Acorn 2 OaksPrivacy Policy
Last updated: October 31, 2026
Acorn 2 Oaks (“we,” “us”), a trade name (DBA) of Acorn 2 Oak Trees LLC, helps people grow through CliftonStrengths coaching, the book Forge Through 40, and a community. This policy explains what information we collect on acorn2oaks.com, why, and the choices you have. Questions? Email hello@acorn2oaks.com.
1. Information we collect
Information you give us
- Contact / “request to connect” form: your name, email address, the topic you’re interested in, and any message you write.
- Newsletter sign-ups: your email address (and first name, if provided).
- The Signature Diamond journey: your name, email, the role and stage you select (or the name of your role, if you type it), the kind of work you tell us you're in (optional), your answers to the Signature Diamond assessment and guided questions, and anything you write about yourself to build your report. We ask for your name and email on the first screen. From then on, we keep your journey with them as you go: your seat, your self-portrait and your answers as you finish each part, even if you don’t finish. To show you your free results (your top two energies and your free read), the page sends our server your role and stage (or the role you type), the kind of work you’re in (if you chose one), your six self-portrait answers and the words you tapped to describe yourself. That request doesn’t include your name, your email, or what you write about yourself. Our server works out your results from them and sends them back without keeping them. Your answers are kept with your profile so we can regenerate your readings and, pseudonymized (with your name and email replaced by a code), improve the assessment. If you buy the Signature Diamond™ Profile and retake the assessment, we keep your answers from each completed sitting (up to the three your purchase includes), not only the latest, so we can restore your report and show you what held and what changed between sittings. When you finish all 125 statements of the free assessment, we also note that this email took it, and when, so the City of Diamonds game can open its last lap for you if you play it. That note holds nothing else. You can ask us to delete any of this at any time (see section 7).
- Report check-ins (Signature Diamond™ Profile buyers): after you buy, we email you short check-ins about your report: at 30, 60 and 90 days on its 90-day plan, then about every three months, plus a reminder to retake the assessment on a date you choose, if you set one. To send them we keep your email address, first name, time zone, the date of your purchase, a copy of your report’s 90-day plan, and which check-ins we have sent. What you tap or write on a check-in page is kept with that record: how each step of your plan went, what got in the way, your feedback, whether your role or job has changed (and your new role, stage and kind of work, so your next retake can start from them), a request for a coaching session, and any journal entry. Each box on that page says who sees what you write in it: journal entries are kept with your report and not shared; the other answers are shared with a coach at Acorn 2 Oaks. You can turn check-ins off when you buy, or stop them with the link in any check-in email; your report and its link are not affected.
- Save-and-resume links: we save your in-progress answers with your email as you go (at each break in the assessment), so you can pick up where you left off on any device, and we email you a link to them when your free results are ready and whenever you ask for one. Each link works once and expires 30 days after your last save; requesting a new link replaces the old one, and we delete the stored copy when your link is used or replaced. (This covers the emailed-link copy; answers already saved with your journey are covered above.)
- Purchases (the Signature Diamond™ Profile and coaching engagements): your name and email. Payments are processed by Stripe — we never see or store your full card details.
- Optional report sharing (paid customers only): after you buy the Signature Diamond™ Profile, you can choose to share assessment reports you already have (for example CliftonStrengths®, DISC, MBTI, or Enneagram results). A file you share is stored privately in our system and used to prepare for your coaching and to calibrate and improve our assessment. Sharing is optional and never changes your results — the Signature Diamond is computed only from your own answers. You can ask us to delete a shared file at any time.
- City of Diamonds (the game): the game keeps your progress, and the first name you give it, in your browser. To play lap 2 and later laps, you sign in with your email. We email you a code to confirm the address and keep nothing until the code is entered. Then we keep your email address, that first name (if you gave one), your language, whether you also asked for news, and your progress: a record of each lap you finish (the companions in your crew, who led each moment, the choices you made, your handshakes with the team, and how the lap ended) and, from lap 2 on, the lap you’re playing, saved at the end of each stage. That lets you pick up where you left off when you sign in with the same email, on any device. Each device you sign in on gets its own key, and we keep only a scrambled copy of it. Your sign-up is kept with any other record we have for the same email (for example, a Signature Diamond journey), so we have one record per person. The game isn’t an assessment, and we don’t use your lap as one. Lap 5, the last lap, opens after the free Signature Diamond assessment: when you finish all 125 statements, we note that this email took it, and when. The game checks only that note, never your answers or your results. Lap 5 ends with three questions about the game; we keep the answers you pick with your progress, and if you accept cookies, those picks also go to Google Analytics, without your email or name.
Information collected automatically
- Analytics (Google Analytics 4): only if you accept cookies. This includes pages viewed, approximate location (from your IP), device/browser type, and the site that referred you. See “Cookies & analytics” below.
- Local storage on your device: we store your cookie choice; for the report tool, your saved report, any in-progress selections, and a short-lived key that lets this browser ask for your free read; and for the game, your saved lap, the laps you’ve finished, your first name, your language, your music setting, and once you sign in, the laps you’ve opened (so they play offline) and this device’s sign-in key. This data stays in your browser and is not sent to us unless you submit a form, buy a report, sign up in the game, or start the Signature Diamond (see above).
- Bot checks (Cloudflare Turnstile): when you send some forms, start or continue the Signature Diamond, or sign up in the game, Cloudflare checks that a person is sending it. Cloudflare receives your IP address and details about your browser for that check. To keep the free Signature Diamond from being run by scripts, we also count how many start from each network (IP address) each day, and keep a record of each one under a random number: when it started and how often it was used, when its answers were last scored, how many times answers were changed, and a coded fingerprint of each finished part (it shows whether those answers later changed, not what they were). Never your answers.
2. How we use your information
- Respond to your inquiries and provide coaching and related services.
- Send you the newsletter, if you opted in (you can unsubscribe anytime).
- Generate your personalized strengths report and deliver it — on the page and, for paid reports, also by email so you keep a lasting copy.
- Send the report check-ins and the retake reminder described above, and prepare for a coaching session if you ask for one (you can stop the check-ins anytime).
- Process payments and fulfill orders (e.g. email an assessment access code provided within a coaching engagement).
- Evaluate and improve the accuracy of the Signature Diamond assessment — we may analyze assessment answers, pseudonymized (with your name and email replaced by a code), together with optionally shared reports, to calibrate and validate the instrument. We never sell this data or use it to train AI models.
- Save your City of Diamonds progress so you can play on any device, and email you when the next lap opens, if you signed in. We don’t email you anything else about the game, and we send news only if you ticked the box.
- Understand how the site is used so we can improve it.
3. How your strengths report is generated (AI)
When you request the full Signature Diamond™ Profile, your first name, your role and stage, the kind of work you tell us you're in (optional), the readings computed from your assessment answers (your top facets and your DISC, Enneagram, and OCEAN readings), and anything you write about yourself in the guided questions are sent to Anthropic (the company behind Claude) to generate your personalized report text. When you retake the assessment, the readings from your earlier sitting and what you tell us about what has changed since are sent too, so your new report can speak to them. Your raw item-by-item answers stay on our systems and are not sent to Anthropic. We store the generated report so you and we can refer back to it. We do not sell your information, and we don’t use it to train AI models.
4. Service providers we share data with
We use trusted third parties to run the site. Each has its own privacy policy and only processes data as needed to provide their service:
| Provider | Purpose |
|---|---|
| Google Firebase / Firestore | Securely stores form submissions, orders, reports, and game sign-ups |
| Google Analytics | Website usage analytics (only after you consent) |
| Google Fonts | Delivers the site’s fonts (may receive your IP address) |
| Anthropic (Claude) | Generates your strengths report |
| Stripe | Processes payments |
| Resend | Sends our transactional email (your report copy, save-and-resume links, the game’s sign-up codes, and the report check-ins and retake reminders), and tells us when an email bounces or is marked as spam, so we stop sending |
| Substack | Manages the email newsletter |
| Netlify | Hosts the website and stores your in-progress answers and generated report so we can deliver them, a copy of each report we email you, your check-in answers, and your game sign-up with your saved progress |
| Cloudflare Turnstile | Checks that a person, not a bot, is sending a form, starting or continuing the Signature Diamond, or signing up in the game (receives your IP address and browser details) |
5. Cookies & analytics
We don’t set analytics cookies until you choose. When you first visit, a banner lets you Accept or Decline:
- Accept loads Google Analytics, which sets cookies to measure site usage. We use it only to measure the site: Google’s advertising features (Google signals and ad personalization) are turned off.
- Decline means no analytics cookies are set.
- We also use a small amount of local storage that’s essential to run the site (remembering your cookie choice, your saved report, and your game progress).
You can change your mind anytime by clearing this site’s data in your browser, which removes the saved choice and lets you choose again on your next visit. You can also opt out of Google Analytics with Google’s opt-out browser add-on.
Do Not Track: the site doesn’t change what it does when your browser sends a “Do Not Track” signal. Analytics runs only if you choose Accept, so if you decline, no analytics cookies are set.
Activity across other websites: if you accept cookies, Google, through Google Analytics, may collect information about your activity on this site over time and across other websites. The services that deliver the site’s fonts, code libraries, and bot check (Google Fonts, Google’s gstatic.com, unpkg.com, and Cloudflare) receive your IP address and browser details when your browser loads from them.
6. How long we keep your information
We keep personal information only as long as we need it for the purposes above. In general: newsletter data until you unsubscribe; inquiry and contact messages for up to about 2 years after our last exchange; order and payment records for the period required by tax and accounting law (typically up to 7 years); saved reports until you ask us to delete them or they’re no longer needed; your check-in answers, feedback and journal entries, until you ask us to delete them (if you stop the check-ins, we keep a note that you did, so we send no more check-ins about that report); a Signature Diamond journey you haven’t bought, finished or not, for 2 years after your last activity; the note that an email took the free assessment, until you ask us to remove it or the game closes; and City of Diamonds sign-ups, with your first name and saved progress, until you ask us to remove them or the game closes (a sign-up code is deleted once it’s used, or after 10 minutes). When we no longer need information, we delete or anonymize it. You can ask us to delete your information sooner (see your rights below).
7. Your rights & choices
You can ask us to access, correct, or delete the personal information we hold about you, or get a copy of it — just email hello@acorn2oaks.com and we’ll take care of it. You can unsubscribe from the newsletter anytime using the link in any email. We don’t sell your personal information.
If you live somewhere with specific privacy laws (such as the EU/UK’s GDPR or California’s CCPA/CPRA), you may have additional rights — contact us and we’ll honor what applies to you.
8. Data security
We use reputable providers and reasonable safeguards to protect your information. No method of transmission or storage is 100% secure, so we can’t guarantee absolute security.
9. Children’s privacy
This site is intended for adults and is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we’ll delete it.
10. International visitors
We operate from the United States, and our providers may process and store data in the U.S. and elsewhere. By using the site, you understand your information may be processed in countries with different data-protection laws than your own.
11. Changes to this policy
We may update this policy from time to time. When we do, we’ll revise the “Last updated” date above. Significant changes may be highlighted on the site.
12. Contact us
Acorn 2 Oak Trees LLC (d/b/a Acorn 2 Oaks)
Email: hello@acorn2oaks.com
Questions about your privacy or this policy? Email hello@acorn2oaks.com.