Privacy Policy

Last updated: October 25, 2026

Mastering Fiction is operated by Twiddler Inc., based in British Columbia, Canada. This policy explains how we handle personal information on our websites, at checkout, and in the Guided Copywork App.

For privacy questions or requests, contact our privacy contact at teng@masteringfiction.com.

Information we collect

• Your account and purchases: your name, email address, the courses you can access, order references, and payment, refund, and subscription status. Our checkout and payment providers handle payment details. We do not store your full payment-card number in the course app.
• Your course activity: lesson progress, saved copywork, assignment attempts, and account preferences. Saving your work lets you return to it on another visit or device.
• Messages you send us: support questions, feedback, and the information you choose to include.
• Technical information: IP addresses, browser and device information, request times, and security or error logs. Our email services may record delivery, bounce, opening, and link-click information, depending on the message and service settings.
• Advertising information: on pages where advertising tracking is enabled, referral details, campaign parameters, and interactions such as page views and checkout-link clicks. More about this is below.

How we use it

We use this information to deliver purchases, provide sign-in links, save course progress, manage subscriptions and refunds, respond to you, maintain our services, and investigate errors, fraud, or misuse. Purchase notifications from our checkout connect your purchase to the correct courses in the app.

We send course and account emails needed to provide the service. We also use email for newsletters and offers where you have subscribed or another lawful basis permits it. You can unsubscribe from marketing using the link in those emails. Unsubscribing from marketing does not close your account or cancel a subscription.

Service providers and sharing

We use other companies to run specific parts of the service. These include DigitalOcean for hosting and backups, ThriveCart and its connected payment processors for checkout and billing, Resend for app emails, and Kit (formerly ConvertKit) for course emails and newsletters. Podia and Zapier also support parts of our existing website, course delivery, and purchase automations during our transition to the app.

Providers receive the information needed for their role. For example, an email provider needs your email address to deliver a message, and the app needs purchase details to grant course access. Payment providers and advertising platforms also process information under their own privacy policies.

We do not sell student account details or saved copywork. We may disclose information when required by law, to respond to a valid legal request, or when reasonably necessary to protect people, accounts, or our services. Advertising disclosures described below are separate from operating your student account.

Cookies and advertising

The app uses cookies to keep you signed in and protect forms. A persistent sign-in cookie lets you return without requesting an email each time. Use Logout on a shared device. Clearing or blocking essential cookies may sign you out or stop parts of the app from working.

Our sales pages use browser storage to retain campaign and referral parameters and pass them to checkout. The Meta Pixel and Conversions API send page views and checkout-link clicks to Meta, through your browser and our server, to measure advertising and help deliver relevant ads. Matching event IDs let Meta recognize these as the same action. Events can include the page address, IP address, browser details, and Meta browser or advertising-click identifiers. Meta may associate them with your Meta account. These events do not contain your saved copywork or course-account details.

Server-side events wait briefly in an encrypted delivery queue. The event details are removed from that queue after successful delivery, or within 24 hours if delivery fails. Limited delivery and duplicate-prevention records are kept for up to 48 hours. Checkout and purchase tracking is handled separately by ThriveCart.

Our public website and checkout use Meta tracking to measure advertising results. We also use the OpenAI Measurement Pixel on the sales website and the Masterclass checkout funnel to measure page views, checkout starts, and completed orders. OpenAI receives browser and advertising-click identifiers and event information; a completed-order event includes an order reference, total, and currency. Its automatic advanced matching may detect supported contact details entered at checkout and hash them in the browser before transmission. Our OpenAI integration does not send saved copywork or student activity. The course app is separate from the sales website.

OpenAI measurement respects the advertising opt-out below, Global Privacy Control, and Do Not Track on both our sales website and our Masterclass checkout. The OpenAI Pixel uses first-party cookies, including __oppref (up to 30 days) and __obref (up to 365 days), subject to browser restrictions. Turning tracking off stops future OpenAI events; it does not remove previously sent information. See OpenAI’s privacy policy for how OpenAI handles information.

You can turn off advertising tracking on our sales website in this browser using the button below. We also respect Global Privacy Control and Do Not Track signals on this website. Your choice stops future Pixel and Conversions API events from our sales pages. Checkout providers have their own privacy controls. You can also manage cookies in your browser and advertising preferences in your Meta account. These controls do not remove information already sent. Where applicable law requires consent for optional tracking, that requirement applies independently of this policy.

Unsubscribing from email does not change your advertising preferences or cancel your course access.

Where information is processed

We operate in Canada, but our servers and service providers may process or store information in the United States and other countries. The course app and WordPress servers are hosted in the United States. Information processed outside your country may be subject to local laws and lawful access by authorities there.

Retention and account deletion

We keep account and course records while they are needed to provide your access, including ongoing access to one-time purchases. Other information is retained as needed for support, security, accounting, dispute resolution, and legal obligations. We do not use one fixed retention period for every type of record.

You can request deletion from the app's Settings or contact us. The app requires a recent sign-in and confirmation. It attempts to cancel connected active subscriptions before deleting an account; if cancellation cannot be confirmed, it asks you to resolve billing first. Deleting an account removes its app access and saved work. It does not automatically erase purchase records held by the checkout or payment providers, or remove you from separate marketing lists.

A limited, keyed fingerprint of a deleted email address is retained to prevent delayed purchase notifications from recreating a deleted account. Backup copies may persist until their normal rotation removes them. Records that must be retained for legal, tax, security, or dispute purposes are not removed simply because an account is deleted.

Security

We use safeguards such as encrypted connections, access controls, private storage for lesson resources, and restricted administration. Sign-in emails contain short-lived, single-use links. No website or email service can guarantee complete security. Keep access to your email account secure and do not forward sign-in links.

Your privacy choices and rights

You can ask us to explain how we use your information, provide access to it, correct an error, or consider a deletion or consent-withdrawal request. Some information is necessary to provide course access or process a transaction, and withdrawing consent may affect those services. We may need to verify your identity before handling a request. Any refusal or limitation will be explained as required by applicable law.

Contact teng@masteringfiction.com first if you have a concern. You may also contact the Office of the Information and Privacy Commissioner for British Columbia or another privacy authority with jurisdiction. Additional rights may apply where you live.

Children and changes to this policy

Our services are intended for adult purchasers, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information without appropriate permission.

We will update the date above when this policy changes. Where a change requires notice or new consent, we will provide it as required. A revised policy does not by itself authorize a new use of your information that requires consent.