The short version. This website does not use cookies, analytics, or trackers. The only personal information we collect is what you type or pick in the contact form: your name, your email address, your message and, if you choose to tell us, which description of yourself and which budget range fit. We use it to reply to you and talk about your project. That's the whole story. The long version follows, because the law (rightly) asks us to spell it out.
1. Who we are
Handbird Inc. ("Handbird", "we", "us") is a Delaware corporation that builds software for web3 and other clients. For the personal information described in this policy, we are the "controller": the company responsible for it.
- Mailing address: [COMPANY ADDRESS]
- Contact: the contact form on our website
- Website: [WEBSITE URL]
2. What we collect
Through the contact form. When you send us a message, we receive:
- your name,
- your email address,
- which of our audience descriptions you pick (optional),
- your budget range (optional), and
- whatever you write in the message field.
The form also sends a timestamp of the moment you started filling it in. We use it only to filter out automated spam (a form completed in under a few seconds was not completed by a person); it tells us nothing else about you, and it is not used to profile or track you. The form also contains a hidden anti-spam checkbox that people never see or fill in; a person's browser sends nothing for it, and a submission that does fill it in is discarded as automated.
Please only include what we need to understand your project. In particular, never send private keys, seed phrases, passwords, or API secrets through the form (or any other channel, really).
Automatically, by our hosting provider. We do not run analytics and we get no dashboard of who visits. But like every website, this one is delivered by a hosting provider, [HOSTING PROVIDER], whose servers automatically receive technical information whenever your browser requests the page: your IP address, browser type and version, the date and time of the request, and the pages requested. The provider keeps those logs for security and abuse prevention under its own privacy policy ([HOSTING PROVIDER PRIVACY URL]). We do not use those logs to identify you.
What we don't collect. No cookies. No analytics. No advertising pixels. No fingerprinting. No user accounts, payments, or newsletter sign-ups. We do not buy personal information about you from anyone, and we do not combine what you send us with data from other sources.
3. Why we use it, and on what legal basis
Scroll sideways to see the whole table.
| What we do | What we use | Legal basis (for visitors in the EU/EEA, UK, or Switzerland) |
|---|---|---|
| Reply to your message and discuss a potential project | Name, email, message, and the optional audience and budget choices | Steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)); where you write on behalf of a company, our legitimate interest in responding to business inquiries (Art. 6(1)(f)) |
| Keep a record of our correspondence, prevent spam and abuse, and establish or defend legal claims if we ever have to | Name, email, message; the submission timestamp; the hosting provider's logs | Our legitimate interests in running a secure website and protecting our business (Art. 6(1)(f)) |
| Comply with legal obligations (for example, a lawful request from an authority) | Whatever the law requires | Legal obligation (Art. 6(1)(c)) |
A few plain-English notes:
- Filling in the form is voluntary. The only consequence of not doing it is that we cannot reply to you.
- We will not add you to a marketing list or send you newsletters because you contacted us. If we ever ask whether you would like updates, that will be a separate, clearly labelled question, and you can say no or change your mind at any time.
- We do not make automated decisions about you and we do not profile you.
4. Who else sees your information
We use a small number of service providers ("processors") who handle data on our behalf and under our instructions. They may not use your information for their own purposes.
Scroll sideways to see the whole table.
| Provider | What they do with it | Where | Their privacy policy |
|---|---|---|---|
| [FORM PROVIDER] | Receives your form submission (name, email, message, the optional audience and budget choices, and the submission timestamp) and forwards it to our inbox[FORM PROVIDER RETENTION NOTE] | [FORM PROVIDER LOCATION] | [FORM PROVIDER PRIVACY URL] |
| [HOSTING PROVIDER] | Serves the website and keeps the technical server logs described in section 2 | [HOSTING PROVIDER LOCATION] | [HOSTING PROVIDER PRIVACY URL] |
| [EMAIL PROVIDER] | Hosts the mailbox where your message lands and from which we reply | [EMAIL PROVIDER LOCATION] | [EMAIL PROVIDER PRIVACY URL] |
Beyond those providers, we may disclose personal information only:
- to our professional advisers (lawyers, accountants) where they need it to advise us, under confidentiality;
- to authorities, courts, or other parties where the law requires it or where it is necessary to protect our rights, your safety, or someone else's; or
- to a successor if Handbird is ever merged, acquired, or reorganised, in which case this policy continues to apply to your information.
We do not sell personal information. We do not "share" it for cross-context behavioural advertising (the meaning that term has under California law). No third party collects information about your online activities over time and across different websites through this site.
5. International transfers
Handbird is based in the United States, and your information is processed there (and wherever our providers listed above operate). If you contact us from the EU/EEA, the UK, or Switzerland, you are sending your information directly to us in the US. Where any of our providers move personal information out of those regions on our behalf, they do so under recognised safeguards, such as the European Commission's Standard Contractual Clauses and the UK Addendum, or participation in the EU-US Data Privacy Framework where the provider is certified. You can ask us through the contact form on our website for details of the safeguards that apply to a specific provider.
6. How long we keep it
- Contact-form messages and our replies: [RETENTION PERIOD] after our last exchange with you, unless you become a client (then the correspondence is kept with the project records for as long as the engagement and our record-keeping obligations require), or unless we need to keep it longer to comply with a legal obligation or to deal with a dispute.
- Copies held by the form provider: [FORM PROVIDER RETENTION].
- Hosting-provider server logs: kept by [HOSTING PROVIDER] on its own schedule for security purposes; we do not hold a copy.
You can ask us to delete your messages sooner; see section 7.
7. Your rights, and how to use them
Wherever you live, you can ask us to:
- tell you whether we hold personal information about you, and give you a copy;
- correct anything that is inaccurate;
- delete it;
- give it to you in a portable format;
- limit or stop a particular use of it, including objecting to uses based on our legitimate interests; and
- stop contacting you.
How: send your request through the contact form on our website, giving the email address you used when you first contacted us (that is usually all the verification we need; if we are not sure it is you, we will ask a question only you could answer). We will reply within 30 days, or sooner if the law that applies to you says so, and we will not charge you for a request unless it is clearly excessive. If we say no to something, we will explain why, and you can ask us to reconsider. You can also have an authorised agent make a request for you, provided we can confirm the agent's authority. We will never treat you differently for exercising a privacy right.
If you live in a US state with a consumer privacy law (California, Virginia, Colorado, Connecticut, Texas, Oregon, Delaware and others): those laws grant rights like the ones above, plus the right to opt out of sales, targeted advertising, and profiling. We do none of those things, so there is nothing to opt out of. But the rights listed above are yours regardless of whether a particular statute technically applies to a company of our size, and we will honour them.
If you are in the EU/EEA, the UK, or Switzerland: in addition to the rights above, you have the right to object at any time to processing based on our legitimate interests (Art. 21 GDPR), the right to withdraw any consent you have given (this does not affect processing that already happened), and the right to lodge a complaint with your data protection authority: for example, the Information Commissioner's Office (ico.org.uk) in the UK, the Federal Data Protection and Information Commissioner (edoeb.admin.ch) in Switzerland, or the supervisory authority of the EU country where you live (a list is at edpb.europa.eu). We would appreciate the chance to sort things out first, but you do not have to come to us before going to them.
8. Children
This website is for businesses and the grown-ups who run them. We do not knowingly collect personal information from anyone under 16, and we do not want to. If you believe a child has sent us something, tell us through the contact form on our website and we will delete it.
9. Cookies, tracking, and "Do Not Track"
We do not set cookies and we do not use analytics or tracking technologies of any kind, which is why there is no cookie banner. The site's fonts and scripts are served from our own hosting, not from third-party networks that could observe you.
Your browser may send a "Do Not Track" or "Global Privacy Control" signal. Because we do not track you, sell your information, or share it for advertising, there is nothing for those signals to switch off: the setting they ask for is already our default.
If we ever enable a security feature at our hosting provider that requires a cookie (some bot-protection features do), or add any tool that changes what is described here, we will update this policy first.
10. Security
The site is served over HTTPS. Messages you send us are stored in access-controlled mailboxes protected by strong authentication, and only the people who need to read them do. Our providers maintain their own security programmes. That said, no method of transmission or storage is completely secure, and we cannot promise absolute security, which is one more reason not to send us secrets through the form. If a security incident affects your personal information, we will notify you and the relevant authorities as the law requires.
11. Changes to this policy
When we change this policy we will post the new version here and update the effective date at the top. If a change is material, for example if we start using a new category of provider or begin collecting something new, we will also put a visible notice on the website for at least 30 days, and, if we have your email address, we may email you. Earlier versions are available on request.
12. Contact
Questions, requests, or complaints about privacy: use the contact form on our website or write to Handbird Inc., [COMPANY ADDRESS]. We have not appointed a data protection officer or an EU/UK representative, because our processing is limited to answering the messages people send us; please contact us directly.