The Pro coach chat. So it can answer about your actual situation, this one sends more: the messages in the thread, plus your saved tool results, your active plan, your onboarding answers, your settings, and your latest 90 day review. The thread is saved to your account so it is there when you come back, and "New chat" deletes it.
  • Tool explanations and fix-it suggestions. The tool you are on and the result you just got, plus your other saved calculator results, so the answer can connect them. Neither the question nor the answer is saved.
  • Flow summaries, check-in briefs, monthly trends, and the 90 day review. The saved results and figures being summarized go over, and the write-up that comes back is saved to your account.
  • The First 12 Weeks email. The short intro at the top is written for you from three things: your goal, how many days a week you train, and your age band. The plan itself is the same for everyone.
  • The mental health check-in. Your ratings and anything you type go over to produce that one reply. They are not saved, and neither is the reply. Close the page and it is gone. If what you write looks like a crisis, the page answers with support resources directly and nothing is sent to the model at all. This is a reflection prompt, not therapy, not a diagnosis, and not a substitute for talking to a professional.

Anthropic does not use API data like this to train its models, under its standard API terms. That is Anthropic's commitment in its terms rather than something I can verify from my end, so I am telling you where the data goes and letting you weigh it.

AI output can be wrong, and it can contradict itself between runs. Treat a generated plan, projection, or answer as a starting point to check, not as instructions from a professional who knows your situation. Nothing here is medical advice. Every AI feature is optional: the calculators, your saved results, and your history all work without touching one.

Who sees your data

I use a small set of trusted services to run this site:

  • Supabase stores your account and app data.
  • Vercel hosts the site, and also collects aggregate page-view and page-performance analytics for every visitor (Vercel Analytics and Speed Insights). This is not used to build a profile of you or shared with advertisers.
  • Anthropic processes AI plan, projection, chat, and mental health check-in requests when you use those features. It receives the inputs you provide for that request (your profile details, tool results, or question) to generate the response. Anthropic does not use API data like this to train its models, under its standard API terms.
  • Stripe processes donations and Pro subscription payments (I never see your full card details).
  • Resend sends email: transactional messages (your First 12 Weeks PDF, password resets, replies) and, if you opt in, the newsletter. It also reports back whether a message was opened and whether a link in it was clicked, and I keep that against the send record.
  • hCaptcha checks that account actions are coming from a person rather than a bot: signing up, signing in, resetting a password, and changing your email or password in settings. It sees your IP address and basic browser details for that check. It runs on those actions only, not on the calculators or anywhere else you browse.
  • Sentry records technical details when something breaks: the error, the page it happened on, and the browser. It is deliberately set up not to send your personal data, and it does not record your screen or your session. The numbers you enter into a calculator are not part of an error report.
  • Google is involved in two ways, both optional. If you choose "Continue with Google" to sign in, Google shares your name, email, and Google account id with this site so it can create or match your account. Separately, if you signed in that way, Google can send this site an automatic security alert about that same Google account (Google calls this Cross-Account Protection), for example that your Google sessions were revoked or the account was disabled. An alert carries your Google account id and the type of event, never your Google password or anything from inside your account, and I use it only to sign you out here or lock the account here to match what happened on Google's side.

I do not sell your data. I do not share it with advertisers. I do not run tracking pixels from ad networks.

How long I keep it

  • What you saved stays until you remove it. Your profile, saved results, plans, and flow progress are yours and are not aged out. Delete a result, or delete the account, and it goes.
  • Usage analytics, AI run logs, and rate-limit counters are deleted after 90 days. A scheduled job clears anything older, so the IP addresses behind the rate limits do not accumulate.
  • The email send log is kept. It is what stops a welcome email being sent to you twice, so it has no expiry.
  • A few records outlive a deleted account on purpose. Those are listed under Your choices below.

Cookies and browser storage

None of this is advertising. I do not run ad cookies or cross-site tracking, which is why there is no consent banner in your way. What the site actually keeps on your device is short:

  • A sign-in cookie. Supabase sets it when you sign in, and it is what tells the server which account is asking on each page load, so you stay signed in as you move around. Signing out clears it, and if you never make an account it is never set.
  • Preferences and saved work in your browser. These are not cookies. Your theme, text size, unit choice, favorite tools, flow progress, and any results you save without an account sit in your browser's local storage. That stays on the device you set it on, it is not attached to every request the way a cookie is, and clearing your site data removes it.
  • A per-tab id. Also not a cookie. A random id identifies the current visit for the usage counts described above. It lives in your tab and is dropped when you close it.
  • hCaptcha's own cookies. hCaptcha runs on the account actions listed above and may set cookies of its own to do that check. Those are hCaptcha's, not mine, and it is not loaded on the calculators or anywhere else you browse.
  • Vercel's measurement scripts. The analytics and page-speed scripts run on every page. Anything they set belongs to Vercel, it is there to count visits and load times, and none of it goes to an ad network.
  • Affiliate links. This is the one place a third party sets a cookie on purpose, and only if you click one. More on that below.

Blocking or clearing all of it is fine by me. The tools still work. You would just be signed out and back to the default settings.

Your choices

  • You can use the free tools without signing up at all.
  • You can download your account data from the settings page, as JSON or CSV. It covers your profile, onboarding answers, saved tool results, flow progress and completions, custom flows, AI plans, flow summaries, check-in briefs, monthly trends, 90 day reviews, coach chat messages, coaching applications and intake, and donations. It does not include the operational records: contact form submissions, the email send log, and the usage and error telemetry described above. Ask me and I will pull those for you too. The same two links sit on the delete screen, so you can take a copy before the account goes.
  • You can delete your account yourself from the settings page, which removes your data. A handful of records outlive the account on purpose, in two ways. Some are kept exactly as they are: if you donated, the donation stays on the books with your name and email so it reconciles against Stripe; your email address stays on the suppression list so I never email you again; past email sends stay logged so a resend is never counted twice; and if you ever claimed a one-time perk, like the free personal review or the once-ever coaching credit, a record that you claimed it stays, keyed to a scrambled version of your email rather than your account, so deleting and signing up again cannot claim it a second time. The rest are kept but stripped of anything that identifies you: a coaching application or waitlist entry stays so the funnel numbers and my pipeline history hold up, with your name, email, phone, and notes cleared; a note about why you cancelled stays so I can see the pattern, with your email cleared; a contact form submission stays for the daily count, with your name, email, subject, and message cleared; and a Google security alert (see the Google entry above) stays as part of the log that stops the same alert being replayed, with your Google id and the details cleared. If you would rather I handle the deletion, email me.
  • If you make a share link for a tool result, that link is public: anyone holding the URL can open it and see that result and the numbers behind it, with no account and no sign-in. A new link stops working on its own after 90 days unless you keep it going. Links you made before that change stay live until you turn them off. Your name and email are not on the page, and search engines are told not to index it. You can turn any link off from the saved result it came from, and deleting your account takes down every link you made.
  • You can change your password any time from your settings.
  • If you subscribe to Pro, you can cancel any time from settings, which opens the Stripe billing portal.
  • The newsletter is opt-in only, from an unticked box when you create your account or from your settings afterwards, and you can turn it off in settings or from the unsubscribe link in any newsletter email.

How your data is protected

Encryption, access limits, and what happens if something goes wrong are written up on the security page.

Affiliate links

Some articles link out through affiliate links, including the Amazon Associates program. If you click one, that third party (for example Amazon) may set its own cookies to credit a purchase. I do not see your card details or what you buy, only whether a referral qualified. If you buy through a link, I may earn a small commission at no extra cost to you.

Kids

This site is not directed at children under 13. If you think a child has signed up, email me and I will remove the account.

Changes

If I update this policy, I will update the date at the top. For material changes I will post a note on the homepage or email account holders.

Contact

Questions, corrections, or deletion requests: reach me through the contact form.