What we collect, and why.

What we collect.

When you submit our contact form, we collect the information you choose to enter: your name, email address, company or project name, website, services of interest, project stage, preferred start timing, and message. We also keep standard server logs, which include details like your IP address, browser type, and the pages you requested. We also use Google Analytics 4 to measure site activity such as page views, clicks on calls to action, PDF downloads, email-link clicks, service-page navigation, and whether the contact form was submitted successfully. We do not send the contents of your message, your name, or your email address to Google Analytics. We do not run accounts or take payments.

How we use it.

We use the information from the contact form for a single purpose: to read your inquiry and respond to it. Server logs exist to keep the site secure and running. Analytics events help us understand whether the site is useful and whether people can reach us successfully. We do not use any of it to build advertising audiences or feed third-party models.

We may send a short automated acknowledgment before a founder responds to your inquiry. This does not subscribe you to a mailing list.

Who processes it.

We keep our stack small. The site is hosted on Vercel, which serves the pages and generates the server logs described above. Contact form email is handled through Resend. Google Analytics 4 and Google Tag Manager process the analytics events described above. These providers process data to deliver their services to us, under their own terms.

The contact form also uses Cloudflare Turnstile to tell people from spam bots. Turnstile checks the submission in your browser and may process technical signals like your IP address to do it; it does not read your message or show you puzzles unless something looks automated.

We use Upstash Redis to limit automated submissions and duplicate emails. It stores short-lived counters and send reservations using keyed hashes of email addresses and IP addresses, not the contents of your message. These operational records expire within 24 hours.

Cookies and tracking.

We do not set advertising cookies, and we do not run retargeting pixels. Google Analytics may set first-party analytics cookies or use similar identifiers to measure visits and interactions on this site. We do not use Google Analytics for ad personalization.

We do not sell or share your data.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are used under the California Consumer Privacy Act (CCPA). The only parties that touch your data are the service providers above, acting on our behalf to run the site, measure site performance, and deliver your message.

How long we keep it.

We keep your contact details and message only as long as we need them to handle your inquiry and any follow-up. Once a conversation is finished, or whenever you ask us to, we delete it. Server logs are retained for a short period for security and then rotated out.

Your rights.

You have the right to access the personal information we hold about you, to ask us to correct it, and to ask us to delete it. Depending on where you live, these rights come to you under laws such as the General Data Protection Regulation (GDPR) or the CCPA. We honor these requests regardless of where you are.

To exercise any of these rights, email us at hello@publicaccessory.com. Tell us what you would like us to do and we will take care of it. We will not charge you or make you jump through hoops to delete your data.

Contact us.

Public Accessory, LLC is based in Wilton Manors, Florida. For any question about this policy or about the information we hold, email hello@publicaccessory.com and a founder will answer you directly.