Privacy policy

01What you send us

The contact form asks for four things, and stores exactly those four:

Name

so a reply can address you.

Email address

so a reply can reach you.

Company

optional, and blank if you leave it blank.

Message

whatever you chose to write.

02What the submission carries with it

Two further things are recorded alongside a submission. Neither is something you type.

Your browser's user agent string, which is the line every browser sends on every request naming itself and your operating system. It is kept to tell a person apart from a script.

And where you came from, which is the part this site actually uses. When you first arrive we note the campaign parameters on the link you followed, if it had any, along with the site that linked to you and the page you landed on:

utm_source, utm_medium, utm_campaign, utm_term, utm_content

the five standard campaign tags, present only if the link you clicked carried them.

Referring page

the host and path of the page that linked here, with its query string discarded. Blank when you typed the address or came from a private message.

Landing page

the first page of ours you opened.

03Why we keep where you came from

We are a new company about to start marketing, and we need to know which channels produce real conversations. Two versions are kept: the visit that first brought you here, and the most recent one that carried a source. Together they answer whether a post, a listing or a referral is doing anything.

This lives in your browser's local storage under simpliflow.attribution until you send a message, at which point a copy travels with it. It is not a cookie, it is never sent with an ordinary page request, and no other site can read it. Clearing your browser's site data for simpliflow.ai removes it.

04What the analytics sees

We use Umami, a small open-source analytics tool, on its hosted service. It counts page views and clicks on links leading off this site. It does not use cookies, does not store anything in your browser, and assigns no identifier that persists from one day to the next, so it cannot follow you here from anywhere else or recognize you when you return.

What it records for a page view is the page URL and its campaign tags, the referring site, your screen size, your browser and operating system, and a country derived from your IP address. The IP address itself is used to work out that country and is not stored.

We chose it over Google Analytics deliberately. Nothing on this site is shared with an advertising network, and no data collected here is used to build an advertising profile of you.

05Cookies and consent

This site sets no cookies of its own, which is why you were not asked to accept any. A banner that appears when there is nothing to consent to trains people to click through the ones that matter.

The one exception is a challenge: if the contact form asks you to confirm you are not a robot, Cloudflare Turnstile may set a short-lived cookie of its own to remember that you passed, and will see your IP address in order to decide. That happens only on the contact form and only if the challenge is enabled.

06Who else touches it

Four companies are involved in running this site. None of them is paid for your data and none receives it for their own purposes:

Vercel

hosts the site and serves these pages.

Our own server

a machine we rent and administer ourselves holds the contact submissions. They are stored where only we can read them back.

Google Workspace

carries the email that tells us a message has arrived, and the mailbox that reply comes from.

Umami

receives the analytics described above.

07How long we keep it

Contact submissions are kept as long as there is a reason to: an open conversation, an active engagement, or a record we are required to hold. When there is not, they are deleted.

Analytics is aggregate and is not tied to you, so there is nothing in it to delete.

08Asking us about your information

Write to us and ask. We will tell you what we hold about you, correct it, or delete it. You do not need to cite a statute and we will not ask you to prove you live in a particular state.

We do not sell personal information and we do not share it for cross-context behavioral advertising, as California defines those terms.

09Do Not Track

Some browsers send a Do Not Track signal. There is no agreed standard for what a site should do with it, and we do not currently change what we collect in response to one. What is described above is what we collect either way: analytics that cannot identify you, and a contact form that records what you chose to send.

10Changes

If this policy changes, the date at the top changes with it and the new version replaces this one on this page. We will not quietly start collecting something this page does not mention.