Privacy · v1.1

We ask first.

One analytics tool, and it stays off until you say yes. No advertising pixels, no fingerprinting, no data sold. The whole policy fits below in plain English. If anything is unclear, mail privacy@cosmos-ai-lab.com.

01

What we collect

Email + message when you fill the contact form (/contact) or mail us directly. We store these to reply; we delete after we reply, unless you become a paying customer or ongoing correspondent.

Newsletter email when you subscribe to the Field Journal. Stored at our ESP (Resend) for delivery; you can unsubscribe via every email's footer link.

Server logs from our hosting (Vercel) for 7 days. IP addresses + timestamps + paths. Used for abuse detection only.

02

What we don't

  • No analytics at all unless you accept it. Decline and Google is never contacted.
  • No advertising tracking pixels.
  • No fingerprinting or device IDs.
  • No cross-site behavior tracking.
  • No data sale, ever.
  • No CRM autoresponder. One human reads your message.
03

Cookies

Two entries in your browser's own storage, neither transmitted to our servers: cal-theme (your theme choice) and cal-analytics-consent (whether you accepted analytics, so we stop asking).

Analytics cookies only exist if you accept them. On your first visit a bar appears at the bottom of the page. Until you choose, Google Analytics is not loaded at all — no script is fetched, no cookie is set, Google is never contacted. Accept and it loads with IP anonymisation on. Decline and it never loads, on that visit or any future one.

This is stricter than Google's own Consent Mode, which still sends anonymous pings before consent. We send nothing.

04

Third parties

  • Vercel hosts the site. Standard server logs as above.
  • Resend sends our newsletter. Email + status only.
  • Cal.com handles "Schedule a call" bookings. They have their own privacy policy.
  • Google Fonts serve our display fonts. Loads from fonts.gstatic.com on first visit.
  • Google Analytics 4 measures how the site is used — only after you accept. Page URL, referrer, approximate location from a truncated IP, device and browser type. We use it to see which pages are read, nothing else. IP anonymisation is on. We run no advertising features, no remarketing, and no Google Signals. If you decline, it is never loaded.
  • Sentry receives error reports when something breaks, so we can fix it. Stack trace, page URL, browser. No form contents.
05

Your rights

You can ask us to delete every record we have of you. Mail privacy@cosmos-ai-lab.com; we reply within 7 days, confirm what we have, and delete on request.

EU/UK residents have additional rights under GDPR (access, rectification, erasure, portability, restriction, objection). We honor all of these.

06

Changes

If we change this policy, we update the date at the top of the page and email everyone on the newsletter. Material changes (new third parties, new collection categories) get 30 days notice before taking effect.

Current version: v1.0 · 2026-05-05.