Trust

Privacy Policy

Last revised: April 13, 2026

Short version: No cookies. No third-party tracking scripts. No fingerprinting. We run our own privacy-first analytics that collect anonymized, aggregated data. The only personal data we store is what you type into the contact form. We don't sell it, share it, or send you marketing emails.

What we collect

Contact forms: Your name, email address, budget range (optional), and project description. That's the only personal information we store.

Site analytics: We collect anonymized, aggregated performance and usage data to keep our site fast and reliable. This includes:

Page paths visited (not full URLs — no query strings or fragments)
Referring domain (e.g., "google.com" — not the full search query URL)
Device type (mobile, tablet, desktop) and browser family (Chrome, Firefox, Safari)
Country (derived from server-side headers, not geolocation APIs)
Core Web Vitals performance metrics (page load speed, layout stability)
Scroll depth and time on page (for content quality, not surveillance)

How we anonymize: Your IP address is never stored. We compute a one-way hash (SHA-256) of your IP, browser, and the current date. This lets us count unique visitors per day without being able to identify anyone. The hash rotates daily and cannot be reversed. No cookies are set. No browser fingerprinting is performed.

Analytics data is retained for 90 days, then permanently deleted.

Where it goes

All data is stored in a Supabase PostgreSQL database hosted in the United States. Only Tony (the founder) accesses it. Contact form records stay until you ask us to delete them. Analytics data is automatically purged after 90 days.

What we don't do

No Google Analytics or any third-party analytics service
No advertising pixels or remarketing tags
No cookies of any kind
No session replay or heatmap tools
No browser fingerprinting
No selling, renting, or sharing your data with third parties
No email marketing list — we will not add you to a newsletter

Chatbot

Conversations with the on-site AI assistant stay in your browser's sessionStorage. They are deleted when you close the tab. The conversation never leaves your device, is never sent to Anthropic or OpenAI, and is never stored on our servers. The chatbot answers from a static knowledge base baked into the site.

Third parties

Two, and that's the whole list:

Supabase — stores contact form submissions and anonymized analytics data
Google Fonts — delivers the typefaces used on this site. Google may log the IP address of the request; no cookies are set

Your rights

You can request a copy of your data, correction of inaccurate data, or full deletion by emailing legal@otrovertlabs.com. We honor requests within 30 days.

Children

Services are not directed at children under 16. We do not knowingly collect information from them.

Changes

Material changes to this policy will be posted on this page with an updated "Last revised" date. If the change affects how existing data is handled, we will notify anyone who has submitted an inquiry.

Contact

Privacy questions: legal@otrovertlabs.com
OtrovertLabs is a trade name of Venture Horizon LLC, Newark, Delaware, USA.