Privacy

What this website collects

Google Analytics 4, and nothing else. It tells us how many people read a page and which pages get read — the questions behind whether writing more of them is worth the time.

What GA records on our behalf:

• Pages viewed, and how long the visit lasted
• Approximate location, derived from IP at city level
• Device type, browser, operating system, and screen size
• Referrer — the site or search that sent you here

GA4 does not log or store full IP addresses. We do not enable Google Signals, advertising features, remarketing, or demographic reporting, so nothing here is joined to an advertising profile. We have no user accounts, so nothing is tied to a named person. Two cookies are set — both listed on the cookie page, along with how to refuse them.

There is no tag manager, no advertising pixel, no session recording, no chat widget, no embedded third-party media, and no form. Fonts are served from this domain rather than a font CDN, so loading a page does not disclose your visit to anyone but Google Analytics.

Google as a processor

Google Ireland Limited processes analytics data on our instructions under Google’s data processing terms. Data may be transferred to and processed in the United States under the EU-US Data Privacy Framework.

Analytics data is retained for 14 months and then deleted automatically. We do not export it anywhere, and we do not sell, rent, or share it.

There is currently no consent banner on this site, so analytics loads on arrival rather than after you agree. That is set out honestly, including why it is a gap, on the cookie page.

Hosting and server logs

The site is static files served from Amazon S3 through Amazon CloudFront. Request logging is not enabled on the distribution, so we hold no access logs, no IP addresses, and no request history.

Amazon Web Services processes your request in order to deliver the page, and operates its own infrastructure-level security telemetry that we do not control and cannot read.

If you contact us

Emailing hello@appriddle.com means we hold your address, your message, and anything you attach, in our email system. We use it to reply and to carry out any work we go on to agree.

• Lawful basis. Legitimate interest in responding to an enquiry, and performance of a contract once one exists.
• Retention. Enquiries that do not lead to work are deleted within 24 months. Correspondence tied to an engagement is kept as long as the contract and any professional or tax obligation requires.
• Sharing. We do not sell, rent, or share enquiry data. It is visible to our email provider as processor, and to nobody else.

Data we handle during an engagement

Client work is governed by the contract and any data processing agreement for that engagement, not by this page. Where we act as a processor, we act on the client’s instructions and the client remains controller. We prefer not to hold production personal data at all, and design engagements to use synthetic or anonymised data wherever the work allows.

Your rights

Where the UK GDPR or EU GDPR applies you may request access to the personal data we hold about you, correction, erasure, restriction, portability, or object to processing based on legitimate interest. Email hello@appriddle.com and we will respond within 30 days.

In practice such a request concerns email correspondence, since analytics data is aggregate and holds no identifier we could match to you. If you want analytics to stop entirely, the opt-outs on the cookie page take effect immediately.

Changes

Material changes are reflected in the date at the top of this page. If we begin collecting anything further — a contact form being the likely reason — this page will say so before that goes live, not after.