What this site does with your details

Nothing is sent until you send it

Reading this site sends nothing about you anywhere. Nothing here follows you around: your details are sent only when you finish something and press its button. The site does count its own visits, without knowing who anyone is; that has its own section below.

There are two places you can send something. Start is the short set of questions behind every "What do you need?" on the site: what you answer there arrives in the office inbox as an email, and if you choose one of the paid services it also makes you an account. The Send documents page is different, and has its own section below.

What Start collects

Your answers

The choices you tapped, such as what happened this year or what the project is, and so which company or organization it belongs to. The office knows what you need before it calls, and nobody asks you the same thing twice. If you came from a free tool, the one line it showed you comes along too.

Your name

Because a reply needs somebody to be addressed to.

Email and phone

An account needs both: the email is where your sign-in code goes, and the office calls to set your time. A call from PSG needs a phone number and an email. A note needs an email, and the line you wrote.

Which language

Which of the three you were reading in, so the office can come back to you in it.

Where you were

The page on this site you came to Start from, and the tag on the link you followed if it had one. That is how the office knows an enquiry came from the payroll page rather than the front door.

Your browser also knows whichever site you arrived from. Start only ever passes on a page of this site; another site's address never reaches the email and is not written down.

Where it goes

Straight to the office, as an email. A request for a call or a note is not kept on this site: the only copy is the one in the office inbox. There is no mailing list.

Choosing a paid service makes you an account, because that is where the work happens. The practice then keeps you as a client: your name, email, phone and language, which service you started with (for the review, the changes you picked), and any time you book from your account. You sign in with a code emailed to you and then a passkey on your own device (your face, fingerprint or device PIN), so there is no password to steal.

Two other companies touch it on the way and no more: Resend, which delivers the mail, and Vercel, which hosts the site. Neither is asked to do anything with your details beyond delivering the message and serving the page.

If a call request or a note cannot be sent, the page tells you so and gives you the phone number, rather than saying thank you and dropping it.

What Start remembers about sending

A script pointed at Start could put unlimited mail in the office inbox, so the server counts. It keeps two things, in memory and nowhere else.

The network address a submission came from, for ten minutes, so that one visitor cannot send fifty. And a fingerprint of it — that address, your email and what you asked for — for half an hour, so that pressing the button three times produces one email instead of three.

Neither is written to disk, neither is a file anybody can open, and both are gone when the server restarts.

Documents you send

The Send documents page is the one place this site keeps what you send, because the office needs your documents to do your work. No account is needed.

Your files

Encrypted on your own device before they leave it, each with its own key, and kept in private storage with Vercel, which hosts the site. The keys are locked with a master key kept apart from both the files and the site's records, so a copy of either on its own opens nothing.

Who can open them

Only the office, signed in with a passkey: a face, a fingerprint or a device PIN, on top of an emailed code. Every time a file is opened, that is written down.

What is kept with them

Your email address, and your name and note if you gave them, so the office knows whose files they are and how to reach you. Also the page you sent them from.

Your network address

Not kept as itself. A scrambled version is kept so the page can limit how much one visitor sends, and it cannot be turned back into your address.

The emails it sends

The office gets a notice that documents arrived, with no files attached. You get a confirmation at the address you gave, so that if someone else used it, you would know.

What is kept in your browser

Which language you chose

One of three values, kept so the site does not ask you again on your next visit. It stays until you clear your browser.

How you arrived

A note the opening writes just before it hands you to a company page, holding that page's name and the time. It is read once and deleted. Alongside it, a single mark that you have seen the opening, so it does not replay at you.

A key for this visit

A random string, made up in your browser, so the site's visit count can tell one visit of several pages from several visits. It goes when you close the tab.

The site sets no cookies for visitors. The only cookie it ever sets is for signing in: the office's staff, and clients who have an account. None of the notes above leaves your browser except the key for your visit, which goes with the count described below, and none of them says who you are.

What this site does not do

There is no outside analytics on it. No Google Analytics, no tag manager, no advertising or social pixel, no session recording, no heat map, no A/B testing script. No cookie banner either, because there is nothing to consent to.

The browser reaches outside this site for two things, and neither of them is on the page you are reading now. Google Fonts serves the two typefaces the cinematic pages use. jsDelivr serves the three open-source animation libraries those same pages use. The reading pages under PSC carry their own copy of the fonts and load nothing from anywhere else at all.

That is not a matter of taking anyone's word for it. The site sends a content security policy with every page that names those two origins and forbids the browser from loading anything from any other.

Nothing here follows you around.

What the site counts

The site keeps its own count of visits, so the office can see which pages people read and whether the site is working. It runs on this site alone, and nothing goes to anyone else.

What a page notes

Its address, which site you came from (by name, like google.com, never the page you were on), the campaign name if a postcard or post linked you here, whether your screen is a phone, tablet or computer, which of the site's languages you read it in, and roughly where you are (city, state and country, from the network). When you leave: how long you looked, how far down you read, and how long the page took to appear.

What you tapped

Links and buttons, by the site's own words on them, such as Send documents, and the office's own phone number or email address when you tap one. Nothing you type is ever read. A label or campaign name that looks like someone's email address, phone number or a file name is thrown away.

Who you are

Never. There is no cookie, and your network address is not kept: it is scrambled with the date into a key that only counts you once a day, and tomorrow the same person scrambles to something else.

Turning it off

If your browser sends Global Privacy Control, nothing is counted. Counts older than thirteen months are deleted, and only the office sees the totals.

If you want it gone

Ask. Call or text (401) 405-8407, or email marla@msabater.com, and say so. If you made an account, the office can close it; there is no list to come off, because there is no list. Documents you sent through the Send documents page can be deleted the same way: ask.

How long an email stays in the office inbox, and how documents are handled once you are actually working with the office, are questions for the office rather than for this page. Ask them the same way and you will be told.