The Short Version
This site collects no data about you. No cookies. No analytics. No tracking pixels. No fingerprinting. Every byte is served from the same origin, with one narrow exception: if you begin the contact form, a Cloudflare Turnstile verification challenge loads to filter automated submissions. Until that moment, no third-party request is made. If you never fill out the contact form, we will have zero knowledge that you visited.
Information We Do Not Collect
- No cookies or local storage of any kind
- No analytics or tracking scripts
- No third-party fonts, images, or scripts
- No IP address logging beyond standard Cloudflare infrastructure
- No browser fingerprinting
- No advertising identifiers
- No social media integrations or share buttons
You can verify this yourself: open your browser's developer tools and inspect the Network tab. You will see zero external requests until you begin the contact form, at which point exactly one appears: Cloudflare's Turnstile verification.
Information You Choose to Provide
If you submit the contact form, we receive:
- The name or pseudonym you enter
- The email address you provide
- The inquiry type you select
- The message you write
This information is sent via email through Postmark (our transactional email provider) and is used solely to respond to your inquiry. We do not add you to any mailing list, newsletter, or marketing database.
Form submissions are verified by Cloudflare Turnstile to filter automated traffic. The Turnstile script loads only when you begin the form, and its processing is governed by Cloudflare's privacy policy. Turnstile does not use cookies for advertising or cross-site tracking.
Infrastructure
This site is hosted on Cloudflare Pages. Cloudflare provides DDoS protection, SSL termination, and edge caching. Cloudflare's infrastructure may process connection metadata (IP addresses, TLS handshake data) as part of normal operations. This is governed by Cloudflare's privacy policy.
We have not enabled Cloudflare Analytics, Web Analytics, or any optional data collection features.
Security
This site implements the following security measures:
- Content Security Policy restricting all resources to same-origin, save Cloudflare's verification challenge
- HTTP Strict Transport Security with preload
- All browser permissions disabled via Permissions-Policy
- Cross-origin policies locked to same-origin
- No JavaScript frameworks or third-party dependencies
- PGP key published at /pgp.txt for encrypted correspondence
- Signed integrity manifest at /integrity.txt: the SHA-256 digest of every deployed file, PGP-signed
Security concerns can be reported to [email protected] or via our security.txt.
Terms of Service
This website is provided for informational purposes. The content describes advisory services offered by Tony Rossi Consulting. No content on this site constitutes a contract, guarantee, or obligation to provide services.
Engagement terms. All engagements are governed by individual agreements executed between Tony Rossi Consulting and the client. Services are provided by referral and at our discretion.
Intellectual property. All content, design, and code on this site is the property of Tony Rossi Consulting. You may inspect the source code (we encourage it), but reproduction for commercial purposes requires written permission.
Limitation of liability. This site and its content are provided "as is" without warranties of any kind. Tony Rossi Consulting is not liable for any damages arising from the use of this website.
Changes to This Policy
If this policy changes, the "last updated" date at the top of this page will reflect the change. Given that we collect no data, changes are unlikely.
Contact
Questions about this policy can be directed to [email protected] or via the contact form.