Privacy

The form

If you fill in the audit form I store what you typed (name, email, phone, what eats your week, your questions) with the page you sent it from, the campaign or referring link that brought you, your country, your IP address and your browser's user-agent string. It goes into a Cloudflare D1 database and I get a notification. I use it to reply to you and to prepare the call. It is never sold, rented, or added to a marketing list.

The form is checked for bots by Cloudflare Turnstile, under its privacy addendum.

Page views

Each page view writes one row: the page, how far down it you scrolled, how long it was visible, whether you clicked through to the form or touched a field, your viewport width, your country, the referring link and your user-agent. No IP address. It also notes a few clicks: the buttons that lead to the form or a booking, starting or sending the form, and how much of a video you watched. And for heatmaps, which part of the page each click lands on and how far down you got, never what you type. Heatmaps only show them as totals per page.

If you say yes to the cookie, I may also record your visit to the page (where you scroll and click, and what shows on screen) and watch it back to fix the site. Anything you type into a field is masked, and recordings are deleted after 90 days. Sometimes I ask one short question in a box at the bottom of the page. That only happens if you said yes, and your answer is kept with your visits so I can see what brought you here.

If an email from me had a link, the link carries a short code (?r=) so I know which email brought you. Links I post on social profiles and videos go through /go/ and are tagged with the channel. I use this only to see which outreach works. Your country comes from Cloudflare, which reads it from your connection; no cookie holds it. Cloudflare Web Analytics may also be on; it is cookieless and gives me counts, not people.

Cookies

This site sets two cookies of its own and none from anyone else.

• wv: a random id so your visits to this site join up, and a form you send later is tied to the link that first brought you. It lasts up to 400 days, is never shared, and no ad or tracking company sees it. It is optional.
• wc: your answer on the cookie banner, yes or no, for six months, so I don't ask again. It is needed for the site to respect your choice.

In the EU, the UK, Switzerland, Brazil and Quebec, wv is set only after you say yes on the banner. Elsewhere it is on unless you say no. A browser that sends Global Privacy Control is treated as a no everywhere. You can change your answer any time with "Cookie settings" at the bottom of every page; a no deletes wv.

Your browser also keeps a few settings on your device that never leave it. It remembers the light or dark theme. For the current tab only, it keeps the link you arrived from and where you were on the page.

Other services load only when you use them. Cloudflare Turnstile checks the form for bots. If you book a call, the booking page is my own. Your name, email and the time go into my Google Calendar, and Google sends the invite with the Meet link. Fonts come from Google Fonts and Fontshare, which see your IP address when they send them.

Email I send you

I email firms who haven't asked, which is what cold outreach is. Addresses come from public sources: a company's own website and public business listings. Those messages can carry a one-pixel image that tells me the message was opened, and they carry an unsubscribe link. Unsubscribe, or reply with "stop", and the address is suppressed: I will not email it again. Reply once and you are in an ordinary conversation, nothing more.

Text messages

If you tick the texts box on the form, I store your phone number, that you ticked it, and when. I text you only about your request: replies, scheduling, reminders. Up to 4 texts a month. Reply STOP and you get no more texts; reply HELP for help. Full terms are on the terms page.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text opt-in data and consent are never shared with any third party. The only company that sees your number is Telnyx, the carrier that delivers the texts.

Client work

When I build for a client I handle their data under the agreement we sign, only for that build, and it stays in their systems. Nothing from a client's data ever comes into this site.

Who else sees it

Cloudflare hosts the site and the database. Google Workspace carries my email. Resend and Discord deliver the notification when the form is submitted. Telnyx delivers texts. Amazon Web Services stores the visit recordings. Each of them sees the data it needs to do that and nothing else. No advertising networks, no data brokers.

Keeping and deleting

Form submissions are kept while there's a reason to: a live conversation, a build, the records a business has to keep. Page-view rows are kept as counts. Email william@wrenautomation.com and I will tell you what I hold about you, correct it, or delete it. No form, no account, no wait: one email to a person who reads it.

Changes

If this changes, the date at the top changes with it.