Privacy Policy

What you send me

When you request a scoping call, the form asks for and stores:

• your name and work email address
• a phone number, if you choose to give one
• your timezone, which the form fills in from your browser and you can change
• where your data is today and how soon you are looking for a solution
• your description of the project, and whether people will need to enter data in it
• the times you offer for a call

That is stored in a database, and a copy is emailed to me so that I see it. A record of that email is kept alongside it. If the form cannot reach the server, it opens your own email program with your answers written out instead, and what happens next is an ordinary email from you to me.

If you email me directly, I have whatever you chose to send.

What the site records as you use it

When the site loads, your browser makes up a random identifier for the visit. It is kept in your browser’s session storage - not in a cookie - and it is gone when you close the tab. Nothing connects one visit to your next one. Against that identifier the site records:

• which pages you open, and which buttons you press to open the contact form
• that the contact form was started, sent, or fell back to email - not what was typed into it
• that a row was saved in the editable reports demo - not the values; those never leave your browser
• the page you arrived on, the address of the page that linked you here, and any campaign tags on that link
• your browser’s user-agent string, the size of your browser window, your timezone and your browser’s language

I use this to see whether the site is doing its job: which pages are read, where people leave, and whether a change helped. It is looked at in aggregate.

If you send the contact form, the visit it was sent from is linked to your request, so I can see which pages you had looked at before writing in. That is the only point at which a visit is connected to a person, and it happens because you sent me your details.

What the site does not do

• It sets no cookies.
• It does not store your IP address. Your address is used for a few minutes, in memory, to stop the forms being flooded by automated requests, and is never written down.
• It carries no advertising, no advertising or social-media tracking pixels, and no third-party analytics service.
• It does not fingerprint your device or try to recognize you across visits or across other websites.
• It does not send you automated, scheduled or marketing email. If you hear from me, it is a reply written by me.

Who else is involved

I do not sell, rent or trade your information, and I do not give it to advertisers or data brokers. Two companies are involved in running the site, and handle information only as part of doing that:

• Microsoft Azure hosts the site, its database and its outbound email. Like any hosting provider it keeps its own operational and security logs of the requests it serves, which can include IP addresses.
• Google Fonts supplies the typefaces. Your browser fetches them from Google’s servers, so Google receives the request - your IP address and browser details - as it would for any site that uses them. No information from this site is sent with it.

I would disclose information if the law required it of me. If the business were ever sold or merged, contact requests would pass to the new owner under the terms on this page.

How long it is kept

Contact requests are kept for as long as they are useful for replying to you, for working with you if we go on to do so, and as ordinary business records. Visit records carry nothing that identifies you and are kept as usage statistics. You can ask me to delete what you sent at any time.

Your choices

Email Dtripodi@DomTripCode.com to ask what I hold about you, to have it corrected, or to have it deleted. I will do it, and tell you when it is done. Depending on where you live you may have further rights under your local privacy law - to object to or restrict how your information is used, or to complain to your data-protection authority - and nothing here limits them.

If you would rather not use the form at all, email me instead; the site offers that beside the form. Closing the tab ends the visit identifier, and your browser’s own settings can block session storage entirely - the site works without it.

Security

The site and its API are served over HTTPS, the database is not reachable from the public internet, and the public forms are rate limited. No method of storing or sending information is perfectly secure, so please do not put anything confidential - credentials, financial details, your own customers’ data - in the contact form. A few sentences about the project is all it needs.

Children

This is a business-to-business site. It is not directed at children and I do not knowingly collect information from them.

Changes to this page

If what the site does changes, this page changes with it and the date at the top moves. Questions about any of it: Dtripodi@DomTripCode.com.