Loading content, please wait…
Loading content, please wait…
What stays in your browser, what is sent when you use a form, and the choices available to you.
Updated September 8, 2026. Attachment Shift is operated by Three Teeth, Inc. Contact hello@attachmentshift.com with a privacy question or request.
The current exercises process what you type in your browser. Their answers and saved plans are not sent to an AI provider or to our application servers. A draft remains in the open page unless you choose to save it. There is no account or synchronization between devices.
Saved plans use this website’s local browser storage. That storage is not an encrypted account vault: anyone with access to the same browser profile may be able to read it. Browser settings, private browsing and clearing site data can remove it. Downloads, printouts and clipboard copies are outside the site’s storage controls.
Saved plans & your data lets you inspect, export and delete supported Attachment Shift entries in this browser, including records from earlier tools. It does not delete downloads, another browser’s data or records already sent to a server.
If you submit the newsletter form, we receive your email address, your request for Attachment Shift updates and the time of the request. We store these in Amazon Web Services (AWS). The current form does not collect an attachment profile or enroll you in another project.
Cloudflare Turnstile checks the newsletter form for abuse. The challenge involves network and device information processed by Cloudflare; its token is verified by our server. See Cloudflare’s privacy policy.
Existing unsubscribe preferences are preserved when an address is submitted again. The previous automatic welcome and drip sequence is disabled. A successful form response confirms receipt of a request, not delivery of an email. Existing newsletter records and suppression preferences have not been erased by this update.
Use a valid unsubscribe link from an earlier email or contact us to withdraw your request. Unsubscribing marks a record inactive; a suppression record may remain so the preference can be honored.
After a verified unsubscribe, a short-lived functional cookie lets the confirmation page show that the preference was recorded. It contains no email address and expires after five minutes.
The contact form sends your name, email, selected topic and message to our server for storage in AWS and review. Information you email goes through the email services involved in delivery. Share only what is needed to explain the request; avoid sending private information about someone else.
Google Analytics loads only after an analytics consent choice. If enabled, measurement uses broad page groups and a short list of actions such as starting an exercise or saving a plan. Our analytics code does not include exercise answers, scores, email addresses, incoming query strings or referral-page URLs in those events.
Google Analytics can use cookies and pseudonymous identifiers along with device and network information. It should not be understood as anonymous just because reports show totals. See Google’s privacy policy.
Use Cookie settings in the footer to decline or withdraw analytics consent. This stops the site’s future analytics events; it does not erase information already received by Google. Browser controls can remove cookies that already exist. A saved consent choice is stored in this browser.
Vercel hosts the site. Hosting and security services necessarily receive network requests and may record technical information such as IP addresses, timestamps, requested URLs and errors. Forms use abuse protections. Do not put private notes or sensitive personal information in a page URL.
Following an external link opens another service governed by its own policies. We do not transfer saved plans to the companion sites. The current site does not use exercise answers for advertising or offer an active checkout.
Local entries remain until you or your browser remove them. Server-side messages, older signup records, security records and provider backups have separate retention processes. This update does not claim that historical records have been purged or promise an automatic deletion deadline.
You can request access, correction or deletion of information you have provided, or withdraw a newsletter request, using the email above. We may need to verify that a request concerns your information. Applicable rights and exceptions depend on your location and the relevant law; we will explain any information we need or reason a request cannot be fully fulfilled.
This site is intended for adults. If you believe a child has sent personal information to us, contact us so we can investigate. We will revise this notice when the service or its data practices change.