Last updated: November 2, 2026
When you use the booking or contact form we receive what you type: your name, email address, company, project details, message and any preferred meeting time, plus the answers you choose to give in the "About you" card. With a form submission we also record the IP address and browser user agent it came from, to help spot spam.
We run our own analytics. When you visit, your browser sends us events: the pages you view, the links and buttons you click, the page that referred you, any campaign tags in the link you followed, the width of your browser window, the fact that you copied something from a page (what kind of thing and how long, never the text), and the totals a calculator showed you. Events carry a random visitor id and a visit id, and if you later submit a form, the submission carries the visitor id too, so we can see what someone read before getting in touch.
The same events also go to PostHog, a product analytics service we use to see how pages are used, including recordings of visits in which everything typed into a form is hidden. PostHog processes this for us, sets no cookies of its own here, and is switched off by the same opt-outs described below. We do not use Google Analytics, advertising networks or tracking pixels, and we do not sell or share the data.
Some posts end with a few optional questions about your setup. Answers are stored with your random visitor id, not your name, in our own database. If you then leave an email to get a reply, it is sent to us like any other enquiry, together with your answers and the post. You can skip or dismiss the questions; the site works the same either way.
We set two first-party cookies for analytics: _hid, a random visitor id that lasts two years, and _hsid, a visit id that expires after thirty minutes without activity. A third, _hint, is set only if you opt out (see below). Your answers to the "About you" card, and which post surveys you have finished or dismissed, are kept in your browser's local storage so nothing asks twice.
If your browser sends the Global Privacy Control signal, we send no analytics at all. You can also open any page with ?internal=1 at the end of the address to switch analytics off for that browser, and ?internal=0 to switch it back on. Blocking cookies also works; the site behaves the same either way.
Everything is stored in our own Amazon Web Services account in the United States: form submissions in a database, analytics events as files queried with Amazon Athena. Notification emails are sent through Amazon SES. AWS processes this data on our behalf as our infrastructure provider.
We keep form submissions for as long as we need them to work with you, and analytics events until we delete them. Ask us and we will delete your submission and the events tied to your visitor id.
The site is served over HTTPS only and sits behind AWS WAF, which blocks known-bad traffic and limits how often any one address can submit forms. Access to the data is limited to us.
Questions, or a request to see or delete what we hold about you: hello@hool.co.