Privacy notice
What happens to the address you give us
The short version: we keep it, we pass it to the service that sends our email and to our analytics, and nobody else gets it. The rest of this page says exactly what that means, including the parts we cannot undo.
If you only read this website
We count visits with PostHog, our analytics. When a page loads, PostHog records that it
was viewed and, when you leave, that you left. To tell one visitor from another it stores a
random identifier in your browser, in a cookie and in local storage, both named
ph_…_posthog. Like any web request, these reach PostHog from your browser, so
PostHog sees your IP address.
We do not record your screen or your typing. There is no advertising and no other tracker on this site, and its fonts are served from this site, not from a font service.
If you ask for a free scan
The scan form tells you this before you send it, and this page repeats it word for word.
We send:
- A confirmation link, now. Nothing is scanned until you click it.
- Your scan, when it is ready.
- Anything else we send is from us, about Recordstake. Reply “stop” and we stop — a person reads that mailbox.
Where it goes: we store it on AWS in the United States, pass it to SendGrid to send the messages above, and to PostHog, our analytics, which receives the address itself and not a disguised version of it. Nobody else receives it, and we do not sell it or trade it.
We keep the request itself — the address, the site and the date — as the record that you asked. There is no timer on it. Ask us to remove it and we will.
If you buy the Document Inventory
Card payments happen on Stripe's own page. Your card details go to Stripe and never reach us. Stripe also receives your email address and sends you its own receipt.
While you are buying, your browser holds a cookie that keeps you signed in to the purchase after you confirm your address.
We keep a record of the purchase: your address, the agency and its website, the amount, when you accepted the terms, and what happened to the payment. That record has no end date, because it is a record of money a public agency paid us. As with a scan, the address also goes to SendGrid, to send the confirmation link, our confirmation of the order and the report, and to PostHog, where it is the address itself.
If you open a report we sent your agency
A report opens after you confirm your address from a link we email you. That link works once, for thirty minutes. Once you confirm, your browser holds a cookie that lets you back into that report, and we keep a record of who confirmed which report.
Access ends twelve months after the report was produced. The access record is deleted automatically about a month after that. When you ask for the link, your address goes to SendGrid to send it and to PostHog as the address itself, the same as above.
What we cannot undo
There is no delete button yet. If you ask us to remove your address, a person deletes it from our own records by hand, except a purchase record, which we have to keep. Two things do not follow from that:
- PostHog. Deleting our record does not delete the analytics record. If you ask, we delete your person record in PostHog as a separate step, and we tell you when that is done.
- Mail already sent. Copies of messages already delivered stay in your mailbox and in SendGrid's delivery logs for as long as SendGrid keeps them.
Our application's own logs are deleted after 30 days.
Asking a question or asking us to remove something
Write to contact@recordstake.com. A person reads it. Tell us the address you used, and we will say what we hold and what we have removed.