Privacy policy
Two things get collected. Here is what they are.
Last updated: · Effective from the same date.
Template notice — remove before launch. This policy is a starting point that matches the site as built. Have it reviewed by a lawyer in your jurisdiction, and update it whenever you add anything that touches visitor data.
Short version: the contact form and Google Analytics. Nothing is sold, nothing is used for advertising, and you can have any of it deleted by emailing privacy@qwith.com.
1. Who I am
Qwith LLC (“Qwith”, “I”, “me”) is a one-person front-end engineering practice operating from 1100 Congress Ave, Suite 400, Austin, TX 78701, USA. I am the data controller for information collected through www.qwith.com.
Privacy contact: privacy@qwith.com · +1 (512) 555-0142
2. What I collect
2.1 Information you send me
When you submit the contact form I receive the name, email address, company, project type, budget range and message you typed. If you email or call instead, I have whatever you chose to include.
Legal basis (GDPR): Article 6(1)(b), steps taken at your request prior to entering a contract; and 6(1)(f), my legitimate interest in responding to business enquiries.
2.2 Analytics
I use Google Analytics 4 to count page views and see which case studies get read. It sets cookies and collects a truncated IP address, approximate location (city level), device and browser type, referring URL, and the pages you view. IP anonymisation is enabled. I do not use Google Signals, advertising features, remarketing audiences, or cross-device tracking.
Legal basis (GDPR): Article 6(1)(a), consent, where consent is required in your jurisdiction; otherwise Article 6(1)(f), legitimate interest in understanding site usage.
2.3 What I do not collect
- No advertising or remarketing pixels.
- No session recording or heatmaps.
- No newsletter list — there is nothing to unsubscribe from.
- No third-party fonts, embeds, or CDN requests. The site loads nothing from anyone but its own origin (and Google Analytics, if enabled).
- No sale or sharing of personal information, as those terms are defined under the CCPA/CPRA.
3. Cookies
The site itself sets no cookies. Google Analytics sets
_ga and _ga_<id>, which expire after two years and
distinguish one visitor from another. Blocking them costs you nothing — every
page works identically with cookies disabled, in private browsing, or behind a
content blocker.
The site also uses one sessionStorage key,
np_booted, purely so the boot animation does not replay on every
page. It contains no personal data and is discarded when you close the tab.
4. Who else sees it
- Google LLC — analytics processing. Google privacy policy.
- My email provider — receives and stores contact form messages so I can reply.
- My hosting provider — serves the site and keeps short-lived server logs, including IP addresses, for security and abuse prevention.
That is the complete list. I do not sell, rent, or trade personal information, and I share it with no one else except where the law requires it.
5. How long I keep it
- Contact form messages: 24 months from your last message, then deleted.
- Analytics data: 14 months, the GA4 retention setting I use.
- Client project records: 7 years, where tax or contract law requires it.
6. Your rights
Depending on where you live you may have the right to access, correct, delete, port, or restrict processing of your personal information, to object to processing based on legitimate interest, and to withdraw consent at any time. California residents additionally have the right to know, to delete, to correct, to opt out of sale or sharing (I do neither), and not to be discriminated against for exercising any of these.
To use any of them, email privacy@qwith.com. I respond within 30 days, and usually within 4 business hours — same promise as everything else here. I do not require an account or any additional information beyond what is needed to find your records.
If you are in the EEA or UK and are unhappy with my response, you can complain to your national supervisory authority.
7. Security
The site is served over HTTPS only. Contact form submissions are transmitted encrypted. Enquiry data is only ever read by me, on accounts protected with two-factor authentication. No security is absolute and I will not pretend otherwise — but there is very little here to steal, by design.
8. Children
This is a business-to-business site not directed at children. I do not knowingly collect information from anyone under 16. If you believe I have, email me and it will be deleted.
9. Changes to this policy
If this policy changes materially, the date at the top changes and a note appears here describing what changed. I do not quietly rewrite history.
Questions about any of this? Get in touch — reply within 4 business hours.