Privacy
One page, in the same plain English as the rest.
A privacy policy is usually where a firm hides things in small type. This one is short because there is very little to tell you.
Privacy policy
What we collect
Only what you type into a form on this site: your name, work email, company, rough headcount, whether a customer or auditor is waiting on this, and anything you write in the message box. And, if you wake Red Squirrel on the home page, what you type to it (see below). If you reached this site through a link we tagged, the form also sends two short labels naming where that link was posted and which piece it belonged to, so we know which of our writing brought you. Nothing else. There is no account to create and nothing to log in to.
What we do with it
We reply to you. That is the whole purpose. If the conversation turns into work, the same details end up in our own records so we can run the engagement. They are not added to a mailing list, including our newsletter, unless you sign up for it yourself. They are not sold, not rented, not traded for a referral, and not used to retarget you with advertising.
Who else sees it
A form submission travels through Cloudflare, which hosts this site, and lands in our email. Both of those companies can technically see what passes through them, the same way a courier can see an envelope. Nobody else receives it.
The newsletter is separate and opt-in. If you type your address into the newsletter box, it goes to Buttondown, the service that sends the newsletter, and is used only to send it. Every issue has an unsubscribe link. Sending us the contact form never signs you up.
Tracking
This site counts visits with Cloudflare Web Analytics, which tells us which pages are read and which sites link here. Cloudflare states that it does not collect or use visitors' personal data. There are no advertising pixels, no session recording and no third party fonts. We set no cookies of our own. Cloudflare may set a security cookie to tell human traffic from automated traffic, and it keeps standard server logs, including IP addresses, for security and abuse prevention.
Two things your browser does keep. One: if you submit the form and delivery fails, what you typed is held in that tab's session storage so the form can come back filled in rather than blank. It never leaves your machine, it is deleted the moment a message gets through, and closing the tab clears it.
The other: if you arrive through a link we tagged, your browser keeps those two labels, and the time you arrived, in local storage, so they can go with a form you send later. They leave your machine only if you send the form, and the time never does. Clearing this site's data removes them.
You can check every word of that with your browser developer tools, which is the point of writing it this way.
Red Squirrel, the chat on the home page
Red Squirrel is an AI model, not a person, and it only runs if you press the button that wakes it. What you type, together with the conversation so far, is sent through Cloudflare to Google's Gemini API, whose model writes the reply. We do not store the conversation, log its contents, or attach it to you: it lives in your browser tab and is gone when you close it. Google processes it under the Gemini API terms. On Google's unpaid tier those terms allow Google to use what you send to improve its products, which can include people reading it; on the paid tier they do not. Either way, treat it as not private. Cloudflare's standard logs, including your IP address, apply here as they do to every request, and the IP address is also used to limit how fast one visitor can send messages.
So do not type anything into it you would not put in an email to a stranger. If you want a real conversation, write to Austin.
How long we keep it
Enquiries that do not turn into work are deleted within about a year. Records for actual clients are kept for as long as the business and our tax obligations require, and no longer than that.
Having it deleted
Write to pagreen@stonepathit.com and ask. You do not need a reason and you will not get an argument. We will confirm when it is done.
Children
This is a business to business service. It is not directed at anyone under 18 and we do not knowingly collect anything from them.
Changes
If this page changes in a way that matters, the date below changes with it, and the old version is available on request.
Last updated 5 October 2026
Still here?
Then you are the kind of person who reads the boundaries first, which is who this firm is built for.