Privacy Policy
Effective 1 October 2026 · Debt Free Millionaire is a product of Xogos Gaming, Inc.
This policy explains what Debt Free Millionaire ("DFM", "we") collects, why, and what you can do about it. The short version: we collect what the courses and game need to work, we do not sell it, and we do not show ads.
1. What we collect and why
| Information | Where it comes from | Why we keep it |
|---|---|---|
| Name, email address, password (stored hashed — we cannot read it) | You, when you register or when a parent registers you | To run your account, sign you in, and email you about it |
| Student username, first name, the parent it belongs to | The parent, at registration | To link the family and show the parent their student's progress |
| Membership status, renewal date, Stripe customer id | Stripe, after you pay | To know what you have paid for. Card numbers never reach us |
| Course progress, quiz and exam scores, practice-drill results, written work | You, as you learn | So your work is saved, graded, and visible to you (and your parent, for students) |
| Game saves and in-game activity (career, money, decisions) | You, as you play | To continue where you left off and let a parent follow along |
| Anonymous page views (a random browser id, page path, which program was clicked) | Your browser | To see which parts of the site are used. No name, email or IP is attached |
| Shipping address (textbook orders only) | You, at checkout | To ship the book |
| Server logs (IP address, time, page requested) | Your browser, automatically | Security and fault-finding; deleted after 90 days |
2. Children
Student accounts are created and managed by a parent or legal guardian, who agrees to this policy on the student's behalf. We collect only the student's first name, a username chosen by the parent, an optional email address for the welcome message, and the learning and game data listed above. Students are not shown advertising, cannot be contacted by other users, and cannot make purchases. A parent can see and, on request, delete everything we hold about their student. Learners who join through Xogos Gaming are covered by the Xogos privacy policy for the data Xogos holds; we receive only the student's first name and a signed session so they can play.
3. Who can see it
- You, from your account and course pages.
- The parent on a family account sees the student's progress, grades, written work and game activity. Students are told this on their welcome page.
- Xogos Gaming staff who run the service, to help you and to grade written work. Access is limited to what that job needs.
- Service providers that process data for us: Amazon Web Services (hosting and email), Stripe (payments). They may only use the data to provide their service to us.
- Nobody else. We do not sell personal information, share it with advertisers, or use it to train outside AI models. We disclose it only if the law requires it.
4. Cookies and storage
We use your browser's local storage to keep you signed in (a signed token), remember preferences such as music volume, and hold the anonymous analytics id. We set no third-party or advertising cookies. Stripe sets its own cookies on its checkout page.
5. Email
We send account emails (confirmations, password resets, receipts, parent invitations) from no-reply@debtfreemillionaire.rocks; you cannot opt out of these while you have an account. We do not send marketing email unless you have asked for it, and every marketing message has an unsubscribe link.
6. How long we keep it
- Account and learning data: for as long as the account exists, then deleted within 30 days of a deletion request.
- Order and payment records: 7 years, as tax law requires.
- Anonymous analytics: 24 months.
7. Your rights
You can see, correct, export or delete your personal information, and a parent can do the same for their student, by emailing us from the address on the account. Residents of California, the EU/UK and other places with privacy laws have additional rights (access, portability, objection, complaint to a regulator); we honour them for everyone, wherever you live. We will answer within 30 days.
8. Security
Passwords are stored hashed, traffic is encrypted (HTTPS), payment details are handled entirely by Stripe, and access to our database is restricted to our servers and staff. No system is perfectly secure; if we ever learn of a breach affecting you we will tell you promptly.
9. Where it lives
Our servers are in the United States (Amazon Web Services, N. Virginia). If you use the service from elsewhere, your data is transferred to and stored there.
10. Changes and contact
If we change this policy in a way that matters we will email account holders first. The effective date at the top always shows the current version. Questions or requests: zack@xogosgaming.com. Xogos Gaming, Inc., PO Box 1451, Liberty, MO 64068, United States.