What we collect, and what we don't

Four things, and only when they apply to you.

• What you type into the contact form. Your name, your business name, what the business does, your phone number, your email if you give it, what you've got running now, which plan you're looking at, and what you need. Nothing on that form is collected before you press send.
• How you got here. The link, search, or campaign tag that brought you to the site, recorded once at the start of your visit. If you typed the address in, it records that instead.
• What your browser sends with any page request. Your browser and device string, and the country Cloudflare reports. Not a street address, not a postcode.
• A one-way fingerprint of your IP address. The address itself is never written down. What gets stored is a hash of it, which can't be turned back into an address by us or by anyone who took the database.

There's no analytics on this site. No Google Analytics, no Meta pixel, no session recorder, no heatmap, no A/B testing tag, no third-party script of any kind. You can confirm it from your own browser: open the network panel and count the domains.

We set no cookies of our own, so there's no cookie banner, because there's nothing for you to consent to. Cloudflare, which serves the site, may set a strictly necessary cookie to keep the form's bot check honest. It carries no profile and it isn't ours to read.

The one thing this site stores in your browser is a single record of how you arrived. It lives in session storage, which your browser throws away when you close the tab. It isn't a cookie, it doesn't follow you between visits, and it isn't shared with anyone.

This site takes no payments and stores no card details. There are no accounts and no passwords, so there's nothing here to log into and nothing here to breach.

What you type into the form exists so a person can read it and write back. That's the entire purpose. It doesn't feed a mailing list, and you won't get a newsletter you didn't ask for.

The arrival record tells us which of the things we do actually brings people here, so we spend our time on the ones that work instead of guessing.

The hashed address stops one script submitting the form a thousand times. It's used for counting, not for identifying you.

Two people read your submission: the two of us. Nobody else has an account, and we don't sell, rent, or trade what you send.

One company sits underneath all of it. Cloudflare hosts the site, runs the bot check on the form, stores the database the submission lands in, and carries mail for our domain. They keep standard request logs the way every host does, under their own terms.

The only other case is a lawful order we're required to answer. If that happens and we're permitted to tell you, we will.

Form submissions are kept while we're talking and for two years after we last hear from you, then deleted. If you'd rather that happened sooner, say so and it will.

The arrival record is gone the moment you close the tab. We never had to delete it, because it was never ours to hold.

You can ask us for any of these, and you don't need to give a reason.

• A copy of everything we hold that came from you.
• A correction, if we've got something wrong.
• Deletion of the whole record.

Ask by phone on (917) 924-2463, or through the contact form. We answer these within 48 hours. If you're in a place with a formal data-protection regulator and you think we've handled this badly, you're entitled to complain to them, and we'd rather you told us first so we can fix it.