On this page
What we collect
Three buckets, all of which you give us directly:
- Intake form answers. Your name, role, email, phone (if you provide it), company name, website, location, plus everything you tell us about your business, stack, pain, and goals.
- Engagement data. If we work together, anything you share so we can do the job -- Slack messages, briefing edits, calendar info, contract details, billing.
- Public surfaces. Only if you explicitly opt in on the intake: we scan your public website and social profiles to build a better briefing. Public-only. No logins, no scraping anything behind auth.
We use Google Analytics 4 to understand aggregate site traffic, page performance, and which pages help people find the right intake path. We do not run ad pixels, session replays, or third-party ad networks. Cloudflare may also process basic request, security, and performance data to serve and protect the site.
Sensitive data
The public intake form is not for regulated or high-risk data. Do not submit protected health information, payment card numbers, government IDs, account passwords, private keys, patient records, legal case files, or similar sensitive records unless we have signed the right agreement first.
If your project may involve HIPAA, GDPR, financial regulations, or other compliance constraints, flag that in the intake form without pasting the sensitive records themselves. We will scope the data handling, contracts, vendors, and approval gates before access.
How we use it
To do the work you came here for. Specifically:
- Write your briefing
- Scope, propose, and (if signed) deliver builds
- Email you about your engagement and follow up on briefings
- Send field-note posts if and only if you've subscribed
We do not sell your information. We do not feed it into model training. We do not use it to target you with ads on other sites.
Who we share it with
Only the vendors we need to run the business, and only what's strictly necessary:
- Cloudflare -- to host, route, secure, and protect the public website and Pages Functions
- Google Drive / Sheets -- to store intake queue records and briefing materials
- Google Analytics -- to measure aggregate website traffic and page performance
- Email infrastructure -- to send intake notifications and replies
- Calendar / video tooling -- if we schedule a call
- Accounting + payment -- if you become a paying client
- Model APIs -- only when needed for a scoped briefing, build, or maintenance task; regulated data requires vendor review and written approval first
If a vendor changes, the list above gets updated. We don't share with anyone else without your explicit permission.
Where it lives
US-based infrastructure unless your engagement specifies otherwise, such as EU residency or a regulated-data scope. Backups are handled by the relevant platform provider. Access is limited to Cortland and any contractor explicitly working on your engagement.
Intake data is retained for 24 months whether or not you become a client -- long enough to remember the conversation if you come back. After that it's deleted automatically. You can request deletion sooner.
Your rights
Wherever you live, you can:
- See what we have on you -- email us, we'll send the export
- Correct anything that's wrong
- Delete everything -- at any point, no questions, even if we're mid-engagement (we may keep contract / financial records as legally required)
- Take it elsewhere -- exports come in plain JSON
If you're in the EU/UK/California, the same applies -- GDPR / UK-GDPR / CCPA equivalents are baked in.
Cookies
One: the intake form uses localStorage on your browser so your draft survives a refresh. It never leaves your machine until you hit Submit. Two: Google Analytics may set analytics cookies or similar identifiers so we can measure aggregate site usage. No ad cookies, no retargeting pixels, no session replay.
Changes to this policy
If we change anything material, the "last updated" date at the top gets bumped and (if you've given us your email) you get a note. We won't silently change the rules on you.
Questions
Email hello@cronkagents.com. Real reply within two business days. If you're requesting deletion or an export, we'll handle it inside seven days.