Privacy

We collect your email address and, if you give it, your first name and the answer to one question about your wins. We use them to send the morning email, the pages you ask for, and news about the journal and the 90-day group. Nothing is sold or shared for advertising.

Emails are sent through Resend, the list and your encrypted replies are stored in Supabase, and replies are sorted by Anthropic, all under contract with Tiny Little Wins (YAF LLC, PO Box 9467, Kamas, UT 84036, United States); the site itself runs on Cloudflare. We keep your address for as long as you are subscribed. Every email carries a one-click unsubscribe; using it stops all future sends at once, and the address stays only on a suppression list so we never email it again. To have your data deleted entirely, write to hello@tinylittlewins.com; we do it within 30 days and confirm.

If you are in California or the EU, the rights those laws give you (access, correction, deletion, portability, no sale of data) apply here in full; the same address handles requests. We do not sell personal data and never have.

Your replies

The morning email asks you to reply with your step. Replies go to wins@tinylittlewins.com, which is not anyone’s mailbox. Here is exactly what happens to a reply:

• If you are not subscribed, the reply is thrown away unread.
• Your email address is turned into a one-way code. The code is saved with your reply; your address is not. Our database alone cannot connect a reply to you.
• Your reply is encrypted before it is saved. The key is kept outside the database.
• An AI model (Claude, from Anthropic) reads each reply once, to sort it: a win, a question, someone stuck, a problem, or someone in danger. It never writes to you and never writes anything we publish.
• Wins are only counted. Nobody reads them.
• If a reply needs Juan Carlos, he gets one line describing the need, with no name, address or details that point to you. He answers on a page that sends his answer to you; he never sees your address.
• If a reply sounds like you may be in danger, you get an automatic message with crisis lines right away.
• No screen in our tools shows your replies, and our logs never record what you wrote.
• Every morning email has a link to erase everything you have replied, in one click. Replies also erase themselves after 180 days.

The limits, honestly: email is not encrypted while it travels to us. Our email provider (Cloudflare) keeps a short delivery log with the sender and recipient address of every message, as every mail service does; it never holds what you wrote. The AI has to read a reply to sort it (Anthropic processes it under its commercial terms). And whoever controls our code could change it; that is why these rules are written here, and why we will update this page before changing any of them.

Cookies and counting

This site sets no advertising cookies; your browser may remember your email locally so a download is one click, and you can clear that with “Not you?” on any form.

We count visits with Cloudflare Web Analytics. It sets no cookies, does not fingerprint you, and does not follow you to other sites; it tells us which pages get read, and nothing about who read them. Visitors from the EU, the EEA, the UK and Switzerland are not counted at all. If you arrived from one of our posts, we note which platform it was (Instagram, YouTube, TikTok) next to your signup, so we know where people find us.

Last updated October 2026.