/ Privacy

Privacy, by design.

The short version: this site sets no cookies, runs no third-party trackers, and collects only what it needs to count visits in aggregate and to answer the briefs you choose to send. That's why there's no cookie-consent banner — there's nothing to consent to.

No cookies, no banner — on purpose

A missing consent banner usually means a site forgot one, or is quietly ignoring the rules. Here it's the opposite: the stack was built so that consent isn't required. The ePrivacy rules trigger a banner when a site stores or reads non-essential information on your device. This one doesn't. The only thing kept in your browser is your light/dark theme choice — written only when you click the toggle, which is exactly the kind of strictly-functional storage that's exempt.

Analytics

Visit statistics come from Umami, a privacy-first, cookieless analytics tool — and it is proxied first-party through this domain, so no third-party analytics script ever loads in your browser. It measures aggregate things: page views, referrer, approximate country, and device/browser type. Your IP address is used only in transit — to derive that rough country and a daily-rotating, salted hash for counting unique visitors — and is not stored. There is no cross-site tracking and no way to single you out; no individual profiles are built. Umami acts as a data processor.

The contact form

If you send a brief, the name, email, organisation, and message you type are emailed to plamen@stratolattice.com (delivered via Resend; a hidden honeypot and Cloudflare Turnstile guard against spam). The lawful basis is simply responding to the enquiry you initiated. A copy of each submission may be retained for up to 90 days as a delivery safeguard, then deleted automatically. The form is the only place this site asks for personal data — and only because you chose to send it.

What this site does not do

No Google Analytics, no Meta Pixel, no LinkedIn Insight Tag, no advertising or marketing cookies, no cross-site tracking, and no data sold or shared with anyone beyond the processors named here: Umami for statistics, Resend for email delivery, and Cloudflare for hosting and edge security.

Your choices

You can ask what's held about you, request a copy, or ask for deletion — email plamen@stratolattice.com and it will be handled promptly. In practice the only personal data that can exist is a brief you sent; deleting it means removing it from the inbox and the retention log.

Back home

Last updated · June 2026