The Paramedic Playbook — Privacy Policy
Last Updated: September 10, 2026
Effective Date: September 10, 2026
The Paramedic Playbook is owned and operated by Robert Prest in Ontario, Canada.
Privacy contact:
Robert Prest
theparamedicplaybook@gmail.com
+1 (647) 831-6152
Purpose
This Privacy Policy explains how personal information may be collected, used, stored, disclosed, protected, and deleted when users access the website, create an account, purchase access, use private notes, or communicate with the service.
Accountability
Robert Prest is the person responsible for privacy matters for The Paramedic Playbook.
Information That May Be Collected
Account and profile information may include:
- email address
- first and last name
- professional role
- organization type
- school, service, or organization affiliation
- account and user identifiers
- account creation and update timestamps
- account, membership, and access status
- beta-tester status and beta-invitation redemption status
- authentication, email-confirmation, session, and account-security information processed through Supabase
- versions, dates, and event types associated with legal acknowledgements
- marketing-consent choices and related timestamps
Saved-content information may include the identifiers and titles of directives saved to an account and the dates they were saved.
Private-note information may include note text, the associated directive, account identifier, creation and modification timestamps, and the date on which qualifying access ended, where applicable.
Payment and subscription information may include the selected plan, access or entitlement type, transaction amount and currency, payment and refund status, dispute status, subscription status, trial and billing-period dates, Checkout status, and Stripe customer, Checkout Session, subscription, invoice, PaymentIntent, Charge, price, refund, dispute, and webhook-event identifiers.
Stripe Checkout requires a billing address. Stripe processes and stores that address on the Stripe Customer record for payment administration, billing, fraud prevention, and possible future tax handling. The billing address is not currently copied into The Paramedic Playbook’s Supabase profile tables.
Full card numbers, card security codes/CVCs, and equivalent payment credentials are entered on Stripe’s hosted Checkout page. The Paramedic Playbook does not receive or store full card numbers or CVCs. Stripe may provide limited non-sensitive payment-method details and transaction records through its services.
Technical and security information processed in operating the service may include authentication tokens and session information, request IP addresses and headers, browser or device information contained in service logs, and security or error records maintained by the hosting, authentication, payment, or email providers. The pharmacology issue-report endpoint also uses an IP address temporarily for short-term rate limiting without storing that address in the application database.
The application does not currently store quiz results or learning-progress results in Supabase.
Information Not Intended for Collection
The site is not designed to collect patient records, personal health information, health card numbers, patient names, call/incident numbers, clinical charts, confidential employer records, or children’s account data.
Uses of Information
Information may be used for account creation and authentication; email confirmation and essential service communications; administering memberships, subscriptions, payments, refunds, disputes, and paid access; administering beta invitations and beta access; saving directives and providing private notes; understanding the professional and educational audience; improving and supporting the service; cancellation and plan changes; security, fraud prevention, rate limiting, and account-sharing enforcement; maintaining legal acceptance and marketing-consent records; error diagnosis; complying with legal, tax, accounting, and transaction-record obligations; and responding to privacy requests.
Billing addresses collected by Stripe are used for payment and billing administration, payment verification and fraud prevention, and to preserve country and province information that may be required for future tax handling. Collecting a billing address does not mean that Stripe Tax is currently enabled.
Professional role and organization information is not presented as independently verified professional credentialing. The site does not currently load an analytics provider.
Consent
Required service processing is separate from optional marketing processing. Marketing consent is separate from account creation and required legal acknowledgements. The site provides an analytics preference control, but no analytics provider is currently loaded.
Marketing
Marketing is optional. Paid users are not automatically subscribed, and marketing messages must provide an unsubscribe method. Essential service messages may still be sent for receipts, account or payment notices, password resets, security, subscription changes, legal notices, or major service changes.
Launch and Platform Update Email List
If you choose to join The Paramedic Playbook launch list, we collect the email address you provide so we can notify you when the platform launches and send occasional platform updates. We record the date and version of the consent language associated with your signup.
We use service providers, including Supabase for data storage and Resend for email delivery, to support this functionality.
You may withdraw your consent at any time using the unsubscribe mechanism provided in our emails or by contacting us.
We retain your email address for these purposes until you unsubscribe or the information is no longer required for the purposes for which it was collected, subject to any applicable legal retention requirements.
Cookies and Browser Storage
Essential functionality may use cookies or browser storage for authentication, security, session management, paid-access enforcement, required browser acknowledgment, and core website operation.
The browser stores the user’s privacy-control acknowledgement and analytics preference in local storage. Users may revisit Privacy / Cookie Settings from the footer. No analytics provider is currently loaded, and the site does not currently use advertising pixels or behavioural advertising tracking.
Payments
Payments are processed using Stripe. When a user begins Checkout, The Paramedic Playbook creates or uses a Stripe Customer and redirects the user to a Stripe-hosted Checkout page.
Stripe collects and processes the billing address, payment-card information, and other information required to complete and administer the transaction. Checkout is configured to require a billing address and to save that address to the existing Stripe Customer record. This preserves country and province information for billing administration, fraud prevention, and possible future tax handling. Stripe Tax is not currently enabled by this configuration.
Full card numbers and CVCs are entered directly into Stripe’s hosted payment interface. The Paramedic Playbook does not receive or store full card numbers or CVCs. The application stores transaction and subscription records such as plan, amount, currency, status, relevant dates, refund or dispute state, and Stripe-generated identifiers.
Service Providers
The Paramedic Playbook currently uses:
- Supabase for account authentication, session management, email/password account services, the Postgres database, row-level access controls, and related platform logs and backups;
- Stripe for hosted Checkout, billing-address collection, Customer records, payments, subscriptions, invoices, refunds, disputes, fraud prevention, and billing administration;
- Vercel for website hosting, server execution, network delivery, and operational request or deployment logs; and
- Resend for delivery of transactional and account-related email, including authentication/confirmation email sent through the configured Supabase email setup, launch and occasional platform-update emails, and transmission of pharmacology issue-report emails and their message content where applicable.
These providers process information on behalf of The Paramedic Playbook or in accordance with their own applicable legal roles and privacy terms. They receive only the information needed for the services they provide. No analytics provider is currently configured by the application.
International Processing
Service providers may process or store information outside Canada. Information handled outside Canada may be subject to the laws of the jurisdiction where it is processed.
No Sale
The Paramedic Playbook does not sell users’ personal information and does not intend to provide it to third parties for those third parties’ independent advertising purposes.
Private Notes
Private notes remain owned by the user. The service receives only the limited rights needed to store, process, retrieve, display, protect, and, where applicable through its service providers, back up notes for the user. Private notes are not used for advertising.
Private notes are intended for personal study only. Users must not enter patient-identifying information, personal health information, confidential employer information, incident numbers, health card numbers, patient names, dates of birth, addresses, or other confidential clinical information. The Paramedic Playbook is not a patient chart, electronic medical record, or secure clinical-documentation system.
Security
Reasonable administrative, technical, and access-control safeguards are used for the current technology stack. These include Stripe-hosted payment entry, Supabase authentication, row-level security for user-owned application data, restricted service-role access for billing records, and signature verification for Stripe webhooks. Passwords are handled by Supabase Auth and are not stored in plaintext by The Paramedic Playbook. No internet service or storage system can promise absolute security.
Retention
Active account information, saved directives, and private notes may be retained while the account remains active.
When qualifying paid access ends, the application records an access-ended date on existing directive notes. A scheduled database process permanently deletes those notes after approximately 90 days. If qualifying paid access resumes before deletion, the access-ended date is cleared and the notes are preserved.
When a user deletes an account through the site, the implementation deletes the Supabase Auth user and associated profile, saved directives, directive notes, legal-acceptance records, marketing-consent records, and Checkout-attempt record through database relationships. Applicable active Stripe subscriptions are cancelled.
Limited billing and transaction records are deliberately retained after account deletion where needed for transaction integrity, accounting, taxation, refunds, disputes, fraud prevention, webhook deduplication, and legal obligations. These records may include Stripe-generated transaction identifiers, amounts, currency, payment/refund/dispute states, event records, the former application user identifier, and a billing-deletion record containing Stripe customer and subscription identifiers. They are marked or treated as belonging to a deleted account and are not presented as an active user profile.
Deleting a Paramedic Playbook account does not itself delete records that Stripe is independently required or permitted to retain. Retention by Stripe, Supabase, Vercel, and Resend is also governed by their applicable terms, legal obligations, and retention practices.
Access, Correction, and Deletion
Users may contact theparamedicplaybook@gmail.com to request access, correction, eligible deletion, privacy information, or complaint review. Reasonable identity verification may be required.
Privacy Incidents
Security and privacy incidents will be investigated. Affected individuals or regulators will be notified when required by applicable law.
Adults Only
Accounts and paid access are restricted to persons 18 years of age or older.
International Users
The website is operated from Ontario and is primarily Ontario/Canada focused, but it may be accessed elsewhere. Users outside Ontario are responsible for determining whether the service is appropriate for them.
Changes
Material Privacy Policy changes may require notice and, where appropriate, new consent or acknowledgment.
Contact
The Paramedic Playbook
Robert Prest
Ontario, Canada
theparamedicplaybook@gmail.com
+1 (647) 831-6152