Privacy Policy

At RoamWell, your privacy is not an afterthought, it's a design principle. This page explains exactly what data we collect, why, and how we protect it.

The short version

• We collect the minimum information needed to run this website.
• We do not sell your personal information.
• We use Google Analytics to understand aggregate site traffic, not to identify you personally.
• You can request deletion of your data at any time.

Information we collect

1. Information you give us

When you contact us through our contact form, we collect your name, email address, and message so we can respond to you.

2. Automatically collected information

We use Google Analytics to understand how visitors use our site: pages visited, time on site, general location (country/city), and device type. This data is aggregated and used to improve our content; we don't use it to identify individual visitors.

3. Cookies and local storage

Google Analytics sets cookies to distinguish visitors and sessions. We also use your browser's local storage (not a cookie) to remember your display preference, like dark mode, that stays on your device and is never sent to us. This site loads Google AdSense's script, and once advertising is active, Google and its advertising partners may also use cookies, web beacons, or similar technologies to serve and measure ads, as described in the Google AdSense and advertising section below.

Purchase access cookie. For a product bought through the earlier checkout that did not ask you to sign in (a downloadable product, or an Ascent Profile Audit purchase made that way), after a payment is verified, we set a first-party cookie in your browser so that we can provide and verify your access to the digital product you bought, whether it is a download or a browser-based tool. A purchase made while signed in to an account does not use this cookie; see Accounts and sign-in below. The cookies in use today are namedrw_purchase for The Trek-Ready Training System, rw_purchase_back-to-fitness-6-week-plan for Back to Fitness, rw_purchase_multi-day-hike-preparation-system for The Multi-Day Hike Preparation System, and rw_purchase_ascent-profile-audit for The Ascent Profile Audit, so each product has its own. A product added later gets its own cookie in the same way. The cookie is HttpOnly, so page scripts cannot read it; Secure, so it is sent only over HTTPS; SameSite=Lax; and it expires 30 days after purchase. It contains the signed purchase and access record that the access check reads: the product, the order and payment reference, the amount and currency, and the expiry time. It does not contain your name or email address. We use it only to provide the product you bought. It is not used for advertising or tracking. Clearing your browser's cookies removes it, and that also ends access to the product in that browser.

Google AdSense and advertising

This site runs Google AdSense's script, which Google requires sitewide to set up and verify advertising. Once Google AdSense is actively serving ads, Google and its advertising partners may use cookies, web beacons, IP addresses, or similar technologies to serve ads, measure their performance, and, where applicable and permitted, personalize the ads shown to you based on your visits to this and other websites.

You can review and manage your ad personalization preferences through Google's Ads Settings, and learn more about how Google uses data from sites and apps that use its services at Google's Partner Sites policy. Where required by applicable law, we will present visitors with the appropriate consent choices before personalized advertising is served.

Global visitors and consent

RoamWell is read by visitors around the world, including from the EEA, UK, Switzerland, US, and India, and applicable privacy and consent requirements can differ depending on where you're visiting from. Where required by law, we'll present the appropriate consent choices before using cookies or advertising technologies that require your permission.

How we use your information

• To respond to your questions or feedback
• To sign you in, link your purchases to your account, and provide access to what you bought
• To understand aggregate site traffic and improve our content
• To detect and prevent security issues
• To display advertising, if and when Google AdSense is enabled

Purchases and payments

When you buy a product, payment is taken through Razorpay, a third-party payment gateway. Razorpay provides the checkout and payment processing. You enter your payment and contact details into Razorpay's checkout window, not into a form on this site. Razorpay processes the information it needs to take and verify the transaction, and for its fraud and security controls. Razorpay's own privacy policy, published on its website, applies to that processing.

RoamWell receives only the information returned by our current integration. When checkout completes, our server receives the order and payment references and the signature that Razorpay provides. It asks Razorpay to confirm them, and uses the amount, currency, product and status that Razorpay returns to decide whether to grant access. RoamWell does not receive or store your card numbers, bank details, UPI details or other payment credentials. Our website sends Razorpay only the product you chose and the order it creates. For a purchase made without signing in, that order also carries short labels naming the versions of the policies and checkout wording you confirmed before paying; they contain no personal information.

For purchases that use the purchase cookie, RoamWell does not maintain a separate purchase database. The payment and order references needed to verify a transaction and provide digital-product access are held in the purchase cookie in your browser, described above. Purchases made while signed in to an account are different, and are described under Accounts and sign-in below. Error messages in our hosting logs may include order or payment reference IDs.

Accounts and sign-in

The Trek-Ready Training System, Back to Fitness, the Multi-Day Hike Preparation System and the Ascent Profile Audit are bought with a RoamWell account, where their checkout asks you to sign in. This section describes what that involves.

Signing in. You give us your email address and we email you a one-time code, which you enter on our sign-in page. There is no password. Signing in with an email address that has no account yet creates one. The code is sent and checked by our authentication provider, Supabase, and we do not keep it. The email address is held by the authentication provider as your account's sign-in identity.

Sign-in cookies. Once you sign in, we set first-party cookies in your browser that keep you signed in. They are HttpOnly, so page scripts cannot read them, and SameSite=Lax. We use them only to keep you signed in and to check who you are when you buy a product, open a download or open the Ascent Profile Audit. They are not used for advertising or tracking. Signing out removes them from that browser. Clearing your cookies signs you out there, and does not delete your account or your purchases.

What we keep for an account purchase. When you buy while signed in, we keep a record in our database, hosted by Supabase. It holds your account's user ID (not your email address), the product, the amount and currency charged and the price tier it belongs to, Razorpay's order and payment references, timestamps, and the status of your access. It also holds the versions of the Refund Policy, the Terms and the checkout wording you confirmed before paying, your three confirmations, and the time they were recorded, taken from the database's clock. We use it to link the purchase to your account, to check that a download belongs to the person asking for it, to deal with duplicate charges and payment problems, and to keep a short log of events on these records for security. We do not store your card, bank or UPI details, and we do not copy the payer's email address or phone number from Razorpay into these records.

Sign-in protection. To limit abuse of the sign-in form, we keep keyed hashes of the email address and network address used with a sign-in request. We cannot read an email address or a network address back from them. They are used only to apply the limit, stop counting after at most 24 hours, and are then cleared automatically.

Keeping and deleting. We keep an account and its purchase records for as long as the access they provide is in force. If you ask us to delete an account that holds a purchase, we can no longer provide the access linked to it. See Your rights below.

To show you the right price, the site reads the country your connection appears to come from. This is provided by our hosting provider, Vercel. It is used only to choose the price shown and charged, and RoamWell does not store it.

Third-party services

We use a small number of trusted third-party services:

• Vercel: website hosting and delivery
• Web3Forms: to process contact form submissions and deliver your message to us
• Razorpay: to process payments for products you buy. See Purchases and payments above.
• Supabase: to send and check sign-in codes, and to host account and purchase records. See Accounts and sign-in above.
• Google Analytics: to measure usage and analytics data, such as aggregate traffic information, across the site. Google's own privacy policy governs how they handle this data; you can opt out using the Google Analytics Opt-out Browser Add-on.
• Google AdSense: may be used to display advertising on this site; see Google AdSense and advertising above for details.

Each of these has their own privacy policies. We review them regularly to ensure they meet our standards. Information may be processed by these trusted service providers where necessary to operate the website or provide the services you've requested; we don't share your information beyond what's needed for that.

Your rights

You have the right to:

• Request a copy of the data we have on you
• Ask us to correct or delete your data
• Object to how your data is being used

To exercise any of these rights, email us at theroamwell@gmail.com and we'll respond within 30 days.

Data retention

We keep contact form messages for up to 24 months. We keep account and purchase records for as long as the access they provide is in force.

Children's privacy

This website is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this policy from time to time. When we do, we'll update the "last updated" date at the top.

Contact us

Questions about this policy? Email theroamwell@gmail.com or reach out via our contact page.