Privacy

What gets collected when you just read

Three things measure this site. None of them use cookies and none of them try to identify you.

Vercel Web Analytics

Counts page views and records the page you came from, your country, and your device type, in aggregate. Vercel states it is cookieless and does not build cross-site profiles.

Vercel Speed Insights

Measures how fast pages load and render, so I can tell when I have made the site slower.

The site's own beacon (/site.js)

Records a small number of named events: that someone clicked Book a call and which section they clicked it from, that the one-pager was downloaded, that a page was actually read rather than bounced, which buyer type was chosen in the homepage diagram, and whether this is a third or later visit. Each event carries the page path, the referring site, how many seconds you stayed, and your visit number. It does not record your IP address, your name, keystrokes, mouse movement, or anything you type.

Two values are stored in your browser's local storage, not as cookies: a visit counter, and the first source that brought you here so that a later conversation can be credited to it. Clearing site data removes both.

Like any website, the server that delivers these pages briefly sees your IP address in its request logs. I do not store it, analyze it, or attach it to anything else.

What gets collected when you get in touch

The contact form asks for your name and work email, optionally a phone number, which problems apply to you, and anything else you want to add. The CRM decay page asks for an email to send results to. Those go to two places.

A private Slack message to me

So I see it and reply. Usually the same day.

An enrichment step on your company's domain

I look up public business information about the company behind your email address: what it does, roughly how big it is, what software it runs. This is about the company, not about you personally. It exists so my reply is about your situation instead of asking you to explain it. If you would rather I did not, say so in the form and I will delete the lookup.

Booking a call opens Google's appointment scheduling inside this page. What you enter there goes to Google Calendar under Google's privacy policy, not mine.

What I deliberately do not do

• No visitor deanonymization. There are vendors who will tell a website the name and work email of an anonymous visitor. I do not use them, and I will not reference your visit in an email you did not ask for.
• No session replay. Nothing records your screen, scrolling, or typing.
• No advertising or social pixels. No Meta pixel, no LinkedIn Insight Tag, no Google Ads tag.
• No selling, renting, or sharing your information. There is no third party who receives it for their own purposes.
• No AI training on anything you send me.

Who else is involved

Running the site means a small number of companies process data on my behalf:

• Vercel hosts the site and provides the analytics described above.
• Slack receives form submissions and event notifications.
• Google handles call booking, and serves one of the fonts.
• Fontshare serves another font. Font providers see your IP address as part of delivering the file, which is how any web font works.
• Data providers answer the company lookup described above, on the domain only.

How long things are kept

Analytics are aggregate and are kept for as long as the accounts above retain them, which is a rolling window measured in months, not years. Anything you send through a form is kept for as long as we might reasonably still be talking, and I delete it on request. Event records exist in server logs with a short retention and are never joined to a person.

Your choices

• Turn the site's measurement off. Enable Do Not Track or Global Privacy Control in your browser and it will not run. You can also visit thegtmfactory.com/?notrack once, which silences it on that device permanently.
• Ask what I hold. Email me and I will tell you, and delete it if you want it gone. I do not require a formal request, a form, or an account.
• If you are in the EU, the UK, or California, you have rights of access, correction, deletion, and objection under the laws that apply to you. Use the same email. I do not sell or share personal information as those terms are defined under California law.

Client work

This page covers this website. Data handled inside a client engagement is governed by the Master Service Agreement and its Data, AI and Outbound Addendum, which say that the client owns their data, that I use it only to perform the services, and that systems run in the client's own accounts.

Changes and contact

If this changes, the date at the top changes with it. Questions, requests, or corrections: willy@thegtmfactory.com.