What we collect, why we collect it, who it goes to, and how to get it removed.
EFFECTIVE DATE: September 22, 2026 · LAST UPDATED: September 24, 2026
We collect the minimum we need to train you: your name and email to create an account, your payment details (handled entirely by Stripe; we never see your card), and the training data you enter in the Standards app. We do not run analytics or advertising trackers on this website, we do not use cookies for tracking, and we do not sell your data to anyone. The rest of this page is the detail.
This policy applies to the criterionone.com website and the Standards application, operated by Criterion One, LLC ("Criterion One," "we," "us"), Georgetown, Texas. Contact us any time at info@criterionone.com.
Account and signup. When you subscribe, we collect your name and email address. That's it at signup. We don't ask for an address, phone number, or date of birth to start.
Payment information. Payments are processed by Stripe. Your card number and billing details go directly to Stripe; we never receive or store your full payment card details. We receive back only what we need to service your subscription — a customer reference, the plan you bought, and whether payment succeeded.
Training data. When you use the Standards app, we store what you enter and what the app measures: drills run, times, scores, repetitions, session history, personal bests, your stated goals, experience level, and training availability.
Training and class participation. If you register for in-person training, we may collect additional information required to run it safely: an emergency contact, relevant medical or physical limitations you choose to disclose, and a signed liability waiver.
Communications. If you email us, we keep that correspondence so we can help you.
Our website is hosted by Netlify, which keeps standard server logs — including IP address, browser type, and pages requested — for security and reliability. This is normal web-server operation, not tracking.
We do not use Google Analytics or any other analytics platform, advertising pixels, or cross-site trackers on this website. This was verified in the site's source code.
This website does not set tracking cookies. During our pre-launch period, the site stores a single value in your browser's sessionStorage to remember that you entered the access code, so you aren't asked on every page. It contains no personal information and disappears when you close the browser.
Stripe and Supabase may set their own cookies on their own domains when you go through checkout or sign in; those are governed by their privacy policies.
Our fonts are served from our own domain rather than a third-party font service, so rendering this website does not disclose your IP address to any outside company.
We use it to: create and maintain your account; process payments and manage your subscription; build and adjust your training programming; score your performance against standards and show your progress; deliver the coaching or classes you purchased; send you service messages (sign-in links, receipts, renewal notices, schedule changes); respond to your questions; keep training safe; and meet legal and accounting obligations.
We do not sell your personal information, rent it, or share it with advertisers.
We share information only with service providers who help us operate, and only what they need:
— Stripe — payment processing and subscription billing.
— Supabase — database, authentication, and application hosting for the Standards app.
— Netlify — website hosting.
— Resend — delivers our sign-in links and service emails, sent from login@mail.criterionone.com.
We may also disclose information if required by law, to enforce our Terms, or to protect the safety of our students, staff, or the public. If the business is ever sold or merged, information may transfer as part of that transaction; we'd notify you.
Your training data is yours. We use it to run the Services for you. We may also use aggregated, de-identified data — data that cannot reasonably identify you — to improve our drills, standards, and training methodology. We do not publish your individual results without your permission.
If you train under a team or agency account, your organization's administrator may have access to your participation and performance within that program. We'll make that clear at the time.
We keep your account and training data while your account is active, and for 12 months after cancellation (so you can come back without losing your history), after which it is deleted. If you ask us to delete it sooner, we will.
Payment and tax records are retained for seven (7) years, as U.S. tax and accounting rules require, even after an account is deleted. Website server logs are kept only as long as our host retains them (roughly 30 days). Email correspondence is kept for up to 24 months.
Access to the app requires a sign-in link sent to your email. Data is stored with access controls that restrict each account to its own records, and payment details never touch our systems. No system is perfectly secure, but we take reasonable measures to protect your information and will notify you if a breach affects your data as required by law.
You can, at any time: request a copy of the personal information we hold about you; ask us to correct anything inaccurate; ask us to delete your account and personal data; or unsubscribe from non-essential email. Email info@criterionone.com and we'll take care of it. We respond to these requests within 30 days.
Note that some records (payment and tax records in particular) must be retained by law even after account deletion.
California residents have additional rights under California privacy law, including the right to know what personal information is collected and to request deletion. We do not sell personal information, so there is nothing to opt out of in that respect. Use the same email address above to exercise these rights.
The Services are not directed to children under 13, and we do not knowingly collect their information. Subscriptions require you to be 18 or older. Participants under 18 may train only with parent or guardian consent and supervision; in that case the parent or guardian provides the account information. If you believe a child has given us information, contact us and we will delete it.
Our site links to third parties such as Instagram and YouTube. We don't control their practices, and this policy doesn't cover them.
Criterion One is based in the United States and our Services are intended for users in the United States. Information is stored and processed in the U.S. Our Services are not directed to residents of the European Union or the United Kingdom, and we do not market to them. If we begin serving those regions, we will update this policy to meet the additional obligations that apply.
If we change this policy, we'll update the "Last Updated" date above and, for material changes, give notice. If we ever add analytics or any tracking technology, we will update this policy before it goes live.
Questions, requests, or complaints about privacy: info@criterionone.com
Criterion One, LLC · Georgetown, Texas