Last updated 22 October 2026

Privacy policy

I collect only the personal data I need to run my programs and events, and I treat it with care. This page explains what I collect, why, who else processes it, and what you can ask me to do with it.

Who is responsible

For every privacy question, write to the address above.

What I collect and why

Joining Alive Together

Your name, your email address and, if you tick the box, your newsletter consent. I use this to give you access to the WhatsApp community, to send you a welcome email and information about the community and the Mastermind Cohort Sprints. Legal basis: the free membership you request (Art. 6(1)(b) GDPR) and, for the newsletter, your consent (Art. 6(1)(a) GDPR).

Applying for a Mastermind Cohort Sprint or for Inspiration Days

Your name, your email address and your answers in the application form, for example what you are building, your stage, your goals and how alive you feel. I use this to review your application, to put together groups that fit, and to contact you about next steps. Legal basis: steps you request before a contract (Art. 6(1)(b) GDPR).

Booking and paying

If you buy a ticket or a sprint, I keep your contact and billing details and the proof of payment. Card details go directly to the payment provider and never reach me. Legal basis: the contract (Art. 6(1)(b) GDPR) and legal bookkeeping obligations (Art. 6(1)(c) GDPR).

Newsletter

Your email address and name, after you confirm your subscription by clicking the link in the confirmation email. You can unsubscribe at any time with the link at the bottom of every email. Legal basis: your consent (Art. 6(1)(a) GDPR).

Enquiries

If you write to me or use the enquiry form, I use your details to answer you. Legal basis: my legitimate interest in answering enquiries and, where relevant, steps before a contract (Art. 6(1)(b) and (f) GDPR).

At events

For Inspiration Days I may also ask for dietary needs and for an emergency contact, and only so that the event runs safely and well. If we offer measurements such as heart rate variability, participation is voluntary and I ask for your separate, explicit consent on the spot, because this is health data (Art. 9(2)(a) GDPR). Photos and film may be taken at events. You can tell me at any time that you do not want to appear in them.

Playing Founders & Unicorns online

You can play the game without an account. Your game statistics are then stored only in your own browser and never reach me.

If you create an account, I store your email address, the name, character and bio you choose for your profile, whether your profile is public, and the results of the games you finish (for example placement, net worth and exits). I use this to sign you in with a code sent to your email address, to keep your statistics on every device, and to show your profile to other players if you make it public. Your email address is never shown to other players. Legal basis: the account you request (Art. 6(1)(b) GDPR).

If you tick the box for news about the game, I add your email address to a MailerLite list for updates and the official launch. Because you confirm your address with the sign-in code, no separate confirmation email is needed. You can turn this off in your profile or with the link in every email. Legal basis: your consent (Art. 6(1)(a) GDPR).

If you use "Help me write it" for your bio, your name and your three answers are sent to Anthropic to write a suggestion. Nothing else is sent, and you decide whether to keep the text.

You can delete your account in your profile at any time. This deletes your profile and all games stored with it.

Server logs and spam protection

When you visit this website, the hosting provider processes technical data such as your IP address, browser and the page you requested, to deliver the site, to keep it secure and to limit how often a form can be sent from one connection. Legal basis: legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

Who else processes your data

I use a small number of services that process data on my behalf:

• Vercel (USA): website hosting, forms and spam protection.
• MailerLite (EU): email list, newsletter and automated emails.
• Resend (USA): short transactional emails, for example the newsletter confirmation, sign-in codes for the game and notifications to me.
• Cloudflare (USA): the game server of Founders & Unicorns and its account database.
• Anthropic (USA): writes a bio suggestion, only when you ask for it in the game.
• Notion (USA): reviewing applications.
• Stripe (Ireland / USA): payments.
• Google Workspace (USA): email and calendar, including appointment booking for calls.
• Zoom (USA): online calls and masterminds.
• WhatsApp / Meta (Ireland / USA): the Alive Together community, when you choose to join it. WhatsApp's own privacy terms apply there.
• Hotel and partners of Inspiration Days: only the details they need to host you, and only if you attend.

BlueOcean LLC itself is based in the USA, and several of these services are too. Transfers to the USA are based on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the EU Standard Contractual Clauses.

I do not sell your data and I do not share it with advertisers.

How long I keep it

• Applications that do not lead to a booking: deleted within 12 months, or earlier if you ask.
• Participants and members: for as long as you take part, and a reasonable time afterwards in case you come back.
• Payment and invoice records: as long as tax and accounting law require.
• Newsletter and community email list: until you unsubscribe or ask me to delete you.
• Game accounts and their game results: until you delete your account.

Your rights

You can ask me to show you the data I hold about you, to correct it, to delete it, to restrict its use, or to give it to you in a portable format. You can object to processing based on legitimate interest, and you can withdraw a consent at any time, with effect for the future. Write to thomas@thomasweidlich.com, and I will answer within 30 days.

You also have the right to complain to a data protection authority, in particular in the EU country where you live or work.

Cookies and tracking

This website does not use tracking or advertising cookies. The payment page of Stripe sets cookies that are needed for secure payment.

Visitor statistics

I use Vercel Web Analytics to understand how many people visit which pages, so that I can improve the website. It works without cookies and does not identify you as a person. Vercel processes data such as the page, the referring website, the country, the browser and the device type, and turns the request into an anonymous visit count that is discarded after 24 hours. Legal basis: my legitimate interest in understanding how the website is used (Art. 6(1)(f) GDPR).