Privacy policy

Last updated 26 September 2026

The short version

Browsing. Nothing about your visit goes to an analytics or advertising company until you choose on the banner, and Decline means none of it loads. Two things happen whatever you choose: the services that host this site keep ordinary request logs, and your browser keeps a note of the campaign link you arrived by, on your own device.

Giving us your email. Your address, and what that form asked, go to our email list so we can send what you asked for. Nothing else. The platform guide is the same: your address joins the list, and the guide opens on the page.

Buying. Stripe processes payments for Atlas Nexus Trading - F.Z.E. For orders placed through Paddle, Paddle.com is the seller and Merchant of Record. We receive your email address, what you bought and what you paid. We never receive your full card number.

Using the course. Signing in creates an account under your email address. The course keeps what you do in it so it is there when you come back: the calls you commit, including anything you write, your notes, and the name you put on your certificate.

Who we are

The Compound System is operated by Atlas Nexus Trading - F.Z.E, a Free Zone Establishment (Limited Liability) licensed by the Free Zones Authority of Ajman (licence 50931), registered at B.C. 1306880, Ajman Free Zone C1 Building, Ajman, United Arab Emirates. It runs this site and the course at app.thecompoundsystem.com and is responsible for the personal data this page describes. For Stripe payments we are the seller. For orders placed through Paddle, Paddle.com is the seller and handles your payment details as the Merchant of Record. Write to hello@thecompoundsystem.com about anything on this page.

On this site

The banner. It asks once. Analytics only allows Google Analytics. Allow both also allows the Meta and LinkedIn tags. Decline loads none of them. Your choice is kept in your browser’s local storage, and the Cookie choices link at the foot of every page opens the banner again. A script that has already loaded cannot be unloaded, so a change takes full effect on your next page.

Campaign labels, whatever you choose. If the link you arrived by carries campaign labels (utm_source and the like), your browser keeps them, with the page you landed on and the site that sent you: for this visit in session storage, and the first you ever arrived with in local storage. They describe the link, not you. They stay on your device unless you send us a form, when they travel with it, or you allow analytics and then buy, when they travel with the sale record described under Buying. Advertising click ids (fbclid, gclid and the like) are held only in the page’s memory and dropped unless you choose Allow both.

Google Analytics, only if you allow analytics. It loads and sets its own cookie. It receives the address of each page you view, the campaign labels, and what you do on our pages: for example which option you choose in the free case and how it compares, whether you open the edition page, which links you press, and in the platform guide which market, goal and platform you save and whether you copy or download your brief (never what you type into its search). Never your email address, your name or anything you type.

Meta, only if you choose Allow both. The Meta Pixel loads and tells Meta each page you view, with its address. If you then give us your email on the diagnostic or the platform guide, our server also tells Meta about that sign-up, with your email address turned into an irreversible hash before it leaves, your IP address, your browser’s user agent, the page address and Meta’s own cookie identifiers, which is how that kind of matching works. Never your name or your answers. If you do not choose Allow both, we send Meta nothing, from your browser or from our server.

LinkedIn, only if you choose Allow both. The LinkedIn Insight Tag tells LinkedIn that a page here was visited: its address and title, the page you came from, the time, your IP address, your browser’s user agent and LinkedIn’s own cookie identifiers. It lets us see whether LinkedIn ads lead anywhere and show ads to people who have been here before, and once enough people have visited LinkedIn can describe that audience to us in aggregate, never as individuals. We send LinkedIn nothing from our server. Our pages never put your email address, your name or anything you type into a page address.

The platform guide. Once you sign up, the guide and the placements you save to your shortlist, each with its market and goal, are kept in your browser (local storage, or for this visit only if that is blocked) so they are still there when you come back on this device. Your email address is not kept there, and none of it is sent to us. The Clear this guide from this device control removes it. On another device you sign up again.

The free case. The call you commit on the free case is kept in your browser, so it is still there if you come back. It reaches us only if you give us your email there.

Fonts. Served from our own domain. No font request goes to Google or anyone else.

Your email

When you give us your email on the free case, the diagnostic, the platform guide or the edition page, it goes to Kit, the service that runs our email list, with what that form asked (your diagnostic result, for example, or your answer about buying) and the campaign labels you arrived by. We use it to send what you asked for: a short series of worked campaign decisions and occasional product updates. Not sold, not rented, not shared for anyone else’s marketing. Kit first sends you one email asking you to confirm the address, and the series starts once you do. The guide itself opens on the page and does not depend on that email. Unsubscribe in one click from any email.

Buying

Stripe, or Paddle for orders placed through it, collects the billing and payment information needed to process your order under its own privacy policy. We keep your email address, what you bought, the amount, currency, payment status and time, and the provider’s reference numbers. Billing information is used for tax and receipts. Our course database removes card details and unnecessary billing details from stored payment notifications.

Sales reporting. If you allowed analytics on this site before you clicked Buy, our server tells Google Analytics and PostHog that a checkout started, that the sale happened, and, if it does, that it was refunded: the edition, the price, whether it was a founding place, the campaign labels and a transaction number. Never your email address or your name. If you did not allow analytics, the sale is reported nowhere.

For receipts, refunds or payment questions, email hello@thecompoundsystem.com. Paddle also handles support for orders placed through it. The refund policy says how.

The course

Your account. Signing in with your email address creates an account, even before you buy, so that a purchase made with that address can find you. Until you choose a name, the course calls you by the first part of your email address. Sign-in codes, invitation links and your welcome email are sent by Resend, the service that delivers our email.

What the course keeps. Which cases you have opened and finished, each call you commit, including anything you write in answer, your notes, and what your Callbook and Playbook are built from. A committed call cannot be changed or deleted from the course, by you or by us, because it is the record your certificate stands on. Your notes you can delete. Drafts are kept in your browser until they are saved.

If we invite you. When someone agrees in conversation to try the course, we record their email address, the first name and any short note we add to their invitation, when access was granted, when the invitation email was accepted for sending and when they first opened the course. It stays in the course’s own database and is used only to run the invitation; Resend receives the address and the email to deliver it. An invitation does not subscribe anyone to marketing.

Your certificate. When you have finished all 38 cases you can issue a certificate in the name you choose. Anyone with its code can check it at /verify, which shows your name, the edition and the date it was issued while the certificate is valid. If your purchase is refunded, the certificate stops verifying and the check no longer shows your name.

Measurement in the course, only if you say Fine. The course asks once. If you say Fine, PostHog, our product analytics service, receives which cases you open, commit and finish, the option you chose, how long a case took, and which parts of the course you use, tied to your account’s random id and never to your email address. No screen recordings. If you say No, nothing is sent. To change your answer later, clear this site’s data in your browser or write to us.

Where it is kept. The course’s database and sign-in run on Supabase, in Singapore. Both sites are served by Vercel.

Cookies and browser storage

We set these ourselves: the course’s sign-in cookies, which keep you signed in; your banner choice, in local storage; the campaign labels described above; a random session id that lasts as long as your browser tab; the free case’s committed call; the platform guide and your saved shortlist; and your course drafts. Google Analytics sets its own cookie if you allow analytics, Meta and LinkedIn set theirs if you choose Allow both, and PostHog keeps its own id in your browser if you say Fine in the course. Stripe’s hosted checkout, or Paddle’s checkout for orders placed through it, uses its own scripts and necessary payment cookies.

Server logs

Vercel, which serves both sites, and Supabase, which runs the course’s database and sign-in, record ordinary technical information about requests, as any web service does. We use it to keep the service working, not to identify or profile visitors.

Who we share with

Only the services named on this page, each for its part: Vercel (hosting), Supabase (the course’s database and sign-in), Stripe (payment processing), Paddle (Merchant of Record for orders placed through it), Resend (sending email), Kit (our email list), and, only where you allow them, Google, PostHog, Meta and LinkedIn. We do not sell your information. Some of these services are in the United States or other countries outside your own.

How long we keep it

We have not set fixed deletion periods. We keep your account and course records while your account exists, your email-list record until you unsubscribe or ask us to remove it, and purchase and refund records for our accounts. Ask us to delete your account and we will, keeping only the purchase and refund records.

Your rights

Ask us what we hold about you, to correct it, or to delete it: write to hello@thecompoundsystem.com from the address concerned. We reply within 30 days.

Children

This site is for people learning and working in advertising, and is not directed at children under 13.

Get in touch  ·  Privacy  ·  Terms  ·  Refunds  ·  Licence  ·  Contact  ·  Cookie choices