Privacy

Who this is

HatchTag is a one-person web design and development practice based in Florida, United States. It designs and builds websites for small businesses, and it operates this site.

For anything on this page, write to sales@hatchtag.dev.

What this site collects

Anything you type: nothing

This is worth being precise about, because most sites cannot say it. There is no contact form on hatchtag.dev. Every "get in touch" button is a mailto: link — it opens whatever email program you already use, with the subject line filled in. Your message goes from your email account to ours. It never touches this website, and this website never sees it.

Once an email arrives, it is an email: it sits in our inbox, hosted by our email provider, and it is kept as long as the correspondence is useful.

What your browser sends by itself

Like every web server, ours records requests: the page asked for, the time, your IP address, your browser's user-agent string, and the page you arrived from if your browser sent one. This happens at the hosting level, before any of our code runs. It is used to keep the site working and to investigate abuse, and it is not combined with anything else or used to build a profile of you.

Your cookie choice

When you answer the cookie banner, we record that you answered it. The record holds a random identifier that is not linked to you, the categories you chose, how you chose them, the time, the page you were on, your browser's user-agent string, and your IP address as a one-way hash — scrambled with a secret key so it can show that two records came from the same place but cannot be turned back into an address.

This exists so that if anyone ever asks whether consent was obtained, there is an answer. It is deliberately the thinnest record that can do that job: no name, no email, no page content.

Cookies and local storage

Here is the complete list of what either of our sites puts on your device. Not a representative sample — the whole thing.

Both are strictly necessary: one remembers your answer to the cookie question, and the other holds a list you built on purpose. Neither tracks you, and neither is shared with anyone.

The categories in the cookie panel

The panel offers Analytics and Marketing as well. Nothing currently runs in either, and leaving them switched on grants nothing today. They exist so the consent machinery is in place before it is needed, rather than being bolted on afterwards.

• Analytics. Counts of visits and page views. If this is ever switched on it will be named here, with the provider, before it runs.
• Marketing. Measuring whether an advert led to an inquiry. Nothing of this kind runs today.

If that changes, this page changes with it — named provider, named cookies — and anything optional stays blocked until you say otherwise.

Client previews

The previews page shows client sites running live in small frames. Those sites are hosted here, on this same domain, so viewing one does not hand you to a third party and does not load anything from anywhere else. Each frame is only loaded when it scrolls into view, and it is skipped entirely if your browser or operating system asks for reduced data.

The Layer8Secure preview includes a working shop. It is a demonstration of a shop: it takes no payment, asks for no card details, and the "request a quote" button opens your email program in exactly the same way as everything else here. See the Layer8Secure privacy notice for how that site is run.

If you become a client

Working together means exchanging more than a page view: your business details, the content and images for the site, logins to a domain registrar or a host if you ask us to handle those, and ordinary email back and forth. That information is used to do the work you hired us for, and for nothing else.

It is not sold, rented, or handed to advertisers. It is shared only with the services needed to deliver the work — a web host, a domain registrar, an email provider — and only the part each of them needs. Credentials you share are used for the agreed task and can be changed by you at any time; we would rather you rotate a password after a job than leave one lying around.

Your choices

• Change your cookie choice at any time. Open cookie preferences. It is also in the footer of every page.
• Global Privacy Control. If your browser or an extension sends the GPC signal, we treat it as an instruction to keep everything optional switched off. It is honoured automatically, with no extra click, and we record that we honoured it. You can still switch something on by hand afterwards if you want to, and that choice will be respected over the signal.
• Clear everything. Clearing cookies and site data for this domain in your browser removes the consent record and any saved shopping list. You will be asked about cookies again on your next visit, which is the correct outcome.
• Turn off JavaScript. The site still reads. With scripting off, nothing optional could run even if it existed.

Your rights

Florida's Digital Bill of Rights and comparable laws in other states set thresholds — large revenues, large volumes of personal data — that a practice this size does not come close to meeting. So rather than claim an obligation we do not have, here is the commitment we will actually keep: ask, and we will do it.

• Ask what we hold about you, and we will tell you.
• Ask for a copy, and we will send it.
• Ask us to correct something, and we will correct it.
• Ask us to delete it, and we will delete what we are not legally required to keep.
• You will not be treated differently for asking.

Email sales@hatchtag.dev and expect a reply within 30 days. There is no form and no fee.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. There is no such data here to sell.

How long anything is kept

• Your cookie choice: 180 days in your browser, then you are asked again.
• The consent record on our server: kept as proof for as long as the choice could be questioned, and reviewed yearly.
• Server request logs: kept by our web host on their schedule, typically a few weeks.
• Email you send us: kept while the conversation is live, and while a project is running or under warranty.
• Client project files: kept while we work together and for a reasonable period afterwards, so the site can be picked back up.

Children

This is a service for businesses. It is not directed at children, and we do not knowingly collect information from anyone under 13. If you believe a child has sent us something, email us and it will be deleted.

Security

The site is served over HTTPS. The consent log is stored outside the part of the server that answers web requests, and the addresses in it are hashed rather than recorded. Accounts used to run the site are protected with multi-factor authentication where the provider offers it.

No site is perfectly secure, and anyone who tells you otherwise is selling something. If you find a problem with this one, we would rather hear it from you than from someone else — email sales@hatchtag.dev.

Changes

When this notice changes, the date at the top changes with it. If the change is substantive — a new category of data, a new recipient, a tracker where there was none — the cookie banner is shown again so the choice is made against the current facts rather than the old ones.

Contact

sales@hatchtag.dev reaches a person, not a ticket queue.