Privacy information

Privacy Policy

Effective: 22 August 2026

This policy describes the information used by the Growth System Labs website and its current checkout, attribution, lead-capture, entitlement, and digital-delivery systems.

Information you submit

• If you request the free starter pack, the site receives the email address you submit and the source of that form.
• If you contact support through Telegram, Telegram and Growth System Labs receive the information included in your message.
• When you pay, PayPal receives the payment and account details required to process the transaction.

Purchase and delivery records

The site stores operational purchase data needed to verify payment and provide the paid PDF. This can include PayPal order and capture identifiers, product identifier, amount, currency, payment and refund state, attribution source, entitlement identifier, delivery state, and operational timestamps.

Growth System Labs does not collect or store your complete payment-card number. PayPal handles payment details under PayPal's own privacy terms.

Attribution, analytics, and browser storage

The site records campaign attribution such as source and UTM source, medium, and campaign. The attribution route sets a secure, HTTP-only, same-site cookie named gsl_attribution with a one-hour lifetime. A secure, HTTP-only, same-site cookie named gsl_session lasts for up to 30 minutes and lets the site count page views and browser sessions separately without fingerprinting a person. The server stores a one-way hash of that session value together with the route, event time, campaign attribution, referring origin, and whether a real checkout was started. After a paid order is verified, the thank-you flow may set a secure, HTTP-only, same-site cookie named gsl_delivery_token for up to 72 hours so the protected PDF can be delivered without exposing the entitlement token to page scripts.

Some public pages load Google Analytics. The free starter-pack page also loads Meta Pixel. These scripts load on the applicable pages unless they are blocked by browser settings, privacy tools, or network controls; the current site does not implement a separate analytics-consent control. These services may receive device, browser, page, referrer, and interaction information under their own terms and privacy practices.

The free starter-pack flow uses browser local storage to remember access state, the submitted email address, and whether the free file was downloaded. You can clear this data through your browser settings.

Operational and security information

The site and its hosting or database providers may process IP address, user agent, referrer, request time, route, status, error, and security-log information needed to operate, troubleshoot, and protect the service. The lead-capture route records the submitted email, source, timestamp, user agent, and referrer, and may forward the lead to a configured operational lead webhook.

Service providers

The current system uses PayPal for payment processing, Vercel for website and serverless hosting, Turso/libSQL for durable operational data, Google Analytics for website analytics, Meta Pixel on the free starter-pack page, and Telegram for the public support route. Each provider processes information under its own terms and privacy practices.

How information is used

Information is used to operate the website, process and verify purchases, prevent duplicate payment handling, issue and validate download access, deliver the PDFs, measure page views, sessions, checkout starts and campaign attribution, respond to support and refund requests, maintain security, and understand site use.

Retention

Growth System Labs keeps operational records for as long as reasonably necessary for payment reconciliation, entitlement and delivery support, fraud prevention, accounting, disputes, security, and applicable legal obligations. No shorter fixed public retention period is asserted because the current system does not define one.

Your choices and requests

You can clear browser cookies and local storage using your browser controls. You may also ask about the information associated with your purchase, starter-pack request, or support interaction by using the verified support route. Instructions for requesting deletion of data associated with the Pixel Office GSL Analytics integration are available on the User Data Deletion page. Some records may need to be retained for payment, security, dispute, or legal reasons.