Privacy Policy | Obsidian Web Co.

Obsidian Web Co. ("we", "us", "our") respects your privacy. This policy explains what information we collect when you visit obsidianwebco.com or contact us, how we use it, and your rights.

We collect as little data as possible. We do not sell your information, ever.

1. Information We Collect

Information you give us

When you fill out a contact form or email us directly, you may provide:

Name
Email address
Phone number (optional)
Business name (optional)
Project details, budget range, and any message content you send

Information collected automatically

When you visit the Site, we or our analytics providers may collect:

Your IP address (anonymized for analytics)
Browser type and version
Operating system
Pages visited, time on page, referring URL
Anonymized session recordings (via Microsoft Clarity) — mouse movement, clicks, scrolls; no keystrokes are recorded

Cookies

The Site uses strictly necessary cookies for basic function, plus Google Analytics 4 and Microsoft Clarity (both with IP anonymization enabled). You can disable cookies via your browser; the Site will still function.

2. How We Use Your Information

We use the information we collect to:

Respond to your inquiry, quote, or contact form
Send you a proposal or follow-up related to a project you've asked about
Improve the design, performance, and content of the Site
Fulfill any paid engagement you enter into with us
Comply with applicable law

We do not send marketing emails unless you opt in, and we never share, rent, or sell your information to third parties.

3. How We Share Your Information

Contact-form submissions are processed by Formspree. Analytics data is processed by Google Analytics 4 and Microsoft Clarity. The Site is hosted by Vercel. We share information only as necessary for these providers to perform their services.

We will disclose information if required by court order, subpoena, or other lawful legal process.

4. How Long We Keep Your Information

Contact form submissions: up to 24 months, then deleted unless you become a paying client.
Client project files: duration of the engagement plus 7 years for tax and legal compliance.
Analytics data: Google Analytics 14 months; Microsoft Clarity 12 months.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal information we hold
Correct any inaccuracies
Delete your information (subject to retention requirements above)
Object to certain processing activities
Port your data to another provider

To exercise any of these rights, email drake@obsidianwebco.com. We respond within 30 days.

California residents (CCPA/CPRA)

You have the right to know what categories of personal information we collect and to request deletion. We do not "sell" personal information as defined by CCPA.

EEA/UK residents (GDPR)

The legal bases for our processing are (a) your consent (for optional analytics), (b) contract performance (for client work), and (c) our legitimate interests in running and improving the Site.

6. Security

We follow industry-standard practices: HTTPS/TLS encryption in transit, restricted access to form submissions (only Drake Ryan), and no storage of sensitive payment or identity data on the Site. No internet transmission is 100% secure, but we take your data seriously.

7. Children

The Site is not directed at children under 13, and we do not knowingly collect information from children. If you believe a child has submitted information, contact us and we will delete it.

8. International Users

The Site is hosted in the United States. By using it, you consent to the transfer of your information to, and processing in, the U.S.

9. Changes to This Policy

We may revise this policy at any time. Any changes take effect when posted here. Material changes will be flagged at the top of this page for at least 30 days.

10. Contact

Privacy questions, data requests, or complaints? Email drake@obsidianwebco.com with the subject "Privacy Request."

Obsidian Web Co.
Drake Ryan, Sole Proprietor
Lynchburg, Virginia