What this site collects.
Which is not much.

This site has two forms. The newsletter form and the benchmark request form. Both ask for one thing, an email address, and both record the page you submitted from, the referring page if your browser sent one, and a timestamp. That is the entire set.

No name, no company, no phone number, no payment details. Nothing is required beyond the email address itself.

Form submissions post to an automation service, Make, which writes the row to a private Google Sheet that only I can read. If you requested the production cost benchmark, the same automation emails the PDF to the address you gave, from jeff@jeffschenck.com, through Google Workspace.

Those three processors are Make, Google Workspace and Google Sheets. No other party receives your address. It is not sold, rented, traded, appended to a data broker profile, or used to build a lookalike audience.

The newsletter is sent to people who asked for it. The benchmark is a single email with no follow-up sequence attached to it.

This site loads one analytics tag, Google Analytics 4, and nothing else. It sets two first-party cookies, _ga and _ga_<id>, which Google uses to tell visits and sessions apart; both expire after two years. It records which pages are viewed and which buttons are clicked, such as Book a call or the newsletter form. I use it for aggregate numbers: how many people came, from where, and what they did. jeffschenck.com and donarus.com report into the same Analytics property, so a visit that crosses between the two counts once.

There are no advertising pixels, no session recording, no heatmaps, and nothing shared with anyone for advertising. If you would rather not be counted, Google publishes a browser opt-out add-on at tools.google.com/dlpage/gaoptout, and blocking cookies for this site works too.

Fonts are self-hosted on this domain rather than pulled from a font CDN, so no font provider is told which pages you read.

Video embeds are click-to-load. YouTube receives nothing at all until you deliberately press play on a specific video. Until then the thumbnail is the only thing that touches their servers.

Booking a call opens Calendly, and some pages link to LinkedIn, YouTube and Donarus Creative Studios. Once you land on any of those, their privacy policy governs, not this one.

Every newsletter carries an unsubscribe link. Beyond that, email jeff@jeffschenck.com and ask to see what is held on you, correct it, or delete it. There is no form, no ticket and no verification hoop. It is one person reading one sheet, and I will action it and confirm when it is done.

Addresses are kept while the list is active. When someone unsubscribes the row is removed rather than suppressed and retained.

Depending on where you live you may have specific rights under the GDPR, the UK GDPR or the CCPA, including access, correction, deletion, and the right not to have your data sold. Your address is never sold, so that last one is satisfied by default. The lawful basis for holding it is your consent, given when you submitted the form, and you can withdraw it at any time by the method above.

Data is processed in the United States. This site is not directed at children under 13 and no age data is collected.

Changes to this policy will move the date at the top of this page. Material changes will be noted in the newsletter rather than made quietly.

This page describes actual practice in plain English. It is not legal advice and it has not been reviewed by counsel.