Privacy

Short version

dee.agency is a one-person studio. I don't run ad networks, I don't sell or share your data, and I don't have third-party advertising trackers on this site. Two things measure the site: a self-hosted Umami instance (anonymous page-view counts, no cookies, no cross-site tracking) and Vercel Speed Insights (anonymous Core Web Vitals, no identifiers).

What I collect when you contact me

When you submit the brief form or email hi@dee.agency, your message and your email address sit in my inbox. If you fill in the optional fields (name, deadline, scope notes, links), those sit there too. I use them to reply, scope the work, and — if we move forward — invoice you. I don't import you into a CRM and I don't sell or share your data with third parties.

The form posts to /api/contact, a Vercel function I run. It stores nothing server-side beyond what's needed to forward your message to my inbox. A honeypot field catches the bots; humans never see it.

Site analytics

Umami (self-hosted at tail.deeflect.com) records anonymous page views, referrers, country, browser, and screen size. It uses no cookies, stores no IP addresses, and runs on infrastructure I own. It does not follow you to other sites.

Vercel Speed Insights measures anonymous loading and rendering performance (Core Web Vitals). It uses no cookies and stores no identifiers. See vercel.com/docs/speed-insights for details.

No advertising cookies. No fingerprinting. No cross-site tracking. No consent banner because there is nothing to consent to.

What I never collect

No phone numbers (I don't run a call funnel). No payment data on this site (Stripe handles invoicing on its own surface). No location beyond country-level analytics. No social-graph data.

How long I keep data

Inbound inquiries that don't become engagements: kept until the conversation has been closed for 12 months, then deleted on request or on my own routine clean-up.

Engagement records (signed contracts, invoices, correspondence): kept for 7 years after engagement close, because California and federal tax rules require it. Project working files (designs, code, docs) live in your GitHub from day one and are yours regardless.

Your rights

You can ask me what data I have on you, ask me to correct it, or ask me to delete it (subject to the tax-record retention above). Email hi@dee.agency with the subject line "Privacy request" and I'll respond within 30 days. California (CCPA/CPRA) and EU (GDPR) residents have these rights by law; everyone gets them here.

Hosting and processors

The site runs on Vercel (US). Email lands in my inbox via standard email infrastructure. Stripe processes invoices for engagements. Umami runs on a VPS I own. Each of those processors handles your data under their own terms; I don't add tracking on top.

Changes

If I change anything material I'll update the date at the top. Routine clarifications I make in place. If something changes that affects how data already collected is used, I'll email people affected before the change takes effect.

Questions

Email hi@dee.agency. One person reads it, and that person is me.