Privacy & Terms

Who is responsible

Marcus Hanmer, operating as The Bridge Project, is responsible for the personal information used by this service. You can contact us at thebridgeprojectai@gmail.com.

What stays on your device

Everything you write and choose inside The Path — your warmup answers, your progress, your goals, and the week you build — is saved first in your browser’s local storage, on your device. Clearing your browser data, or using “Reset The Path”, erases that device copy.

Why information is used

We use your verified email and purchase entitlement to provide the account and lifetime access you bought. That is necessary to fulfil our contract with you. Limited technical request and security information may be used to keep the service reliable and prevent abuse; our legitimate interest is running a safe, working service, and course writing is not put in application logs.

Optional account backup uses consent. Because honest Path answers could reveal sensitive information — such as health, beliefs, relationships, sexuality, or identity — the backup choice asks for explicit consent before any Path writing is stored with the account. Consent can be withdrawn at any time by deleting the account copy and turning backup off. Withdrawing it does not make earlier, consented use unlawful.

Your account and optional backup

Your account uses an email address so you can prove your purchase and return without a password. Authentication and the optional account copy are provided through Supabase. Account backup is off until you actively turn it on. If you do, your Path data is linked to your account and kept in a protected database so it can be restored on another device. You can turn backup off and delete that copy without deleting the copy on your device.

The database uses access rules so a signed-in person can reach only their own saved Path. The account copy is not zero-knowledge storage: a tightly restricted administrator could technically access it when genuinely necessary for security, recovery, or a data-rights request. There is no support dashboard for reading people’s writing, no routine human review, and no Path writing in logs.

Younger people

Every part of The Path is available to younger people. If the participant is under 13, a parent or guardian must use their own verified email to manage the account and explicitly choose whether account backup is enabled for them. We don’t ask for a date of birth or identity document, build a public profile, or collect location as part of The Path. Privacy stays high by default for everyone, and every part of the course still works when backup stays off.

Payments

The Path costs £5, once — more if you choose to support the work. Payment is handled entirely by Stripe; we never see or store your card details. Stripe keeps the payment record. We use the checkout email to connect the purchase to your verified account and retain only its one-way hash in our entitlement table.

Services that help run it

Vercel hosts the website, Supabase provides sign-in and the optional database, Resend delivers transactional sign-in emails, and Stripe handles payments. They receive only the information needed for their role. They may process information outside the UK; where UK transfer rules apply, we use their standard contractual and transfer safeguards. We do not give Path writing to Stripe, Resend, advertising platforms, or analytics services.

How long information is kept

The device copy stays until you reset The Path or clear that browser’s data. Your account email, consent record, and live account copy stay until you delete them. Deleting an account copy removes it from the live database; the newest encrypted manual recovery backup is the only backup retained and expires within 30 days.

The purchase entitlement is kept as a one-way keyed hash of the purchase email for as long as lifetime access is offered, unless a full refund or an applicable erasure request ends that need. Erasing it means that purchase can no longer be recovered later. Stripe and any limited transaction details needed by The Bridge Project are retained only for refunds, accounting, tax, fraud prevention, or another legal requirement. Technical security records are kept only for the shortest operational window needed by the relevant provider; we do not copy them into a marketing or behavioural database.

What we don’t do

No behavioural analytics, no advertising, no third-party tracking cookies, no selling of data, no public profiles, no automated analysis of your writing, and no mailing lists you didn’t ask for. The course only checks on your device that required writing boxes are not empty. Essential sign-in cookies exist only to keep you signed in securely.

Your rights

Write to thebridgeprojectai@gmail.com at any time to ask what we hold that relates to you, or to have it accessed, corrected, deleted, restricted, or provided in a portable form, or to object where the law allows. You can also withdraw backup consent at any time. The account page lets you download the Path data on your device, delete the account copy, or delete the account. We’ll respond to rights requests within the applicable legal time limit. You can also complain to the UK Information Commissioner’s Office.

Terms, plainly

The Path is a reflective, educational programme. It is not therapy, medical care, or crisis support — if you are in crisis, please reach a professional or an emergency service where you live. The course is for your personal use, and your access lasts as long as The Bridge Project runs. Everyone receives the same Path whatever they pay; anything above £5 is voluntary support that funds the free films and keeps the course running. If The Path isn’t what you needed, write to us and we’ll refund you — no questions asked. The course content belongs to The Bridge Project; the quotes within it belong to the people who said them. And everything you write belongs, always, to you.

Last updated 1 August 2026. If anything here changes in a way that matters, this page will say so plainly.