What we keep, and why
Short version: your email, your progress, and whether your subscription is paid. No trackers, no advertising, nothing sold on.
Who is responsible
Zero2Profitable, run by SunCtrades from the Netherlands, decides what happens to your data and is the controller under the GDPR. Questions, requests and complaints go to support@zero2profitable.com.
What we store
Your account. Your email address and a one-way hash of your password. We cannot read your password, only check it. Optionally a display name, if you set one.
Your progress. Which skills you have ticked off and when. This is what produces your XP and rank.
Your membership. Whether your subscription is trialing, active, overdue or cancelled, when the current period ends, and the membership identifier and billing link that Whop gave us.
Not your card. Payment happens on Whop’s own pages. Your card number never touches our servers and we never see it.
No tracking
There is no analytics script, no advertising pixel and no third-party tracker on this site. The only cookie we set is the one that keeps you logged in, which is why there is no cookie banner to click away: a cookie strictly needed to deliver a service you asked for does not require consent.
Our hosting provider keeps short-lived technical logs of requests, including IP addresses, to keep the site running and to stop abuse.
Why we are allowed to
Almost all of it is because we have a contract with you: we cannot give you an account, remember your progress, or take payment without it. Keeping records of payments is a legal obligation: Dutch tax law requires us to keep them for seven years. Preventing abuse of the site is our legitimate interest.
Who else touches it
Two companies process data on our behalf, each under a processing agreement: Supabase stores your account and progress, and Vercel runs the website itself.
Whop handles payments and memberships. For that it is not our processor but a controller in its own right: Whop and we each decide for our own part, under Whop’s data sharing terms with sellers. Whop shares with us what we need to run your membership, such as your name, email address and purchase history. If you join our Discord, you link your Discord account through Whop, and Discord handles it under its own privacy policy.
Your account database is hosted in the European Union, in Frankfurt, Germany. Vercel may process data outside the European Economic Area, which it covers with the European Commission’s standard contractual clauses. Whop, Inc. is based in the United States and works with service providers around the world; it covers transfers of personal data out of the European Economic Area with the standard contractual clauses approved by the European Commission. See Whop’s privacy policy.
We do not sell your data and we do not share it for advertising.
How long
Your account and progress stay for as long as you have an account. That is deliberate, so a cancelled member can come back years later and pick up where they left off. Ask us to delete your account and it goes, along with your progress. Payment records stay the seven years the tax authority requires, separately from your account.
Your rights
You can ask to see what we hold, to correct it, to delete it, to get a copy in a portable form, or to object to how we use it. Email support@zero2profitable.com and we will answer within a month. If you think we have handled your data badly, you can complain to the Autoriteit Persoonsgegevens.