Data & Privacy

Last updated: July 14, 2026

This site collects the minimum data needed to do its work — your email if you sign up for the Field Guide, your message if you reach out through the contact forms. We don't sell it, share it, or use it to track you across the web.

The 90% Code argues for data sovereignty. The site practices it.

The detail is below, in plain language and in the form privacy law requires.

What we collect

If you sign up for the Field Guide: your email address, and optionally your name if you choose to share it. We use this to send you the Field Guide and, occasionally, updates related to the book and the work — book launch, talks, new resources. You can unsubscribe at any time using the link at the bottom of every email.

If you submit a contact form (Speaking, Workshops, Lab, Press, or general inquiry): the information you provide — typically name, email, organization, and message. We use this only to respond to your inquiry.

If you visit the site: standard analytics data through Squarespace and Google Analytics — pages viewed, time on site, approximate location (country/region level), device type, and referring source. This is aggregated and anonymous. We don't track individuals.

If you use the AI Trust Score (score.the90code.com): your answers to the assessment questions and your email address. We use these to generate and send your Trust Profile and to improve the tool. During the pilot, any feedback you give is used to refine the framework. We don't sell or share this, and you can request deletion at any time.

If you sign up through a LinkedIn ad: when you request the Field Guide via one of our ads on LinkedIn, LinkedIn passes us the details you submit in their form — your name and email — under LinkedIn's own privacy policy. We use these the same way as any Field Guide sign-up: to send you the guide and occasional related updates. You can unsubscribe at any time.

Cookies: the site uses cookies for basic functionality and analytics. You can decline non-essential cookies via the banner that appears on your first visit.

What we don't do

We don't sell your data. We don't share it with advertisers, data brokers, or third parties for marketing. We don't use it to build profiles of you for retargeting. We don't share it with anyone who isn't directly helping us run this site (see "Who else touches your data" below).

Who else touches your data

To operate the site, we use a small set of trusted service providers. Each handles a specific function and is bound by their own privacy policies and applicable data protection law:

  • Squarespace — website hosting and contact form processing

  • Squarespace Email Campaigns — Field Guide delivery, subscriber list management, and any email updates we send

  • Google Workspace — email and file storage (sonali@the90code.com)

  • Google Analytics — anonymous usage analytics

  • LinkedIn — lead generation forms for visitors who sign up for the Field Guide through our LinkedIn ads

We don't share your data with anyone beyond these providers, and we only share what's needed for them to do their function.

How long we keep it

Email subscribers: as long as you remain subscribed, plus a short period after unsubscribe for our records. You can request full deletion at any time.

Contact form submissions: kept for as long as needed to respond to your inquiry and follow up. Typically deleted within 12 months of last contact unless an ongoing relationship exists.

Analytics data: retained according to Google Analytics' default retention settings (currently 14 months).

Your rights

Depending on where you live, you have specific rights over your data. These include:

  • Access — ask us what data we hold about you

  • Correction — ask us to fix anything inaccurate

  • Deletion — ask us to remove your data

  • Portability — receive your data in a usable format

  • Withdrawal — withdraw consent for processing at any time

  • Objection — object to specific uses of your data

These rights apply in different ways depending on your jurisdiction — including under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), British Columbia's Personal Information Protection Act (PIPA), the EU's General Data Protection Regulation (GDPR), and California's Consumer Privacy Act (CCPA).

To exercise any of these rights, email admin@the90code.com with the request. We'll respond within 30 days.

International transfers

This site is operated from Canada. If you're visiting from outside Canada, your data will be transferred to and stored in Canada and the US (where Squarespace and Google Workspace are headquartered). Both countries have data protection frameworks recognized as adequate or equivalent for cross-border data flows from most jurisdictions

Children

This site isn't directed at children under 13. We don't knowingly collect data from anyone under 13. If you believe a child has submitted information to us, email sonali@the90code.com and we'll delete it.

Changes to this policy

We may update this policy as the site evolves or as legal requirements change. The "Last updated" date at the top will reflect any change. Substantive changes will be communicated to email subscribers.

Contact

Questions about this policy or your data: admin@the90code.com