Privacy Policy
Cranial Thunder LLC, a Virginia limited liability company, runs cranialthunder.com. This policy explains what the site collects, why, and what you can ask us to do with it.
The short version
- No cookies. No analytics. No advertising trackers.
- If you use a contact form, we get what you type, and we use it to reply.
- Our web server keeps standard access logs for about 14 weeks.
- We do not sell or share your information for advertising.
What we collect
Contact forms. Your name, email address, organization (if you give it), your message, and on the Banking page, any answers you choose to send. The form also includes your IP address and the time you sent it. The form sends this to us by email. It is not stored in a database on the web server.
Spam protection. To limit abuse, the server keeps a one-way hash of your IP address and the time of each submission for up to one hour. Hidden form fields and a timing check help filter automated spam.
Our forms also use Cloudflare Turnstile to tell people from bots. When a page with a form loads, Turnstile runs a check in your browser and sends Cloudflare technical signals such as your IP address and browser details. It does not set advertising cookies. See Cloudflare's Turnstile privacy addendum.
Server logs. Like most websites, our server records each request: IP address, date and time, the page requested, the referring page, and your browser's user agent. We use these logs to keep the site secure and working. They are deleted after about 14 weeks.
Self-assessment pages. The interactive example assessments on this site run entirely in your browser. Your answers are not sent to us or saved.
Fonts and images. We host fonts and images ourselves. Apart from Turnstile on pages with a form, loading this site does not contact Google, social networks, or other third parties.
How we use it
- To reply to you and to discuss or deliver an engagement you ask about.
- To protect the site and our mail server from abuse.
- To meet legal obligations.
We keep correspondence as long as it is useful for the business relationship or required by law, and delete it when you ask unless we must keep it.
Who else sees it
We run our own web and mail servers in the United States. We do not use outside marketing or data services. We share information only if the law requires it, or to protect our rights or the safety of others.
Your choices and rights
You can ask us to tell you what we hold about you, correct it, or delete it. Use the contact form and say what you would like. We will confirm your request and respond within 30 days.
New York residents. We protect personal information with reasonable administrative, technical, and physical safeguards, as the New York SHIELD Act requires, and will notify you of a breach as the law requires.
Virginia residents. Virginia's Consumer Data Protection Act applies to businesses above size thresholds this site does not meet. We still honor the access, correction, and deletion requests described above.
California residents. We do not sell or share personal information as the CCPA defines those terms. You may ask to know, correct, or delete your information as described above.
Visitors from the EU, EEA, and UK. Cranial Thunder LLC is the controller of your information. We rely on our legitimate interests (replying to you and keeping the site secure) and on steps you ask us to take before entering a contract. You have the right to access, correct, erase, restrict, or object to processing, and to data portability. You may complain to your local data protection authority. Your information is processed in the United States.
Children
This site is for businesses. It is not directed at children, and we do not knowingly collect information from anyone under 16.
Changes
If we change this policy, we will update the date at the top of this page.
Contact
Questions about privacy? Use the contact form.