Privacy on this site
This page covers thesourceframework.com, the companion site for Be the SOURCE, and its free SOURCE check.
In short
- Who runs it: StudioHawk, an SEO agency based in Melbourne, Australia.
- What we collect: Your email when you log in or ask for a free SOURCE check, the website and question you give the check, and how you use the site. In the UK, the EU, the EEA and Switzerland we ask before measuring how you use it.
- Why: To let you in and send you updates to the book, to run the check you asked for, and to see which parts of the site readers use.
- Who we share it with: The services that run the site and the check, listed below. A check's result is also shown to anyone who checks the same site with the same question, tracking answer and country. We don't sell your information.
- How to reach us: [email protected]
1. Who we are
This site is run by StudioHawk, the business name of SIXFINGERS DIGITAL PTY LTD & THE TRUSTEE FOR SIXFEATHERS TRUST, ABN 49 199 692 850, 39/41 Mount St, Prahran VIC 3181, Australia. For anything about your information, email [email protected].
This page covers this site only. StudioHawk's other services are covered by StudioHawk's privacy policy.
2. What we collect, and why
When you log in
You give your email and the password printed in the book. We check the password and don't store it with your email. Your email goes into our reader record (with your first and last login) and onto StudioHawk's list of Be the SOURCE readers in HubSpot, with your internet address and, if HubSpot's cookie is set, the pages you read before logging in. We use it to send you updates to the book and its tools. Every book update email has an unsubscribe link.
When you ask for a free SOURCE check
You give your website, one question your buyers ask, what you track today (optional) and your email. We use your email to send the one-time link, and we keep a code made from it with a secret key, which lets us recognise the same email if it comes back but isn't your address, so each email gets one free check. Your internet address is turned into a code the same way to count links and checks a day. Your country comes from your connection and your time difference from UTC from your browser, to ask the AI assistants from where you are and to date your result. Cloudflare's Turnstile checks the form looks like it was sent by a person. Your website and question go to OpenAI and Anthropic to run the check, and your website to Google (for speed), Wikidata and Wikipedia. Anyone who checks the same site with the same question, tracking answer and country in the next 30 days sees the same result, so don't put anything private in your question.
Your self-score and 30-day plan
Your answers, results and plan stay in your browser. If you choose to share a self-score with the authors, we send your email, the six scores, your weakest letter and the date to HubSpot, with your internet address, so the authors can see which letters readers find hardest and shape the book's updates. Never your answers.
The Search Console upload on your result
If you add a Search Console export to your free check's result, it is read in your browser and never sent to us.
Booking a call
"Get a free strategy call" sends you to a StudioHawk contact page: the US one if Cloudflare sees you in the US, the UK one in the UK, and the Australian one everywhere else, with a tag saying you came from this site. This site stores nothing about it; if analytics may run, it counts the click. Those pages are covered by StudioHawk's privacy policy.
Analytics
Google Analytics and HubSpot show us which pages readers use. Both set cookies. Visitors in the European Union's 27 countries, Iceland, Liechtenstein, Norway, the United Kingdom and Switzerland are asked first, and their tracking code doesn't load until you accept; everyone else gets it as the page loads. Cookie settings only controls that tracking: logging in, or choosing to share a self-score, still sends what is described above to HubSpot. Cloudflare Web Analytics counts page views without cookies or anything stored on your device.
What you have to give us
Nothing, unless you want something from the site. The login form asks for your email, and the free check needs your email, website and question to run. What you track, sharing a self-score and analytics in the UK, the EU, the EEA and Switzerland are up to you.
3. Who gets what
We don't sell your information. These services handle it for us, and StudioHawk's team can see the reader list and the shared self-scores.
| Service | What it gets, and why | Based in |
|---|---|---|
| Cloudflare | Hosts the site and runs its login and the check's form, and keeps the check's records described below. Turnstile, its spam check on the form, looks at signals such as your internet address and browser. Its Web Analytics counts page views. | United States, serving from its network worldwide |
| Railway | Runs the check: your website, question and tracking answer, your country, your time difference from UTC, the scrambled email and internet address, and a code for your link. | United States (the service runs in US East) |
| OpenAI | Answers your question twice, with web search, for the check. | United States |
| Anthropic | Answers your question once, with web search, and reads up to two of your site's pages to score some letters. | United States |
| PageSpeed Insights gets your website's addresses, for real-visitor speed. Google Analytics gets how you use this site. | United States | |
| Wikimedia Foundation | Wikidata and Wikipedia are searched for your website and business. | United States |
| Resend | Sends the free check's one-time link: your email address and your website's name. | United States (this site's emails are sent from its Tokyo region) |
| HubSpot | Keeps StudioHawk's list of book readers: your email, your internet address when you log in, and any self-score you share. It also sees how you use the site, where analytics may run. | United States |
4. How long we keep it
A one-time link works for 24 hours. A result can be shown to others for 30 days, and its record is deleted after 35. What we keep and for how long:
| What | How long |
|---|---|
| Your free check and its result | 35 days |
| A result shared with the same site, question, tracking answer and country | 30 days from the check |
| The one-time link in the email | 24 hours |
| The scrambled copy of your email that stops a second free check | 400 days |
| Daily counts of links and checks, by scrambled email and internet address | 2 days |
| Your reader record: your email, and your first and last login | Until you ask us to delete it |
| Your HubSpot contact, and any self-score you chose to share | Until you ask us to delete it. Unsubscribing stops the emails |
| Google Analytics data | Up to 14 months, the most Google Analytics keeps it |
| Service logs and sent-email records | A limited time, under Cloudflare's, Railway's and Resend's own policies |
| What your browser keeps (below) | Until you clear it |
We keep the information in Cloudflare's and Railway's systems, reached only over encrypted connections, with emails and internet addresses in the check's records turned into codes. Only the StudioHawk staff who run this site can reach them.
5. Cookies and what your browser keeps
Visitors in the European Union's 27 countries, Iceland, Liechtenstein, Norway, the United Kingdom and Switzerland are asked before Google Analytics or HubSpot load. Accept loads both; Decline loads neither. Change your mind any time with Cookie settings at the foot of any page. Everyone else gets both as the page loads; you can block them in your browser's settings.
| Cookie | Set by | What for | How long |
|---|---|---|---|
aiseobook_gate |
This site | Keeps you logged in after you enter the book's password. It holds a scrambled form of the password, not your email. | 30 days |
_ga |
Google Analytics | Tells visits apart. | 2 years |
_ga_2SHERB1GHN |
Google Analytics | Keeps the state of a visit. | 2 years |
__hstc |
HubSpot | HubSpot's main visitor cookie: your first, last and current visit, and how many visits. | 6 months |
hubspotutk |
HubSpot | Your visitor identity. It is sent to HubSpot when you log in or share a self-score, which ties the pages you read to your contact. | 6 months |
__hssc |
HubSpot | Tracks a visit's session. | 30 minutes |
__hssrc |
HubSpot | Tells HubSpot when your browser has restarted. | Until you close the browser |
__hs_do_not_track |
HubSpot | Only if you decline after accepting: tells HubSpot's code to send nothing. | 6 months |
Cloudflare's Turnstile and Web Analytics set no cookies.
| Name | What for | How long |
|---|---|---|
tsf_consent |
Your cookie choice, if you are asked for one. | Until you clear it |
tsf_reader_email |
The email you logged in with, so the self-score's share form comes filled in. | Until you clear it |
aiseobook_sc_draft |
Your self-score answers while you are still answering. | Until you clear it |
aiseobook_sc_history |
Your self-score results, so a re-test can show what moved. | Until you clear it |
aiseobook_route |
Your 30-day plan: the day you started and the steps you ticked. | Until you clear it |
aiseobook_env |
Whether you chose Claude desktop or Claude Code on the setup guide. | Until you clear it |
aiseobook_updates_seen |
Which book updates you have already seen. | Until you clear it |
tsf_email |
The email you typed, while you retype a password that didn't work. Cleared once you're in. | Until you close the tab |
tsf_login |
A note that you just logged in, so analytics counts one login per tab. Only if analytics may run. | Until you close the tab |
6. Your choices and rights
- Unsubscribe from book updates with the link in any book update email.
- Ask us for access to what we hold about you (a copy of it), to correct it, or to delete it: email [email protected]. We reply within a month.
- Clear your browser's storage to remove what it keeps for this site.
If you are in the UK, the EU, the EEA and Switzerland, your local law may also let you ask us to restrict or stop using your information, or to give it to you in a form you can take elsewhere. You can withdraw your consent to analytics at any time with Cookie settings; that doesn't change what happened before you withdrew it. The legal basis for each use:
- Analytics (Google Analytics, HubSpot's tracking): your consent.
- The free check and a shared self-score: to do what you asked us to.
- The reader list and book update emails: our legitimate interest in sending readers updates to the book they're using. You can unsubscribe at any time.
- Cloudflare Web Analytics, and keeping the site safe and fair (the coded email and address, the daily limits, Turnstile, the login cookie): our legitimate interest in knowing how the site is used without cookies, stopping abuse and keeping the check free.
No decision with a legal or similarly significant effect on you is made automatically. The form does refuse a request by itself when a daily limit is reached or the spam check fails, and the check's scores are about a website, not you.
7. Sending information overseas
Most of the services above are based in the United States, and Cloudflare serves from its network worldwide. So your information leaves Australia, and for readers in Europe and the UK it leaves there too. We rely on the safeguards our providers offer, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework. Email us for a copy.
8. Complaints
Please tell us first at [email protected]: we look into it and reply within a month. You can also complain at any time to the Office of the Australian Information Commissioner (oaic.gov.au), the UK's Information Commissioner's Office (ico.org.uk), or your local data protection authority in the EU, the EEA or Switzerland (list of authorities).
9. Changes
When the site changes what it collects, this page changes with it, before the change goes live. Last updated 1 October 2026.