What happens to your data.
Plain language, no defined terms, no capitalized Party. This page only says things that are true of how the site is actually built, so it is shorter than the policy you were expecting and has visible holes in it.
Scope
This page covers metzgercreative.com. If you hire me, the agreement you sign covers what happens to your systems and your data during the work, and that document is the one that governs the engagement.
What the site collects
Only what you type and send. There is no second collection layer running quietly underneath.
When you send a message through a form here, the record stores your name, your email address, your company if you gave one, the message itself, which form it came from, the fact that you ticked the consent box, and any campaign parameters that were attached to the link you arrived through. On the contact form specifically, the record also stores which engagement you were asking about, roughly how your budget compares to the published band for it, and roughly when you need it. That list is the entire record. It is the database table, not a summary of it.
Some ways of reaching me that this site is built for, the assistant and the cost estimator among them, are not switched on yet. They write into the same record when they are, and the AI disclosure page explains what the assistant does with what you type.
Request logs
Serving a page means the server sees the request: an IP address, a browser user agent string, the page asked for, the time it was asked for. That is true of every website, this one included, and it happens whether or not a form exists.
Confirm which request logs the hosting configuration actually retains and for how long, then state both here. Guessing at my own infrastructure in a privacy policy would be a strange way to earn trust.
What the site measures
Four measurement tools run here: Google Analytics, and advertising pixels from Meta, LinkedIn and TikTok. They record which pages you open, which buttons you press, roughly where you are from your IP address, and whether you arrived from an ad I paid for. When a form is sent they record that a form was sent, along with which engagement, budget range and timeline it named.
They do not record what you type. There is no session recording and no screen replay on this site, so nothing watches you fill in a field and change your mind. Your name, your email address and whatever you wrote in the message box go into my database and into my inbox, and the only version any advertising platform receives is a one-way scrambled form of your email used to match you to the ad you clicked. It cannot be turned back into your address.
Being honest about the reason: those pixels also let me advertise to people who have been here before, and they let me tell whether an ad produced a client or just produced clicks. That is what they are for. If your browser sends a Global Privacy Control signal, the three advertising pixels are not loaded at all. Only the analytics script runs, and it is not used to target anything.
This does set cookies. Google’s analytics cookies, Meta’s, LinkedIn’s and TikTok’s, plus one of my own that remembers which campaign brought you here for thirty days so that a form you send next week still credits the right ad. Blocking all of them changes nothing about how the site works.
What it is used for
To reply to you. To work out what your project needs and what it would cost. To keep a record of the conversation so you never have to explain the same thing twice. If you asked to be sent something, to send it.
It is not sold, rented, traded, or used to target advertising. There is no business model here that would make any of that worth doing.
Who can see it
The records sit behind a login. In the normal case I am the only person who reads them.
The exception is worth being precise about, because it is real. Most of the time I work alone. On some projects I bring in other senior engineers, and on others I am working inside your own team. When that happens, the people on the project can see the project context you sent me. I keep that to what the work actually needs, and your record does not go to anyone who is not working on your project.
The site and its database run on Amazon Web Services, so the infrastructure provider holds the data at rest by definition. That is a statement about where the servers are, not a claim about any certification.
Cloudflare checks the contact form for automated submissions. That check sees your IP address and some signals about your browser, which is how it tells a person from a script. It does not see what you typed.
Google, Meta, LinkedIn and TikTok receive the measurement described further up this page, including a scrambled form of your email address when you send the form.
List the remaining services as each goes live: email delivery, scheduling, and the model provider behind the assistant. No processor gets listed here before it is genuinely in the path, and none stays unlisted once it is.
How long it is kept
Set a retention period for lead records and for request logs, then publish it here. I have not set one. A number invented to fill this space would be a promise with no mechanism behind it, and the first time anyone checked, it would be false.
Until that is settled, the standing offer below applies without qualification: ask me to delete your record and I delete it.
What you can ask me to do
You can ask what I hold about you, ask for a copy of it, ask me to correct it, or ask me to delete it. I will do it, and I will not ask you to justify the request.
That is a commitment I am making because it is the reasonable way to behave. It is not a summary of any particular law, and this draft does not try to tell you what rights the place you live gives you on top of it.
Publish the address these requests should go to, and the number of days I commit to answering in.
Changes
When the site changes what it does, this page changes with it. The version you are reading is the current one.
Add an effective date and a last reviewed date once a lawyer has been through this page.
Ask me about any of this.
If a sentence on this page is unclear, that is a problem with the page and I would rather fix it than have you guess at what it means.