Privacy Policy

Summary

This notice covers the Thornveil website, not deployments of Thornveil products. Thornveil is operated by its owner in Florida and is intended for a US audience. The current site has no account registration, contact form, or advertising scripts. It loads Plausible Analytics and Google Fonts, so visiting a page can send technical request data to those services and the hosting provider. Contact is handled separately through email.

Analytics

The site is configured to load Plausible's hosted analytics script for thornveil.ai. According toPlausible's data policy, it measures page URLs, referral sources, browser, operating system, device type, and approximate location (country, region, and city) in aggregate. Requests include an IP address and user agent; Plausible says it uses these to generate a daily identifier without storing the raw values. It says it uses no cookies or persistent identifiers, does not track visitors across days or websites, and processes visitor data in the EU. These are the provider's descriptions, not a guarantee of this site's legal compliance.

The owner reports not having set up a Plausible account and reports observing the script load on the live site. Loading the script alone does not establish whether analytics events are accepted or retained. Account ownership, report access and sharing, exports, retention, and deletion settings remain unverified.

Hosting and fonts

Based on the owner's live-account and response-header checks, Netlify provides hosting, CDN delivery, and DNS for this site. Hosting providers may process access and security logs, including IP addresses, browser details, requested URLs, and request times.Netlify's privacy statementdescribes its collection and processing of device and service data. The owner reports that no Netlify Log Drains are connected. This does not mean Netlify keeps no logs or that no other copies exist. Logging settings, applicable retention and deletion periods, and any additional services remain to be confirmed.

Fonts are requested from Google Fonts. Google'sFonts privacy FAQexplains that these requests include the visitor's IP address, the requested URL, and headers such as the user agent and referrer. Google says the Fonts API does not set or log cookies and does not use this information for targeted advertising.

Cookies and browser storage

The current site code does not set cookies or use browser storage for tracking. That statement does not cover additional services a hosting provider may enable or external sites you choose to visit. Those services have their own policies.

Email contact and retention

Email links open your email app, sometimes with a subject and message template. Nothing is submitted through a website form. If you send the email, Thornveil receives your address, message, and any attachments so it can respond; email providers also process the correspondence. The contact mailbox uses Google Workspace. The owner confirms that only they have access to the mailbox; this does not exclude processing by the email provider. A retention schedule and deletion process have not yet been established for this notice. Please do not send classified, controlled, or sensitive information through this public contact channel.

Google'sGmail retention documentationexplains that, where Google Vault is used, retention rules and legal holds can prevent permanent deletion. The owner reports an active Google Workspace Business Plus subscription, which includes Vault. Specific Vault rules and holds, backups, automatic deletion, forwarding, and connected third-party app access have not been verified. No provider default is presented here as Thornveil's retention policy.

Details awaiting owner confirmation

Before treating this notice as final, the owner needs to verify any additional providers, analytics collection and access, and retention and deletion practices for email, analytics, and logs. The applicable legal requirements and a documented process for privacy requests also remain to be established. Operating in Florida and targeting a US audience alone do not determine which privacy laws apply. No specific retention period, response deadline, or compliance certification is asserted here. Product data handling depends on the product, deployment settings, and connected services; consult the relevant product documentation and agreement rather than this website notice.

Contact

Questions about this policy: jesse@thornveil.ai