Privacy
What we collect, why, who can see it, and how long we keep it. Cutaway is run by FitYou LLC. Questions about your data: help@readcutaway.com.
What we store about you
- Your account: email address, a securely hashed password (never the password itself), whether you've confirmed your email, and whether you asked for emails about new explainers.
- Sign-ins: for each device you're signed in on, the type of browser and device (from what your browser reports), when you signed in and when you were last active. Failed sign-in attempts are kept against your email for 15 minutes, to pause guessing.
- Purchases: what you bought, when, the amount, any credit and tax, your billing country, and Stripe's reference for the payment. Card details go to Stripe and never reach us. If you ask for a refund, we keep the request and any note you add.
- Reading: the first and last time you opened each paid step, and when you downloaded labs. This powers “continue reading”, your progress, and the refund rule. Step 1 of each tutorial is free and isn't recorded against you.
- Email sign-ups: your email and the page you signed up on, if you ask for updates, and when you unsubscribe.
- Access given by hand: if we give you access (for example through your company's invoice), what was given, until when, and why.
What we don't do
No advertising, no ad trackers, and we never sell data. The only cookie is the one that keeps you signed in. For everyone, signed in or not, we keep anonymous daily totals (how many times each page was opened, step 1 reads, Buy clicks, and visits to the payment page) with nothing that identifies you. Visitor statistics come from Cloudflare Web Analytics, which uses no cookies. To stop abuse, we count attempts per internet address for up to 7 days; the address is scrambled (hashed) first and never stored as-is.
Who can see your data
The site owner, through an admin area protected by two separate sign-ins. It shows, for your account: your email and sign-in details above, what you own and how you got it, your orders and whether each can still be refunded, your reading progress per step, and your lab downloads. From there the owner can give or remove access, email you a sign-in link, sign you out of your devices, change your email, or delete your account, for example when you ask for help. Every one of these actions is recorded in an audit log. The owner never sees your password or card.
Our providers process data on our behalf: Cloudflare (hosting, database, backups and the admin sign-in), Stripe (payments, receipts and tax), and Resend (sending account emails).
How long we keep it
- Your account and reading history: until you delete your account.
- Sign-in sessions: up to 30 days (1 day if you don't choose “keep me signed in”). Sign-in and reset links: 15 minutes to 24 hours.
- Orders: kept for as long as tax law requires; after you delete your account they stay without your email.
- Backups of the database: 90 days, so anything deleted leaves the backups within 90 days.
- Anonymous daily totals: kept, as they contain nothing about you.
Your choices
You can change your email or password, stop update emails, sign out everywhere, or delete your account from your account settings. Deleting removes your personal data straight away; order records are kept, without your email, where tax law requires. To ask what we hold about you, or to use any further rights your state gives you (for example in California), email help@readcutaway.com and we'll answer within 30 days.
Last updated 27 September 2026. Questions: help@readcutaway.com.