Privacy Policy
Last updated · 22 August 2026
The short version: we collect as little as we can. Your payment details never reach us — the checkout is run by Whop. We use one email provider, one hosting provider, and a click counter that stores no personal data at all. We do not sell or rent anything about you to anyone, ever.
1 · Who is responsible for your data
The data controller is [[RAGIONE SOCIALE]], [[INDIRIZZO]], VAT number [[P.IVA]] ("we", "us"), the business behind The Fighter Protocol.
For anything in this policy — including all the rights listed in section 6 — write to hello@thefighterprotocol.com. A person reads that address.
2 · What we collect, why, and for how long
| What | Why | Legal basis | Kept for |
|---|---|---|---|
| Your email address, if you give it to us — by signing up to our list or by writing to us | To send you the emails you asked for, and to answer you | Consent for marketing emails; our legitimate interest in answering correspondence | Until you unsubscribe or ask us to delete it |
| Your purchase: order, plan, access to the programme, and the email you used to buy | To give you what you paid for and to handle refunds | Performance of the contract; legal obligations on accounting records | Held in your Whop account for as long as it exists; accounting records for the period the law requires |
| Payment details (card, billing address) | To take the payment | Performance of the contract | Never seen or stored by us. Whop is the platform that processes the payment |
| Website traffic, in aggregate: pages, country, device type, referring site | To know whether the site works and where visitors come from | Legitimate interest in running and securing the site | Aggregated; no profile of you is built |
| Partner attribution: the label of the partner whose link you followed, the country, the type of device, and the domain that referred you | To credit the partner who sent you, and to tell that partner how many clicks their link produced | Legitimate interest in paying our partners correctly | Click records are kept at most 90 days. The cookie lasts 30 days |
What is never in the attribution records: no IP address, no email address, no name, no account ID, no raw browser string. A record is a label, a country, a device type and a referring domain — nothing that points back to a person.
3 · Who else processes it
Three companies, each doing one job:
- Whop — the platform that sells and delivers the programme. The checkout, the payment and your access all happen there, under Whop's own terms and privacy policy.
- MailerLite — our email provider. If you are on our email list, your address is stored with them.
- Cloudflare — hosting, security and traffic analytics for this website, and the storage behind the click counter described above.
Some of these providers operate outside the European Economic Area. Where that is the case, transfers rely on the safeguards those providers publish for international transfers — the standard contractual clauses approved by the European Commission and the equivalent mechanisms. We do not sell, rent or trade your data, and we do not share it with advertising networks.
4 · Cookies
This site sets no advertising cookies, runs no third-party tracking script and builds no profile of you. There are exactly two cookies, both first-party:
| Cookie | What it holds | How long |
|---|---|---|
tfp_ref |
A short text label — the name of the partner whose link you followed. Nothing else, and nothing personal. It is set as HttpOnly, so no script on the page can read it. | 30 days |
tfp_clk_… |
A marker that says "this click was already counted", so that reloading a page doesn't count as a new visitor. | 30 minutes |
Whop sets its own cookies on its own pages, once you go to the checkout. That is covered by Whop's policy, not this one.
5 · What we don't do
- We don't sell, rent or trade your data.
- We don't run advertising pixels or profiling on this site.
- We don't make automated decisions about you, and we don't profile you.
- We never see your card details.
6 · Your rights
If you are in the EU or the UK, the law gives you the right to:
- Access — ask what we hold about you, and get a copy.
- Rectification — have anything wrong corrected.
- Erasure — have your data deleted, where we have no obligation to keep it.
- Restriction — ask us to stop using it while something is disputed.
- Objection — object to processing we base on legitimate interest.
- Portability — receive the data you gave us in a machine-readable file.
- Withdraw consent — at any time, for anything based on consent. Every email we send has an unsubscribe link, and it works immediately.
- Complain — to the data protection authority of the country you live in, at any time, without asking us first.
To use any of them, write to hello@thefighterprotocol.com. We answer within one month, as the law requires, and usually much sooner. We won't charge you for it and we won't ask you why.
7 · Children
This programme is sold to adults. We do not knowingly collect data from anyone under 18. If you believe a minor has given us their data, write to hello@thefighterprotocol.com and we will delete it.
8 · Changes to this policy
If we change how any of this works, we change this page and the date at the top with it. If the change is material and you are on our email list, we will tell you by email rather than quietly editing a page.