Privacy Policy

What we collect, why, who helps us, and how to ask us to stop.

This policy describes how AWFixer, LLC (“AWFixer”, “we”, “us”) handles personal information on theautist.me (the “Site”). It applies to the public site, accounts, memberships, and the newsletter. Effective 17 September 2026.

Who we are

The Site is a writing and membership space for The Autist. The controller of personal data for your account, newsletter, and site analytics is AWFixer, LLC. Contact: hello@theautist.me.

What we collect

  • Account: name, email, and passkey credentials stored by our auth provider (Supabase). We do not store passwords.
  • Session: a signed cookie so you stay signed in.
  • Newsletter: email address if you subscribe, plus unsubscribe and delivery events.
  • Membership: plan, Stripe customer and subscription identifiers, and invoice history. We do not store full card numbers.
  • Contact form: name, email, and message.
  • Usage: pages and events via PostHog (IP truncated where the tool allows, device/browser, referrer). Signed-in identity is the Supabase user id so analytics, flags, experiments, and support tickets stay on one person.
  • Support: optional in-app chat widget (PostHog Support). Messages, a name/email if you give them, and session context so we can answer.
  • Technical logs: request metadata needed to run and debug the Site (Fly.io, application logs).

Why we use it

To run the Site, sign you in with a passkey, send the newsletter you asked for, process memberships, answer mail you send us, keep the service secure, and understand what is (and isn’t) working. We do not sell personal information. We do not use your content or inbox to train third-party AI models.

Processors we use

We use specialists. Each is bound by their own terms and, where required, a data processing agreement with us:

  • Fly.io — application hosting.
  • Supabase — Postgres database and Auth (passkeys).
  • Stripe — payments and billing.
  • Resend — transactional and newsletter email (from newsletter@theautist.me and related addresses).
  • PostHog — product analytics, feature flags, experiments, session replay, error tracking, and the support widget.

Cookies and similar tech

We set a signed session cookie required to keep you logged in. Analytics may set its own cookies or local storage. You can block non-essential cookies in your browser; the Site will still load, but sign-in needs the session cookie.

How long we keep it

Account data lasts for as long as the account exists. Newsletter data lasts until you unsubscribe, plus a short period so we do not accidentally re-add you. Billing records are kept as long as tax and payment rules require. Logs are rotated. Contact messages are kept long enough to reply, then deleted or archived.

Your choices

You can update your profile from the dashboard, unsubscribe from every newsletter, and cancel a membership. To export or delete your account, email hello@theautist.me. If you are in a region with extra rights (access, correction, erasure, restriction, portability, objection), we will honor a verifiable request. You may also complain to your local data protection authority.

Children

The Site is not directed at children under 16. If we learn we collected information from a child, we will delete it.

International transfers

We and several processors are in the United States. If you use the Site from elsewhere, your information is transferred to the US. Where a transfer tool is required, we rely on the processor’s published mechanism (for example, standard contractual clauses).

Changes

If we change this policy in a material way, we will update this page and the effective date. Keep reading it if you care about the details.