Privacy Policy

Last updated 22 September 2026

Felony Workout is run by Monster Enterprises LLC. This page explains what we collect and what we do with it. The short version: we collect as little as we can, and we don't sell anything about you.

What we collect

• Your email address, if you buy a Commissary Pass. Stripe collects it at checkout and passes it to us so we can confirm your purchase and send you a sign-in link if you lose access.
• Payment details go to Stripe, not to us. We never see or store your card number.
• A pass cookie. After you buy, your browser holds a signed cookie that tells our server you've paid. It contains your email address and an expiry date, and nothing else. It lasts a year.
• Settings kept in your browser. Your chosen workout options, light or dark mode, and whether you've used your free session stay on your device and are never sent to us.
• Ordinary server logs. Our web server records requests, with IP address, time, page and browser. We use them to keep the site running and to spot abuse.
• The address a pass was used from. When a pass is bought, a free pass is taken, you sign in, or a workout is started, we store your email address with the internet (IP) address the request came from. We use it for one thing: to tell whether a single pass is being shared around. It is never used to decide whether to let you in, so changing network, travelling or switching between phone and laptop will never lock you out. We delete these IP addresses after 90 days.

What we don't do

We don't sell or rent your information. We don't run advertising trackers, and there are no social media pixels on this site.

We do use PostHog to count visits and see which parts of the site people actually use, so we know what to build next. It records the pages you open and what you click, along with your browser, rough location from your IP address, and a random id kept in your browser. Your email address is deliberately excluded: the fields you type one into are marked so it is never collected. If your browser sends a Do Not Track signal, we don't record you at all. PostHog is a service provider to us and does not sell your data.

Who else touches your data

• Stripe processes payments and holds the record of who bought a pass.
• PostHog counts visits and records which parts of the site get used.
• Microsoft Azure hosts the site and sends our emails.

Both act as our service providers. We share your data with them only to run the site, and we'll also disclose data if the law requires it.

How long we keep it

Purchase records stay in Stripe for as long as the law requires us to keep business records. Server logs are kept for a short period. IP addresses recorded against a pass are deleted after 90 days, while the record that the pass was used stays. Ask us to delete your email address and we'll do it, though that also ends your ability to restore your pass on a new device.

Your choices

Use the contact form to see, correct or delete what we hold about you. You can clear the pass cookie any time in your browser settings, and delete stored settings by clearing site data.

Children

This site is for adults, and we don't knowingly collect anything from anyone under 18.

Contact

Use the contact form. We answer within one business day.