Legal
Privacy policy
Last updated August 6, 2026
The short version
This site runs its own analytics and nothing else. There is no Google Analytics, no advertising pixel, no session recorder and no third party tracker of any kind. No data is sold or shared with advertisers, and there is no marketing list you can be added to without asking.
Three things are collected: anonymous traffic statistics, anything you type into the contact form, and anything you type into the assistant. Each is covered below.
Who is responsible
Charliez Services, United States. The business is fully remote and publishes no street address, so contact for privacy matters is by email or phone. For any question about this policy or any request about your data, email charliezservices@gmail.com or call (949) 596-4187.
Traffic analytics
Every visit records a page view in a database owned by Charliez Services. The purpose is to understand which pages are useful and where visitors come from, so the site can be improved.
What is recorded:
- The page path, the page title and the referring site
- An anonymous identifier stored in a first party cookie
- Device class, browser name and operating system name, derived from the user agent string
- Approximate country, region and city, derived at the network edge by the hosting provider
- Viewport size, time on page and Core Web Vitals measurements
- Campaign parameters if present in the URL, such as utm_source
What is deliberately not recorded:
- Your IP address. The address is combined with a salt that rotates every day and hashed. Only the hash is stored, which makes it useful for spotting repeat traffic within a single day and useless for identifying anyone afterwards.
- Your name, email address or any other identifier, unless you type one into the contact form or the assistant.
- Anything you type into a form field, other than what you deliberately submit.
- Any browsing you do on other websites. There is no cross site tracking here because there is no third party script capable of it.
Bots and crawlers are filtered out before anything is written.
Cookies
Two cookies are set, both first party, both strictly functional. Neither is used for advertising.
| Cookie | Purpose | Lifetime |
|---|---|---|
| cz_v | An anonymous visitor identifier so repeat visits are not counted as new people | 12 months |
| cz_s | Groups page views into a single visit | 30 minutes of inactivity |
Both are HTTP only, which means page scripts cannot read them, and both are set with SameSite Lax. Because they are strictly necessary for the site's own measurement and carry no personal data, no consent banner is shown. Deleting them in your browser removes any link between your visits, and the site continues to work exactly as before.
The contact form
What you type into the contact form is stored: your name, email address, and whichever of phone, company, website, budget, timeline, selected services and message you chose to provide. It is used to reply to you and to run the engagement if one follows.
Alongside it, the visit that produced the submission is recorded: the page you were on, the site you arrived from, and any campaign parameters. This is how it is possible to tell which pages generate real enquiries.
Enquiry records are kept for 24 months from the last update, then deleted automatically by a scheduled job that runs every night. If work follows, business records are kept separately for as long as tax and contractual obligations require.
The assistant
The chat assistant is powered by the Claude API, provided by Anthropic. When you send a message, that message and the conversation so far are transmitted to Anthropic so a reply can be generated. The full transcript is also stored in the site's own database.
Do not type passwords, card numbers, account credentials, health information or any other sensitive data into the assistant. It is not designed to receive them, and it is instructed to tell you to stop if you start.
If the assistant records an enquiry on your behalf, that becomes a record exactly like a contact form submission and is treated the same way.
Transcripts are kept for 12 months and then deleted by the same nightly job. A transcript attached to an enquiry follows the enquiry retention period instead, so the conversation that produced a piece of work is not lost before the record of the work is.
Anonymous traffic rows are deleted after 13 months.
Who else processes this data
Only the providers needed to run the site:
- Vercel, hosting and content delivery. Processes requests and holds short lived server logs.
- Neon, the database. Holds the analytics, enquiry and transcript records described above.
- Anthropic, the Claude API. Processes assistant messages to generate replies.
None of these are advertising companies and none receive data for their own marketing purposes. No data is sold to anyone, ever.
Your rights
You can ask what is held about you, ask for it to be corrected, or ask for it to be deleted. Email charliezservices@gmail.com and it will be handled within 30 days at the outside, usually much faster.
For a deletion request tied to analytics rather than an enquiry, note that the records genuinely are anonymous, so identifying which rows belong to you is generally not possible. Clearing your cookies achieves the same practical result immediately.
California residents have specific rights under the CCPA including the right to know, the right to delete and the right to opt out of sale. There is nothing to opt out of here because no personal information is sold or shared for cross context behavioural advertising. The other rights apply and are honoured on request.
Security
Traffic is served over HTTPS with HSTS. The database is access controlled and encrypted at rest by the provider. Administrative access is protected by a password hashed with bcrypt and a signed session token, and administrative pages are excluded from search indexing.
No system is perfectly secure. If you believe you have found a vulnerability in this site, email charliezservices@gmail.com with the details and it will be looked at promptly.
Children
This site is for businesses and is not directed at anyone under 16. No information is knowingly collected from children. If you believe a child has provided information, email charliezservices@gmail.com and it will be deleted.
Changes
Material changes to this policy will be reflected in the date at the top of this page. Continuing to use the site after a change means the revised policy applies.