Ironclad
Privacy Policy
This policy covers this website, ironcladintegrity.com, operated by Ironclad Digital LLC. The short version: there are no accounts and nothing to buy here, so the only information you actively give us is what you type into the contact form. Everything else is the ordinary web measurement and advertising described below, and you can turn most of it off.
Our apps have their own policies, because they behave differently from this site. Those are linked near the end.
Who we are
Ironclad Digital LLC, a Wyoming limited liability company.
1718 Capitol Ave, Cheyenne, WY 82001-4528, United States.
Privacy questions and requests: privacy@ironcladintegrity.com.
We are the party that decides what is collected here and why. Where state law uses the term, we are the business or controller for this site.
What you send us
The contact form asks for three things: your email address, the topic closest to what you need, and your message. Nothing else is required, and there is no name, phone, or company field. Whatever you choose to put in the message is up to you, so please do not send confidential operational data, credentials, or anything sensitive through it.
Submissions are delivered and stored by Formspree, a third-party form service, which then notifies us by email. We use it because a stored submission survives a bounced or deleted notification, and a lost inquiry is the worst outcome for a contact form. Your address is set as the reply-to so our answer reaches you. Formspree handles that data under its own privacy policy and security practices.
The form also carries two invisible anti-spam checks: a decoy field that people never see and a check that the form was not submitted faster than a human could type. When a submission is rejected by either one, our server logs record only the reason, never the content or the address.
What is collected automatically
This site is hosted on Vercel. Like any web host, its servers record standard request information such as IP address, browser and device type, the page requested, and the time of the request. That is a normal part of serving and securing a website.
We also run Google Tag Manager, which loads two measurement tools. Google Analytics 4 tells us how the site is used in aggregate: which pages get read, how people arrive, roughly where visitors are located, and what kind of device they use. Google Ads measures whether our advertising is working, and supports remarketing, which is what makes our ads appear to people who have already visited. Remarketing is the part most worth reading carefully, and it has its own section below.
We do not use enhanced conversions, which is a Google Ads feature that would send hashed customer data such as email addresses. If that ever changes, this policy will be updated before the feature is enabled, not after.
The categories, stated plainly
Several state laws expect this spelled out by category rather than in prose, so here it is in one place.
Identifiers. Your email address, if you use the contact form. IP address and device or browser identifiers, from ordinary web requests and from the Google tags. Collected from you directly and from your device. Used to reply to you, to keep the site running and secure, to measure usage, and for advertising.
Internet or network activity. Pages viewed, how you arrived, time on site, and similar interaction data, from the Google tags. Used to understand what is worth writing and building, and to measure advertising.
Approximate location. Derived from IP address by Google Analytics, at roughly the city or region level. We cannot see your precise location and do not try to.
Anything you type in the message field. Whatever you put there, which is why we ask you not to include sensitive details. Used only to answer you.
What we do not collect. No sensitive personal information as state laws define it: no government identifiers, no financial account or payment data, no precise geolocation, no health information, no biometric or genetic data, no racial, religious, union, or sexual orientation data, and no contents of your private communications beyond the message you deliberately send us. There are no accounts and no payments on this site, so there is nothing to collect for either.
We do not use any of this for automated decision-making or profiling that produces legal or similarly significant effects about you.
How long anything is kept
Contact form submissions: 24 months from the date you send them, after which we delete them from Formspree. Long enough that an inquiry which resurfaces still has context, short enough to be a real commitment rather than an indefinite hold. If the inquiry becomes an actual customer relationship, the resulting business and tax records are kept for as long as the law requires, and those are separate from this form.
Server and request logs: retained briefly by Vercel on its own operational schedule and used only for troubleshooting and security. We do not copy them anywhere or mine them.
Google Analytics: retained under the retention period configured in our Analytics property. Google caps event-level data at 14 months for standard properties, so nothing here is kept longer than that.
Google Ads and advertising cookies:retained under Google’s own schedules and the conversion and remarketing windows configured in our Ads account. Advertising cookies expire on their own, and you can delete them at any time.
You can ask us to delete your contact submission sooner than 24 months, and we will.
Cookies
This site sets no cookies of its own and stores nothing in your browser. The cookies you will find here belong to Google, set by the analytics and advertising tags above. They are used to tell repeat visits from new ones, measure ad performance, and support remarketing.
You can block or delete them in your browser settings at any time. Doing so does not break anything on this site. Nothing here depends on a cookie to work.
We do not currently show a cookie consent banner, because this site is aimed at operators and companies in the United States. If you are visiting from a region that requires one, use the browser and Google controls in the next section, and email us if you want your information removed.
Advertising, and the honest version of “selling”
We do not sell your information for money, and we never will. But we want to be straight about a real distinction rather than hide behind that sentence.
Because we run Google remarketing, information about your visit is shared with Google to show you our ads elsewhere. Several state privacy laws, including California’s, treat that kind of cross-context advertising as “sharing” or even as a “sale,” regardless of whether money changes hands. Under those definitions, this site shares information for advertising. We do not knowingly share the information of anyone under 16.
You can stop it in any of these ways, and all of them work:
Turn off ad personalization in your Google account at My Ad Center. Install Google’s Analytics opt-out browser add-on. Block third-party cookies in your browser. Or email us and we will handle it from our side.
Do Not Track and Global Privacy Control
Browsers send two different signals, and they are not the same thing, so here is what we do with each.
Global Privacy Control. We treat a GPC signal as a valid request to opt out of sharing your information for advertising, and we honor it.
Do Not Track. There is still no agreed industry standard for what a DNT header obligates a site to do, so we do not respond to it differently. We are telling you that rather than implying coverage we do not provide. Use GPC or the controls above, which do work.
How we use information
Contact form submissions are used to answer you and, if it turns into work, to keep the ordinary business record of that conversation. Analytics and advertising data are used to understand which parts of the site are useful and whether our advertising is worth continuing. Logs are used to keep the site running and to investigate abuse.
We do not build profiles about individuals, and we do not send marketing email to addresses that came in through the contact form. If you write to us, you get a reply, not a mailing list.
Who else touches it
Three service providers, each doing one job. Vercel hosts the site. Formspree receives and stores contact submissions. Google provides analytics and advertising. Each handles data under its own terms and privacy policy, and we do not authorize any of them to use your information for their own unrelated purposes.
Beyond those, we disclose information only when the law requires it, or to protect our rights, safety, or property. If the business is ever sold or merged, information may transfer as part of it, and this policy travels with it until it is replaced by one you are told about.
Your rights
Depending on where you live, you may have the right to know what we hold about you, to get a copy of it, to correct it, to delete it, to opt out of its use for targeted advertising or sharing, and to not be treated worse for exercising any of those. We extend all of them to everyone who asks, not only to residents of states that require it.
No retaliation. We will not deny you service, charge you a different price, or give you a lesser experience for making a privacy request. There is nothing to deny you here anyway, but the commitment stands.
How to ask. Email privacy@ironcladintegrity.com and tell us what you want done. No account required, no form to fill out, no charge. Because an email address is usually the only identifier we hold, we may need to confirm you control the address in question before we act on it, and we will not ask you for extra personal information just to verify you.
Authorized agents. Someone may make a request on your behalf if they give us written permission signed by you, or hold a valid power of attorney. We may still contact you directly to confirm.
How fast. We acknowledge requests within 10 days and answer them within 45 days. If something genuinely requires more time, we will tell you why before that deadline and take at most 45 days more.
If we say no.You can appeal by replying to our decision with the word “appeal” and anything you want us to reconsider. A different person than the one who made the original decision will review it, and we will respond within 45 days with a written explanation. If we still say no, you may contact your state attorney general.
Where information is held
We are a United States company and our service providers process this information in the United States. If you are visiting from outside the US, your information will be handled here, under US law, which may offer protections different from those where you live. Sending us a message means you understand that.
Links to other sites
Some pages link to app stores, published technical standards, and other outside sites. Those are not ours, this policy does not cover them, and once you follow a link that site’s own practices apply. We have no visibility into what happens after you leave.
Security
The site is served over HTTPS, and contact submissions travel encrypted to Formspree. We keep the amount of information we collect small on purpose, because the safest data is the data that was never collected. That said, no method of transmission or storage is perfectly secure, and we will not claim otherwise.
Children’s privacy
This site sells industrial software to working professionals and is not directed to children. We do not knowingly collect information from anyone under 13, and we do not knowingly share the information of anyone under 16 for advertising. If you believe a child has sent us something, email us and we will delete it.
Our apps
The apps behave differently from this website and each has its own policy: PlantHand, CYA Snapper, and Pigging Simulator. PlantHand, for example, collects nothing at all and makes no network connection. Nothing in this policy overrides those.
Changes to this policy
If this policy changes, the updated version will be posted here with a new date at the top. If a change is significant, such as adding a new category of collection or enabling a feature that sends more data to a third party, we will say so plainly in this section rather than quietly revising the text.
Contact
Privacy questions and requests go to privacy@ironcladintegrity.com. Anything else, including support, goes to support@ironcladintegrity.com. By mail: Ironclad Digital LLC, 1718 Capitol Ave, Cheyenne, WY 82001-4528.