Privacy
Version 2026-08-25 · Effective 25 August 2026
This page describes exactly what this website collects, why, who else can see it, how long it is kept, and how to have it deleted. It is written to be read rather than to be impenetrable, and it describes what the site actually does — which was checked against the code, not assumed.
The short version. This website sets no cookies and loads no third-party scripts — no Google Analytics, no advertising pixels, no session recording. If you fill in the intake form, your answers are stored in your own browser until you press Submit. Nothing you type is sent to us before that.
Who is responsible
O6 Applied, a sole-proprietor consultancy based in Maryland, USA, decides how and why information on this site is handled. For anything on this page, including a request to see or delete your data, write to hello@o6applied.com and you will get a reply from a person.
What is collected, and why
If you fill in the intake form
The intake asks about your business, what you want built, your timing and budget range, and how to reach you. While you are filling it in, your answers are held only in your own browser — they are not transmitted to us. They reach us when, and only when, you press Submit.
If you choose to save your progress, the answers stay in your browser's local storage on that device so you can return to them. You can decline that and the form still works; you simply need to finish in one sitting. Clearing your browser data removes it.
Please do not paste real customer records into the free-text boxes. The form asks whether sensitive information is involved in your business, and some people answer by pasting an example. Describe the situation in general terms instead. We do not want a copy of your patient list, your clients' financial records, or privileged documents, and holding one without a contract in place helps neither of us.
If measurement is switched on
With your agreement, page visits and progress through the intake form are counted so it is possible to see which pages get read and where the form loses people. This is done without cookies and without storing anything on your device. Visits are counted using a one-way code derived from your IP address and browser type, mixed with a secret value that is destroyed every night — so once the day turns over there is no way to connect today's visit to yesterday's.
Your IP address is never written to our records in full. Where an address is kept at all, it is shortened first so it identifies a rough network rather than a connection. No third party is involved at any point.
If you subscribe to anything
Nothing is sent to you unless you ask for it. Where you do, we confirm the address first by emailing you a link, so nobody can sign you up for something you did not request. Every message carries a one-click unsubscribe, and an unsubscribe is honoured permanently — a record of it is kept precisely so it cannot be undone by accident.
What is stored on your device
This site sets no cookies. It stores two things in your browser's local storage, both of which stay on your device:
| Name | Purpose | Kept for | Optional? |
|---|---|---|---|
o6_consent_v1 |
Remembers the privacy choice you made on this page, so you are not asked again. | Until you clear it | No — without it we cannot remember that you said no |
o6_solution_intake_v2 |
Your unsent answers to the intake form, so you can come back to them. | Until you submit, reset the form, or clear it | Yes — decline "Save my progress" |
There is a session cookie in the system, but it belongs to the private administration area and is never set on a visitor's browser.
Your choices
- Change your mind at any time using the link, which appears in the footer of every page. Withdrawing is exactly as easy as agreeing, and it takes effect immediately.
- Global Privacy Control is respected. If your browser or an extension broadcasts a GPC or Do Not Track signal, it is treated as a decision to decline everything optional, and you are not shown a banner at all.
- Ask for a copy, a correction, or deletion by emailing hello@o6applied.com. You will not be charged for it and you will not be treated differently for asking.
Who else sees it
Your information is not sold, and it is not shared for anyone else's advertising. It is handled by a small number of providers that operate on our behalf:
| Provider | Role |
|---|---|
| Cloudflare | Serves the site and filters abusive traffic |
| Application and database hosting | Runs the site and stores submitted intakes |
| Resend | Delivers email notifications and confirmations |
| Microsoft 365 | The mailbox those notifications arrive in |
If a submitted enquiry later becomes a client relationship, its details may be copied into a customer-records system. That happens only for enquiries actually submitted, never for a partially completed form, and this page will name the system before any such transfer takes place.
How long it is kept
| Information | Kept |
|---|---|
| An unfinished intake you never submitted | 30 days, then deleted automatically |
| A submitted enquiry that did not become a project | 12 months |
| Free-text notes on an enquiry flagged as involving sensitive information | 12 months, then deleted regardless of status |
| A record of a privacy choice or an unsubscribe | Kept, because it is the proof the choice was honoured |
| Anonymous visit counts | 13 months, and not linkable to a person after the day they occurred |
Security
Traffic is encrypted in transit. The administration area requires a password and a second factor from an authenticator app, and is not reachable from the public site. Free-text notes on enquiries flagged as sensitive are encrypted where they are stored. Access is limited to the one person who runs O6 Applied.
If information is ever exposed in a way that creates a real risk to you, you will be told directly, along with the regulators Maryland law requires us to notify.
Do Not Track
Some browsers send a Do Not Track signal. There has never been an agreed industry meaning for it, so most sites state that they ignore it. This one does not: a Do Not Track or Global Privacy Control signal is treated as declining everything optional. In practice there is little to decline — this site does not track you across other websites under any circumstances, signal or no signal.
Children
This is a service for businesses. It is not directed at anyone under 16 and we do not knowingly collect information from them. If you believe a child has sent us something, write to us and it will be deleted.
Changes
If this policy changes in a way that affects what you agreed to, the version stamp at the top changes and you will be asked to make the choice again rather than having a new one assumed on your behalf.