Patent Law University

Privacy & Cookie Policy

Effective October 4, 2026

This policy explains how Patent Law Joe LLC (“we”, “us”), operator of patentlawprofessor.com (“Patent Law University”), collects, uses, shares, and protects your personal data, and the choices and rights you have. It covers the EU/UK GDPR, the California Consumer Privacy Act as amended by the CPRA (“CCPA”), and similar laws.

1. Data we collect

  • Account & profile: email, password (stored hashed by our auth provider), name, and any firm, title, bio, or avatar you add.
  • Sign-in: if you use Google or LinkedIn single sign-on, we receive your name, email, and profile picture from them.
  • Newsletter / waitlist: the email address you submit.
  • Learning activity: courses and lessons viewed, progress, time spent, and points/levels (gamification).
  • AI assistant: the questions you ask and your conversation history, which we store to provide and improve the assistant.
  • Subscriptions & payments: your subscription status. Card details are collected and processed by Stripe — we never see or store full card numbers.
  • Technical & usage: IP address, approximate location, browser/device, pages visited, and performance metrics, collected (only with your consent) via Vercel’s privacy-friendly analytics.
  • How you found us (only with your consent): the ad or source that brought you to the site (for example a Google Ads click ID, campaign, keyword, or a link’s utm tags), saved with your sign-up, account, or purchase.

2. How and why we use it (legal bases)

  • To provide the service — accounts, courses, the AI assistant, and subscriptions (performance of a contract).
  • Security, fraud prevention, and improving the product (legitimate interests).
  • Optional analytics, advertising measurement and remarketing, and marketing emails (consent, which you can withdraw at any time).
  • Tax, accounting, and other legal obligations for payments (legal obligation).

3. Cookies & similar technologies

We load non-essential analytics and the Google Ads tag only after you click “Accept” in our cookie banner. You can change your choice anytime via . With your consent, the Google Ads tag records which ad brought you here, measures the sign-ups and purchases that follow, and adds your browser to remarketing audiences so our ads can reach you on other sites. You can stop remarketing at any time without declining cookies: Do Not Sell or Share My Personal Information. Separately, our pages measure their own speed (how long a page, a quiz result or a chat answer takes to appear) and send those timings to us anonymously: no cookies, and nothing personal is stored with them (no account, no IP address, no exact page address). Our pages also count visits anonymously, for everyone: how the visit arrived (an ad, a search engine, an email from us, a social network or another site’s domain, and the link’s tags), the page you landed on, your country and device type, and whether you saw or used a sign-up form. No cookies, no IP address, nothing that links one visit to another or to you.

NameTypePurposeConsent
sb-*-auth-tokenStrictly necessaryKeeps you signed in (Supabase authentication)Not required (essential)
__stripe_mid / __stripe_sidStrictly necessaryFraud prevention during checkout (set by Stripe only on payment pages)Not required (essential)
plu-cookie-consent-v3 / plu-ads-sharing-optout (localStorage)Strictly necessaryRemembers your cookie choice and your “Do Not Sell or Share” choiceNot required (essential)
Vercel Web AnalyticsAnalyticsAggregate, cookieless traffic measurement — no cross-site tracking, no advertisingLoaded only after you Accept
Google Ads (gtag.js: _gcl_au, _gcl_aw and Google ad cookies)AdvertisingRecords which Google ad brought you here, measures the sign-ups and purchases that follow, and lets us show our ads to past visitors (remarketing)Loaded only after you Accept; no remarketing if you opt out of sale/sharing
plu_attr (first-party cookie)Advertising measurementHow you found us: the ad click ID and campaign details (e.g. utm_source, campaign, keyword) of your first and latest visit from an ad or link, saved with a sign-up, account or purchase so we know which ads and sources work. Kept up to 90 days after your last visit from an ad or linkOnly after you Accept
Google Analytics (gtag.js: _ga, _ga_*)AnalyticsCounts visits, pages, traffic sources and sign-ups so we can see how people use the site. Google signals and ad personalization follow your “Do Not Sell or Share” choiceLoaded only after you Accept

4. Who we share data with

We do not sell your personal information for money. If you accept advertising cookies and have not opted out, we share limited data with Google Ads for advertising: cookie and ad-click identifiers, the pages you visit, and, when you sign up or buy, a hashed (scrambled) copy of your email so Google can match the conversion to an ad. California law treats this as “sharing” for cross-context behavioral advertising; you can opt out below (section 7) or with Global Privacy Control. We also use the service providers (“processors”) below to operate the site; each processes data only on our instructions:

VercelWebsite hosting and privacy-friendly traffic analytics (Web Analytics + Speed Insights)policy
Google AnalyticsWebsite analytics (visits, pages, traffic sources, sign-ups), only with your consentpolicy
SupabaseDatabase, authentication, and file storagepolicy
StripeSubscription billing and payment processingpolicy
BeehiivNewsletter / email subscriber listpolicy
ResendTransactional email delivery (e.g. case digests)policy
OpenAIPowers the AI assistant's answers and query classificationpolicy
Voyage AIGenerates text embeddings used for course-material searchpolicy
TavilyWeb search for current legal developments inside the AI assistantpolicy
Google / LinkedInOptional single sign-on (we receive your name, email, and profile picture)policy
Google AdsAdvertising: records which ad brought a visitor, measures sign-ups and purchases that follow, builds remarketing audiences so our ads can reach past visitors, and matches conversions using a hashed email (enhanced conversions). Only after you accept cookies, and never after you opt out of sale/sharingpolicy

We may also disclose data where required by law or to protect our rights.

5. International transfers

Our providers process data in the United States and other countries. Where we transfer personal data out of the EEA/UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses through our processors’ data-processing terms.

6. Retention

We keep personal data for as long as your account is active or as needed to provide the service, then delete or anonymize it, except where longer retention is required for legal, tax, or security reasons. You can delete your account or unsubscribe at any time.

7. Your rights

If you are in the EU/UK (GDPR): you may request access, correction, deletion, restriction, or portability of your data; object to processing; and withdraw consent. You may also lodge a complaint with your data protection authority.

If you are in California (CCPA/CPRA): you may request to know, access, delete, or correct your personal information, and opt out of the sharing described in section 4 (we do not sell it for money). We honor Global Privacy Control signals as an opt-out. We will not discriminate against you for exercising these rights.

Do Not Sell or Share My Personal Information

You have not opted out. If you accept cookies, Google Ads may use your visit for remarketing and to match sign-ups and purchases to our ads.

To exercise any right, email patentlawjoellc@gmail.com. You can manage your profile and email subscriptions from your account page.

8. Security & children

We use industry-standard measures (encryption in transit, access controls, hashed passwords) to protect your data. No method is perfectly secure.

The service is not directed to children under 16, and we do not knowingly collect their data.

9. Changes & contact

We may update this policy; we will revise the effective date above and, for material changes, provide notice.

Questions or requests: patentlawjoellc@gmail.com — Patent Law Joe LLC, [POSTAL ADDRESS].

This page is provided for transparency and is not legal advice. Have it reviewed by qualified privacy counsel before relying on it.