Privacy Policy

Last updated: October 18, 2026

This Privacy Policy explains how Ankush Agarwal (“I”, “me”, “my” or “us”) collects, uses, shares and protects personal information when you visit www.ankushagarwal.org/ (the “Site”), contact me, or buy digital products such as The First $10K E-Commerce Roadmap and its companion toolkit. It also explains the analytics, advertising measurement and website testing tools used on the Site, and the choices you have. By using the Site you acknowledge this Policy. If you do not agree with it, please do not use the Site.

1. Who is responsible for your information

I operate the Site as an individual. The person responsible for the personal information described here (the “controller” under laws such as the GDPR) is Ankush Agarwal, an individual based in Texas, United States. You can contact me at [email protected] or through the Contact page of this Site.

2. Information I collect

CategoryExamplesHow it is collected
Information you give meYour name, email address and the content of messages you send through a contact form, email or social media; information you provide when asking for support.Directly from you
Purchase informationYour name, email address, country or ZIP/postal code and order details, such as which edition you bought. I do not receive or store your full payment card number.From you, and from Payhip, Gumroad and their payment processors (see Section 8)
Device and usage informationIP address, browser type, device type, operating system, language, pages viewed, links clicked, time on page, referring page, approximate location (such as city or country) and date and time of visits.Server logs, cookies, analytics and similar technologies
Advertising and measurement informationOnline identifiers such as cookie IDs and advertising click identifiers (for example from a link in an ad), and events such as page views, add-to-cart, checkout and purchase events.Cookies, pixels and server-to-server tools (see Section 4)
Testing informationWhich version of a page you were shown in an experiment, and how you interacted with it.The website testing platform (see Section 4)
Information from other sourcesBasic profile details if you contact me through LinkedIn or X, and order confirmations from Payhip, Gumroad and their payment processors.Third-party platforms

I do not intentionally collect sensitive personal information (such as health, financial account, government ID or biometric data) through the Site. Please do not send it to me.

3. How I use your information and my legal bases

PurposeExamplesLegal basis (EEA, UK and similar laws)
Run and secure the SiteServing pages, preventing spam and abuse, keeping backups, fixing errorsLegitimate interests in operating a secure website
Respond to youAnswering questions, support requests and business enquiriesLegitimate interests; steps requested by you before a contract
Deliver purchases and provide supportConfirming orders, delivering files, handling duplicate-charge, delivery and access problemsPerformance of a contract; legal obligations
Understand how the Site is usedMeasuring visits, content performance and traffic sources with Google AnalyticsConsent for non-essential cookies and similar technologies
Measure and improve advertisingMeasuring the results of my own ads on platforms such as Meta and Google, and improving how they are shownConsent for non-essential cookies, pixels and similar technologies
Test improvements to the SiteComparing page versions with a website testing platform to see what works betterConsent for non-essential cookies and similar technologies
Send updatesNewsletters, article announcements, product newsConsent, which you can withdraw at any time
Comply with the law and protect rightsTax and accounting records, responding to legal requests, preventing fraud, enforcing my TermsLegal obligations; legitimate interests

I do not use your personal information to make decisions that produce legal or similarly significant effects about you through solely automated means.

4. Cookies, analytics, advertising measurement and testing tools

Cookies are small text files stored on your device. Similar technologies include pixels (small code snippets that send information to a provider when a page loads) and local storage. The Site uses the following categories:

  • Strictly necessary and performance cookies keep the Site working, secure and fast, for example when an administrator logs in or when pages are cached. They do not require consent.
  • Google Analytics 4 (analytics). I use Google Analytics, a service of Google LLC, to understand how visitors find and use the Site. It uses cookies and similar technologies to collect usage information such as pages viewed, device and browser details and approximate location, and it reports it to me in aggregated form. I do not send information that directly identifies you, such as your name or email address, to Google Analytics. I have also turned on Google Signals and Google’s advertising features. These let Google associate this activity with signed-in Google users who have ad personalization turned on, so that I can see cross-device reports, build audiences and measure and improve my advertising. Google may use that data under its own policies, including to personalize ads. You can manage ad personalization in your Google Ads Settings.
  • Meta Conversions API and Meta pixel, and other conversion pixels (advertising measurement). I may use the Meta Conversions API, the Meta pixel and similar conversion tools from other advertising platforms to measure the results of my ads and to improve how they are delivered. These tools send events such as page views, add-to-cart, checkout and purchase events, together with online identifiers such as cookie IDs and ad click identifiers. With the Conversions API, information can also be sent to the platform from my servers rather than from your browser. Some identifiers, such as email address or phone number if provided, are hashed (converted to a one-way code) before they are sent, while others, such as IP address and browser details, are sent as they are. The platform may match this information with its own users and uses it under its own policies, including for its own advertising purposes as described in those policies.
  • Website testing (A/B testing). I may use third-party website testing software to show different versions of pages to different visitors and measure which performs better. These tools use cookies or local storage to remember which version you saw and to record how you interacted with it. The current list of cookies, including those set by any testing tool, is available in the cookie settings (“Manage consent”) on the Site.

The table above describes the main cookies and tools. Because tools and cookies can change, the most current list is always available in the cookie settings link, and a detailed, automatically updated list is in my Cookie Policy (US) at https://www.ankushagarwal.org/cookie-policy-us/. Your choices. I ask for your consent before using non-essential cookies, pixels and testing tools, and none of them run until you accept. You can change your settings at any time through the cookie settings (“Manage consent”) link on the Site. You can also:

Cookie or technologyProviderPurposeTypical duration
_gaGoogle AnalyticsDistinguishes visitors and counts page views for analytics2 years
_ga_ followed by an IDGoogle AnalyticsStores session information for analytics1 year
_fbp, _fbcMetaAdvertising measurement and attributionUp to 90 days
Website testing cookiesThe testing tool in useRemembers the page version you were shownVaries by tool
cmplz_functional, cmplz_statistics, cmplz_preferences, cmplz_marketingComplianz (cookie consent tool)Remember your cookie choices365 days
wpEmojiSettingsSupports and similar functionality cookiesWordPress and the Site’s pluginsStore browser details so pages display correctly and keep the Site workingSession

5. How I share personal information

I share personal information only as described here:

  • Service providers that help me run the Site and my business, acting on my instructions. These include my web hosting provider (currently Site5); Payhip and Gumroad, the sales platforms that handle purchases, and their payment processors, including Stripe; Google (Google Analytics); the website testing tool I use; any email service provider I use; and WordPress plugins that handle contact forms, caching, cookie consent and search optimization.
  • Advertising and measurement partners. Meta, Google (through Google Analytics advertising features such as Google Signals) and any other advertising platform whose pixel or server-to-server tool I use receive the information described in Section 4. These partners may act as independent controllers for their own purposes.
  • Gravatar. Where the Site shows an author photo, your browser may request that image from Gravatar (operated by Automattic Inc.), which receives your IP address as part of the request.
  • Legal and safety reasons, for example to comply with a law, court order or legal process, or to protect the rights, property or safety of me, my customers or others.
  • Business changes. If I sell or transfer all or part of my business, information may be transferred to the new owner, who must honor this Policy.
  • With your consent, or at your direction.

I will never sell, rent or trade your email address or other contact details to anyone, and I do not sell your personal information for money. However, laws in California and some other states define “sharing” or “sale” broadly, so that disclosing identifiers and online activity to advertising platforms through pixels and similar tools for advertising measurement can count as “sharing” for cross-context behavioral advertising, “targeted advertising”, or a “sale”. To the extent my use of tools described in Section 4 counts as any of these, you can opt out as described in Sections 12, 13 and 18.

6. Third-party sites, platforms and links

The Site links to other websites and platforms, including LinkedIn, X (Twitter), Payhip and Gumroad, the platforms that sell the Products. Share links on articles open those services in a new tab. Those organizations decide how they handle your information under their own privacy policies, and I am not responsible for them. Please review their policies before you provide personal information.

7. Embedded content

The buy buttons on the Site are links that take you to Payhip’s checkout page, which Payhip hosts on a checkout address connected to my domain. The Site does not load a Payhip script, but once you open the checkout page, Payhip may set its own cookies and receive information such as your IP address and device details, under its own privacy policy. The Site does not currently embed third-party videos, forms or checkout widgets. If that changes, the embedded service may set its own cookies and collect information about you, and I will update this Policy and the cookie list to describe it.

8. Purchases and payments

Digital products are sold through Payhip, a third-party sales platform, with payments processed by Stripe. When you buy, you enter your payment details at Payhip’s checkout, which may appear on a checkout address connected to my domain. Payhip and Stripe handle your payment and may collect and use your information under their own terms and privacy policies. I receive order information such as your name, email address, country or postal code and what you purchased, which I use to provide support and keep business records. I do not receive or store your full card number. The Products are also sold through the Gumroad marketplace. If you buy there, you enter your payment details at Gumroad, which acts as the merchant of record for that purchase. Gumroad and its payment providers collect and use your information under their own terms and privacy policies, and Gumroad shares order information with me, such as your name, email address, country or postal code and what you purchased, which I use in the same way. I do not offer the Products for sale to customers in the European Union or the United Kingdom through this Site or Payhip.

9. Email communications

If you subscribe to updates or buy a product, I may send you emails about your purchase and, where you agree or the law allows, news and offers. Every marketing email includes an unsubscribe link, and you can also ask me to remove you from the list at any time. I will still send essential messages about your orders, such as receipts and access instructions. I will never sell or rent my email list. Marketing emails include the contact details that the law requires.

10. How long I keep information

I keep personal information only as long as needed for the purposes in this Policy, including legal, tax, accounting and security needs. As a guide: contact messages for up to 24 months; purchase records for 7 years, to meet tax and accounting rules; server logs for up to 90 days; Google Analytics event data for 14 months; testing and advertising measurement data for as long as the provider’s settings keep it, which I review regularly; and email list data until you unsubscribe or ask me to delete it. When information is no longer needed, I delete or anonymize it.

11. Security

I use reasonable technical and organizational measures to protect personal information, such as HTTPS encryption, access controls and trusted providers. No website or storage method is completely secure, so I cannot guarantee absolute security. If a breach affects you, I will notify you and any authorities as the law requires.

12. Your privacy rights

Depending on where you live, you may have some or all of these rights:

  • Access the personal information I hold about you and receive a copy.
  • Correct information that is inaccurate or incomplete.
  • Delete your information, subject to legal exceptions.
  • Restrict or object to certain uses, including processing based on legitimate interests and direct marketing.
  • Data portability, meaning receiving your information in a usable format.
  • Withdraw consent at any time, without affecting earlier lawful processing. You can do this through the cookie settings (“Manage consent”) link on the Site.
  • Opt out of the sale or sharing of personal information, of targeted or cross-context behavioral advertising, and of certain profiling, where those laws apply.
  • Not be discriminated against for using your rights.
  • Complain to your data protection authority, such as your national supervisory authority in the EEA or the Information Commissioner’s Office in the UK.

To use a right, email [email protected] or use the Contact page. To opt out of sale or sharing, or to ask for access, deletion or portability, you can also use the request form on my Cookie Policy (US) page at https://www.ankushagarwal.org/cookie-policy-us/, or the cookie settings link on the Site. I may need to verify your identity before acting on a request, for example by matching details to a purchase, though opt-out requests usually need no verification. You may use an authorized agent, and I may ask for proof of authority. I aim to respond within 30 days, or within 45 days for requests under US state laws (extendable where the law allows). If I decline a request, I will explain why, and you may appeal by replying to my response.

13. Notice for California residents

If you are a California resident, the California Consumer Privacy Act (as amended) may give you the rights in Section 12. In the past 12 months I have collected the following categories of personal information, for the purposes described in Section 3: identifiers (such as name, email address, IP address and online identifiers); commercial information (purchase records); internet or other electronic network activity (pages visited and interactions); approximate geolocation; and, if you contact me, the content of your messages. I have not collected sensitive personal information.

Where I use advertising measurement tools, I may share identifiers and internet activity information with advertising platforms such as Meta and Google for cross-context behavioral advertising, which California law may treat as “sharing”. I do not sell personal information for money, and I do not knowingly sell or share the personal information of consumers under 16. You may opt out of sale and sharing at any time through the opt-out form on my Cookie Policy (US) page (https://www.ankushagarwal.org/cookie-policy-us/), the cookie settings link on the Site, or by emailing [email protected]. I retain information as described in Section 10. California’s “Shine the Light” law also lets residents ask about disclosures of personal information to third parties for their direct marketing purposes; see the preceding paragraph for what I disclose.

14. Residents of other US states

Residents of certain other states, including Colorado, Connecticut, Texas, Utah, Virginia and others, may have rights similar to those in Section 12, including the right to opt out of targeted advertising, sales of personal data and certain profiling, and the right to appeal a refusal. Email [email protected] to use these rights. These laws apply only in some circumstances, and I will honor them where they apply.

15. Notice for people in the EEA, UK and Switzerland

I process your information on the legal bases listed in Section 3. Where I rely on consent, you can withdraw it at any time through the cookie settings (“Manage consent”) link on the Site without affecting earlier processing. Meta, Google and other providers named in this Policy may act as independent controllers for their own purposes. I rely on international transfer safeguards such as standard contractual clauses or approved transfer frameworks (see Section 16). The Site does not sell products to people in these regions, but it can be visited from anywhere, so these rights are available to visitors there. Providing information is voluntary, but without it I may not be able to answer you or deliver a purchase. You may contact me with any concern before contacting a regulator.

16. International transfers

I am based in Texas, in the United States, and the Site, my providers and the platforms named in this Policy may process information in the United States and other countries. If you are in the European Economic Area, the United Kingdom or Switzerland, your information may be transferred outside your region. Where required, those transfers rely on safeguards such as standard contractual clauses or my providers’ certifications under approved transfer frameworks.

17. Children’s privacy

The Site is intended for adults and is not directed to children under 13, or under the minimum age in your country. I do not knowingly collect personal information from children, or use pixels and advertising measurement for them. If you believe a child has given me personal information, contact me and I will delete it.

18. Do Not Track and Global Privacy Control

There is no common standard for browser “Do Not Track” signals, so the Site does not currently respond to them. The Site treats a Global Privacy Control signal as a request to opt out of the sale or sharing of personal information and of targeted advertising for that browser.

19. Changes to this Policy

I may update this Policy as the Site, the tools I use or the law change. I will post the new version here with a new “Last updated” date. If a change is significant, I will take extra steps to tell you, for example by email where I have your address, or by asking for your consent again where the law requires it. Please review the Policy from time to time.

20. Contact

Questions or requests about this Policy: Ankush Agarwal, [email protected], or the Contact page at https://www.ankushagarwal.org/contact/.