Legal · plain English

Privacy policy

Effective August 1, 2026 · updated October 6, 2026 · Barlo Digital · [email protected]

Updated October 6, 2026: this policy now covers Microsoft Clarity, which has run on this site since August 6, 2026. It should have been added that day, as this policy promises; the details are in the session analytics section below.
What changed on August 1, 2026: Google Analytics 4 went live on this site. This is the change the earlier version of this policy said would be called out at the top, so here it is. The details are in the analytics section below.

The short version: this site runs two measurement tools, both loaded through Google Tag Manager: Google Analytics 4, to see which pages people visit and where they came from, and Microsoft Clarity, to see how the pages are used. If you email us, we keep the thread like any professional inbox. We never sell your data. That's most of the policy; the rest is detail.

What this site collects today

Google Analytics 4 collects usage data: pages viewed, approximate location (city level), device and browser type, how you arrived (for example, a search engine, a social profile, or a link in an email we sent you), and interaction patterns like scrolling and outbound clicks. It uses cookies to distinguish visits. We use this to see which pages earn attention and which channels bring visitors, nothing more exotic than that. There are no advertising pixels and no ad retargeting on this site.

Microsoft Clarity records how visitors use the pages: clicks, scrolling, mouse movement and the page as it appeared. We review these as session replays and heatmaps to find what confuses people, and use cookies to group the pages of one visit. The details are in the session analytics section below.

One caveat for accuracy: the site is served from Cloudflare's edge network, and like any host, Cloudflare's infrastructure processes standard technical data (such as IP addresses and browser information) to serve pages and protect against abuse. That happens at the hosting layer; we don't use it to identify or profile visitors.

Email and engagement data

When you write to [email protected], we receive your email address and whatever you send. We use it to reply, to deliver what you bought, and to keep a record of the engagement. If you become a client, engagement records (audit deliverables, invoices, correspondence) are kept for as long as they're useful to the work and as required for ordinary business and tax records.

  • You won't be added to a marketing list just because you asked a question.
  • Audit deliverables are prepared for you and shared with you, not published, not reused as marketing without your written approval.
  • Access you grant to your ad or analytics accounts is read-only, used only to produce your deliverable, and you can revoke it the moment your audit is delivered.

Payments

Payments run through third-party processors (card, PayPal, Wise) on their own systems. We see the confirmation, not your card number. When a card payment completes, Gumroad notifies this site and the sale is recorded in Google Analytics: the product and the amount only, never your card details or your email. That is how we see which pages lead to purchases. Each processor has its own privacy policy that governs what happens on their pages. No card is kept on file and nothing auto-renews.

Analytics: Google Analytics 4, active since August 1, 2026

This is the section the old policy promised would take effect when tracking went live. It is active now. Google Analytics 4 (a Google LLC service) collects the usage data described above under Google's own privacy policy. We use it in aggregate; we don't use it to identify individual visitors, and Google Signals / ads personalization features are not enabled. Prefer not to be counted at all? The Google Analytics opt-out browser add-on blocks GA on every site, including this one. Microsoft Clarity, the second tool, is covered in the next section.

Session analytics: Microsoft Clarity, active since August 6, 2026

Microsoft Clarity (a Microsoft Corporation service) records clicks, scrolling, mouse movement and page layout so we can watch anonymous session replays and heatmaps and fix pages that confuse people. It runs under Microsoft’s own privacy statement. We use it to improve the site, not to identify you, and we never sell what it records. Want your Clarity data deleted? Email [email protected].

What we never do

  • Sell your personal information. Not to data brokers, not to "partners," not at all.
  • Share your information except with the service providers needed to operate (hosting, email, payment processing), or if the law requires it.
  • Publish anything about you or your accounts without your approval. That's the same proof policy that governs the rest of this site.

Your choices

Want to know what we hold about you, have it corrected, or have it deleted? Email [email protected] and we'll handle it directly. No forms, no runaround. We may keep records the law requires us to keep (invoices, for example) even after a deletion request.

Scope and audience

Barlo Digital serves US businesses; this site is business-to-business and not directed at children. This policy is written in plain English rather than statute-specific language. If your jurisdiction grants you specific privacy rights, email us and we'll honor the request wherever we reasonably can.

Changes

If this policy changes, the new version is posted here with a new effective date. Material changes (like analytics going live) get called out at the top, not buried.

Questions: [email protected]