Draft — pending review by counsel. This describes our current practices accurately, but the legal wording should be finalized with an attorney before relying on it. Remove this note once reviewed.

Privacy Policy

Last updated June 27, 2026

Barnabas Co-Lab (“we,” “us”) operates barnabascolab.co. This policy explains what we collect, how we use it, the third-party tools involved, and the choices you have. It is provided for transparency and is not legal advice.

Information we collect

Information you provide. When you request the free guide, join the waitlist, write to Mike, or enroll, we collect your name, email, and anything you choose to send. If you enroll, we create an account and process payment.

Collected automatically. Basic technical information such as browser/device type, pages viewed, the page that referred you, and a coarse location estimate from your IP address — only after you accept analytics (below).

Analytics & cookies

We use PostHog (a privacy-friendly product-analytics tool) to understand how the site is used. PostHog is set to capture nothing and set no analytics cookies until you accept in our cookie banner. If your browser sends a Global Privacy Control (GPC) or Do-Not-Track signal, we treat it as a decline and never load analytics — without prompting you. You can change your choice anytime by clearing this site’s data in your browser.

Third-party services we rely on

• Supabase — database and authentication (account + content data).
• Stripe — payment processing for enrollment.
• Resend — sending email (the guide, confirmations, updates).
• Google Calendar — scheduling live sessions.
• Zoom — live sessions and replays.
• WhatsApp / Meta — an internal assistant for our team (not used to message you unless you opt in).
• PostHog — analytics (consent-gated, above).

How we use information

• To send what you requested and respond to your messages.
• To deliver and administer enrollment and the program.
• To understand and improve how the site is used.
• To protect the security and integrity of the site, and meet legal obligations.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

Your privacy choices (California — CCPA/CPRA)

If you are a California resident, you have the right to know, delete, and correct the personal information we hold, and to opt out of its sale or sharing (we do neither). We honor the Global Privacy Control signal as an opt-out. To exercise any right, email themike@barnabascolab.co.

Data retention & security

We keep information only as long as needed for the purposes above and apply reasonable safeguards (including encryption in transit). No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

Children

Our site is not directed to children under 13, and we do not knowingly collect their information.

Changes & contact

We may update this policy; when we do, we will revise the date above. Questions: themike@barnabascolab.co.