Privacy Policy
Last updated September 23, 2026
This policy explains how Charlie Labs, Inc. (“Charlie Labs”, “we”, “us”) collects, uses and shares information when you use GotSmarty (the “Service”). We designed GotSmarty to work without accounts and to collect as little personal information as possible.
Information we collect
| What | Details |
|---|---|
| Assessment activity | Your answers, how long each took, your scores, and a random attempt ID. These are stored in your browser while you take the test and sent to us to calculate results. |
| Purchase information | When you buy a report, Stripe collects your email address and payment details. We receive your email, the amount, and the purchase record. We never receive your full card number. |
| Device and usage data | Browser and device type, pages viewed, approximate location derived from IP address, the ad or link that brought you here, and similar technical information. |
| Advertising identifiers | Identifiers set by the Meta Pixel (such as the _fbp and _fbc cookies), the click ID from a Meta ad, and the Google Analytics client ID. |
| What you choose to share | If you create a challenge link, the score, categories and optional first name you choose to include. |
| Messages to us | Anything you send when you email us, such as a refund or support request. |
We do not ask for, and ask you not to send us, sensitive information such as health, financial-account or government ID details.
How we use information
- To score your assessment, deliver your report and process your purchase and any refund.
- To create share images and challenge links you request.
- To understand how the Service is used, test changes (including prices) and improve questions and scoring.
- To measure the performance of our advertising and show ads to people likely to be interested.
- To prevent fraud and abuse, keep the Service secure, and comply with legal obligations.
How we share information
We share information only with the service providers that run the Service, and as described below:
- Stripe — payment processing and receipts.
- Vercel — website hosting.
- PostHog — product analytics.
- Google Analytics — website analytics (pages viewed, events such as starting a test or checking out, device and approximate location). We have turned off Google signals and ad personalization, so this data is not used for Google advertising.
- Meta Platforms — advertising measurement. Through the Meta Pixel and Conversions API we send page and purchase events, the identifiers above and, for purchases, a hashed (encoded) version of your receipt email. Meta may use this to measure and target ads.
- Authorities or others when required by law, to protect rights and safety, or as part of a merger, acquisition or sale of assets.
We do not sell personal information for money. Sharing information with Meta for advertising may count as “selling” or “sharing” for cross-context behavioral advertising under some U.S. state laws. You can opt out at any time on our Your Privacy Choices page, and we honor Global Privacy Control (GPC) browser signals as an opt-out.
Cookies and similar technologies
We use your browser’s local storage to save your progress and remember reports you’ve unlocked on this device. Google Analytics sets analytics cookies (such as _ga) to count visits. The Meta Pixel sets advertising cookies unless you have opted out. You can clear these at any time in your browser settings; clearing local storage will reset any test in progress.
How long we keep information
- Progress in your browser stays until you clear it or start over.
- Analytics events are kept for up to 24 months.
- Purchase records are kept as long as needed for tax, accounting and legal purposes, typically seven years.
- Support emails are kept for up to 24 months after the issue is resolved.
Your rights and choices
Depending on where you live, you may have the right to know what personal information we hold about you, get a copy of it, correct it, delete it, and opt out of targeted advertising or the “sale” or “sharing” of personal information. We will not discriminate against you for using these rights.
To make a request, email mike@getcharlie.co. Because we don’t have accounts, include the email you used at checkout (or your report link) so we can find and verify your records. You may use an authorized agent; we may ask the agent for proof of authorization. If we deny your request, you may appeal by replying to our decision, and we will respond within the time the law requires.
Children
GotSmarty is intended for adults aged 18 and over. We do not knowingly collect personal information from children under 13. If you believe a child has used the Service, contact us and we will delete the information.
Security
We use encryption in transit, signed links and reputable providers to protect information. No system is perfectly secure, so we cannot guarantee absolute security.
Where we operate
The Service is intended for people in the United States, and information is processed in the United States.
Changes
We will post any changes here and update the date at the top. If changes are material, we will highlight them on the Service before they take effect.
Contact
Charlie Labs, Inc.
mike@getcharlie.co