Privacy

Last updated August 1, 2026.

The short version

We are a naming agency. We do not sell advertising, we do not sell your data, and we have no interest in building a profile of you. The only personal information we hold is what you type into a form and send us deliberately.

This page explains exactly what that is, who else touches it, and how to get rid of it.

What we collect

We collect three things, and only three: what you type into the contact form, your email address if you ask for the newsletter, and a count of the pages people visit.

When you use the contact form. Your name, email address, company, a phone number if you would rather we called, and whatever you write in the message field. Only your email address and the message itself are required — the rest is there if it helps.

The form also has a checkbox for the newsletter. It is unchecked by default, and checking it is the only thing that adds your address to that list.

Your network address is also used at the moment you submit, to stop one source flooding the form. It is hashed immediately and the hash expires within the hour. We never store the address itself.

When you subscribe to the newsletter. Your email address, and nothing else. You will be asked to confirm by email before we send you anything.

When you simply read the site. Aggregate page-view counts, through Vercel's cookieless analytics. No cookies are set, nothing is stored on your device, and you are not followed from one site to another.

We do not use advertising or social media trackers, and there is no tag manager injecting third-party scripts into these pages.

How contact form messages are handled

This section describes something unusual enough to be worth stating plainly rather than burying.

The form receives a lot of unsolicited sales and link-building mail. To keep genuine enquiries from being lost in it, every submission that clears our automated bot checks is passed to an AI model, which classifies it as a genuine enquiry or as unsolicited outreach. Your name, email address, company details and the message are sent to that provider for the sole purpose of making that judgement — your phone number is not. It is not used to train any model, and it is not retained by us for any other purpose.

Nothing is deleted on the strength of that judgement. Messages classified as unsolicited are held for review rather than discarded, and if the classification fails or times out, the message is delivered to us normally. We would rather receive spam than lose a real enquiry.

If you would prefer your message not to be processed this way, email us directly instead of using the form.

Who else handles it

We use a small number of service providers. Each one sees only what it needs to do its job:

  • Vercel — hosts the site, and counts page views without cookies or any identifier that persists on your device.
  • Sanity — stores the site's content. It holds no visitor data.
  • Cloudflare — DNS, and the challenge that checks a form submission came from a person rather than a script.
  • Upstash — two jobs. Rate limiting, which stores a short-lived, irreversible fingerprint of the network address rather than the address itself. And a list of messages the spam classifier held back, so we get a reminder to check them: that list holds the sender's name, email and company and the classifier's one-line reason, never the message itself, and it is deleted as soon as the reminder is sent.
  • Anthropic — classifies contact form submissions, as described above.
  • Resend and Google Workspace — deliver and store the resulting email.
  • Mailchimp — sends the newsletter, if you asked for it.

We do not sell or share personal information, and we never have. Under California law that includes the narrower, technical senses of "sell" and "share" — we do not do those either.

How long we keep it

Enquiries stay in our email for as long as the conversation is useful, and are deleted when it is not. Newsletter subscriptions last until you unsubscribe, which every newsletter we send links to. Rate-limiting records expire within an hour.

If the spam classifier holds a message back, a short note about it — who it was from and why, never the message — waits until our next reminder email and is deleted then. If that reminder never runs, the note expires by itself within a fortnight.

Your rights

Wherever you live, you can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email us and we will do it — we are not going to make you fill in a form to be forgotten.

If you are in California, the CCPA gives you rights to know, delete, and correct, and a right not to be discriminated against for exercising them. If you are in the UK or the EU, the UK GDPR and GDPR give you those rights plus a right to object and a right to data portability, and a right to complain to your data protection authority. Our lawful basis for handling enquiries is legitimate interest — you contacted us and expect a reply — and for the newsletter it is your consent.

Children

This site is for people running businesses. It is not directed at children, and we do not knowingly collect information from anyone under 16.

Changes

If we add or drop a service provider, this page changes with it. The date at the top is the last time that happened.