Scope and responsibility
This policy covers flowstateofmind.io and desk.flowstateofmind.io, operated by the owner of FlowStateOfMind. It does not cover external services you choose to visit, including Amazon, Whop, social platforms, or linked trading tools.
Information we collect
When you request desk access, we collect your name, email address, submission time, and request status. If access is approved or revoked, we keep membership status and an administrative record of that action. Signing in involves your email address and authentication information processed by Cloudflare Access. If you contact us, we receive your message and contact details.
Our hosting and security provider, Cloudflare, processes technical information such as IP addresses, browser and device information, request details, and security signals. The form uses Cloudflare Turnstile to detect automated abuse. The application uses a time-based hash derived from your IP address to limit repeated submissions; this is not a promise of anonymity.
Why we use it and who can access it
We use this information to review requests, communicate about access, authenticate visitors, administer membership, respond to messages, and protect the service. Submitting an access request does not subscribe you to a marketing newsletter.
Applicant details are available to the desk owner through a protected inbox, not to other visitors or members. Cloudflare provides hosting, database storage, authentication, security, and email delivery services. Owner notifications do not include applicants’ names or emails. If you email the public contact address, Google’s Gmail service processes that correspondence. Providers may process information in countries other than your own.
We do not sell the access-request list or use it for targeted advertising. Information may also be disclosed where required by law or reasonably necessary to investigate abuse, protect rights, or secure the service.
Cookies, security, and external links
Cloudflare may use cookies and similar technologies for authentication and security. Blocking these can prevent sign-in or form submission. Read Cloudflare’s Privacy Policy and its Turnstile Privacy Addendum.
Affiliate links identify referrals. When you follow a link, the destination and its service providers may collect information and use cookies to attribute a signup or purchase under their own policies. The site does not currently change its behavior in response to the browser’s Do Not Track signal. You can manage cookies through your browser and the external provider’s controls.
We restrict access to request records and use protected connections and authentication. No online service can guarantee absolute security.
Retention and your choices
Request and membership records are kept to manage pending requests, current access, and approval history. The current system has no fixed automatic deletion schedule for these records. Archiving a request or revoking access does not delete it. Rate-limit records expire and are removed during later form processing; provider logs and backups follow the providers’ retention practices.
You can request access to, correction of, or deletion of your information, or ask to withdraw a pending request, by emailing the contact below. We may verify that you control the relevant email address. Requests are handled subject to applicable law; some records may need to be retained for security, dispute resolution, or legal obligations. Rights and response requirements vary by location.
Children and policy updates
This service is not directed to children under 13. If you believe a child has submitted personal information, contact us so we can investigate and address it.
Changes to this policy will be posted here with a revised effective date. Where required, we will provide additional notice or obtain consent before materially changing how personal information is used.