Loading this page…
The page is on its way.
Loading this page…
The page is on its way.
What stays in your browser, what is sent when you use a form, and the choices available to you.
Updated October 12, 2026. Attachment Shift is operated by Three Teeth, Inc. Contact hello@attachmentshift.com with a privacy question or request.
The attachment style quiz calculates its scores in this open browser page. Answers and results are not sent to our application servers or an AI provider, and the site does not save them in browser storage. Refreshing or leaving the quiz clears its answers. Quiz pages are excluded from optional analytics and session replay. No account or email address is required.
The current exercises process what you type in your browser. Their answers and saved plans are not sent to an AI provider or to our application servers. A draft remains in the open page unless you choose to save it. There is no account or synchronization between devices.
Saved plans use this website’s local browser storage. That storage is not an encrypted account vault: anyone with access to the same browser profile may be able to read it. Browser settings, private browsing and clearing site data can remove it. Downloads, printouts and clipboard copies are outside the site’s storage controls.
Saved plans & your data lets you inspect, export and delete supported Attachment Shift entries in this browser, including records from earlier tools. It does not delete downloads, another browser’s data or records already sent to a server.
If you submit the newsletter form, we receive your email address, your request for Attachment Shift updates and the time of the request. We store these in Amazon Web Services (AWS). The current form does not collect an attachment profile or enroll you in another project.
Cloudflare Turnstile checks the newsletter form for abuse. The challenge involves network and device information processed by Cloudflare; its token is verified by our server. See Cloudflare’s privacy policy.
Existing unsubscribe preferences are preserved when an address is submitted again. The previous automatic welcome and drip sequence is disabled. A successful form response confirms receipt of a request, not delivery of an email. Existing newsletter records and suppression preferences have not been erased by this update.
Use a valid unsubscribe link from an earlier email or contact us to withdraw your request. Unsubscribing marks a record inactive; a suppression record may remain so the preference can be honored.
After a verified unsubscribe, a short-lived functional cookie lets the confirmation page show that the preference was recorded. It contains no email address and expires after five minutes.
The contact form sends your name, email, selected topic and message to our server for storage in AWS and review. Information you email goes through the email services involved in delivery. Share only what is needed to explain the request; avoid sending private information about someone else.
When purchasing is enabled, Stripe hosts checkout and processes the payment information you enter there. Our server creates the checkout session and checks the payment status, amount, product and refund or dispute status before serving a download. Exercise answers and workbook notes are not included in those requests. See Stripe’s privacy policy.
Necessary, signed, HttpOnly cookies bind checkout attempts and verified access to this browser. Pending access expires after 48 hours; verified download access expires after 24 hours. They contain order and payment-session references, not card details or your writing. Payment records remain with Stripe under its applicable retention requirements. No automatic delivery email or cross-device account is created.
The workbook offer, sample, receipt and download routes are excluded from optional analytics and replay. The downloaded HTML file processes notes locally and has no analytics, network calls or built-in note storage. Browser features may restore form text; copies and printouts are yours to protect.
Google Analytics loads only after an analytics consent choice. If enabled, measurement uses broad page groups and a short list of actions such as starting an exercise or saving a plan. Our analytics code does not include exercise answers, scores, email addresses, incoming query strings or referral-page URLs in those events.
Google Analytics can use cookies and pseudonymous identifiers along with device and network information. It should not be understood as anonymous just because reports show totals. See Google’s privacy policy.
With a new optional-tracking choice, Microsoft Clarity provides masked session replay and heatmaps on selected public pages. Page text is masked. Exercises, journeys, quizzes, results, search and forms are excluded, as are visits with query strings or unapproved referrers. We do not attach personal identifiers or custom events to Clarity. Microsoft processes device and network information and generated pseudonymous identifiers, using first-party cookies after consent. Advertising consent stays denied. See Microsoft’s privacy statement.
We respect Global Privacy Control. An earlier Google Analytics-only acceptance does not authorize replay. If a choice cannot be saved, optional tracking stays off for that page; a previously saved choice may apply after navigation. The controls show an error and let you retry.
Use Cookie settings in the footer to decline or withdraw analytics consent. This stops new analytics events and replay capture. New Clarity uploads from the page are blocked; requests already in transit may finish. Withdrawal does not erase information already received by either provider. Browser controls can remove cookies that already exist. A saved consent choice is stored in this browser.
Vercel hosts the site. Hosting and security services necessarily receive network requests and may record technical information such as IP addresses, timestamps, requested URLs and errors. Forms use abuse protections. Do not put private notes or sensitive personal information in a page URL.
Following an external link opens another service governed by its own policies. We do not transfer saved plans to the companion sites. The site does not use exercise answers for advertising. Workbook purchase availability is shown on its offer page.
Local entries remain until you or your browser remove them. Server-side messages, older signup records, security records and provider backups have separate retention processes. This update does not claim that historical records have been purged or promise an automatic deletion deadline.
You can request access, correction or deletion of information you have provided, or withdraw a newsletter request, using the email above. We may need to verify that a request concerns your information. Applicable rights and exceptions depend on your location and the relevant law; we will explain any information we need or reason a request cannot be fully fulfilled.
This site is intended for adults. If you believe a child has sent personal information to us, contact us so we can investigate. We will revise this notice when the service or its data practices change.