Privacy &Cookies

When you visit this website we may collect, depending on your cookie choice:

• A privacy-respecting visitor identifier (a random ID, signed and stored as a first-party cookie).
• A truncated and salted hash of your IP address. We do not store the full IP by default.
• Approximate location derived from the IP — typically country, region, and city. Accuracy ranges from city level to roughly 50 km.
• Device and browser type, screen size, language, and timezone.
• The pages you view, how long you spend on them, and how far you scroll.
• Form submissions (Contact, Screening) — only the fields you fill in voluntarily.

We do not use third-party SaaS marketing trackers (no Google Analytics, no Facebook Pixel, no HubSpot, no Segment). The collection runs on infrastructure we control.

• Your full IP address (unless you explicitly opt in).
• Any contents of forms you started but never submitted.
• Session replay or video of your activity.
• Information from other websites, social profiles, or data brokers.

• Keep the site running and secure (always-on, necessary).
• Understand which pages and content are useful (analytics — opt-in).
• Recognize returning visitors who request a follow-up to coordinate a reply.
• Identify abusive or automated traffic and filter it out.

The legal basis is your consent (GDPR Art. 6(1)(a)) for analytics cookies, and our legitimate interest (Art. 6(1)(f)) for strictly necessary security cookies and form submissions.

• Raw events (page views, scrolls, clicks): up to 90 days.
• Aggregated session and visitor data: up to 12 months.
• Form submissions: until our relationship ends, then deleted on request or within 12 months of inactivity.
• Reviews you submit publicly: kept until you ask us to delete them.

Regardless of where you live, you may request:

• Access — a copy of all data we hold about you (GDPR Art. 15 / CCPA §1798.100).
• Deletion — erasure of your records (GDPR Art. 17 / CCPA §1798.105).
• Rectification of inaccurate data (Art. 16).
• Restriction of processing while a complaint is investigated (Art. 18).
• Portability — your data in a machine-readable format (Art. 20).
• Objection to processing based on legitimate interest (Art. 21).
• Withdraw consent at any time, with no effect on prior lawful processing.

File a request through the data rights form or by emailing isabellaxlaurent@protonmail.com with the subject "DSR request". We respond within 30 days (typically within 7).

EU residents may also lodge a complaint with their local supervisory authority. California residents may contact the California Privacy Protection Agency.

You can change your choice at any time:

We honor the Sec-GPC Global Privacy Control header and the legacy DNT Do Not Track header — if your browser sends either, analytics and marketing cookies stay off regardless of the toggle above.

Data controller: Isabella Laurent — Denver, Colorado, United States.

Email: isabellaxlaurent@protonmail.com