Legal
Privacy & cookies
What this site collects, why, who else sees it, and how to change your mind. Short, because the site does little.
Who is responsible
Jethro LLC, registered in Delaware, US, is the controller of the personal data described here. For anything on this page — access, deletion, a complaint, or a question — write to hi@jethro.agency.
What we collect
The contact form
Three fields: your name, your email address, and the description of the problem you want solved. They are sent straight to hi@jethro.agency as an email, through Mailjet. Nothing is written to a database — this site has none. Your message lives in an inbox, like any other email you would have sent us.
Analytics
Google Analytics 4, to see which pages get read and where visitors come from. In the EEA, the UK and Brazil it stays off until you turn it on: until then Google receives a cookieless signal that a page was viewed, with nothing stored on your device and no identifier that can follow you. Elsewhere it runs by default and you can switch it off at any time, below.
We do not advertise, we have no advertising account linked, and advertising storage is refused everywhere regardless of what you choose. We do not sell or share personal data, in the sense California gives those words. If your browser sends a Global Privacy Control signal, analytics is refused automatically and you are not asked.
Server logs
Vercel, which hosts the site, records requests — including IP address and browser user agent — to serve pages, absorb attacks and diagnose failures. These are operational records, not analytics, and they are not linked to anything above.
Why we are allowed to
- Analytics — your consent (GDPR Art. 6(1)(a), LGPD Art. 7, I). Withdrawing it is one click, below, and takes effect immediately.
- The contact form — steps taken at your request before any agreement (GDPR Art. 6(1)(b), LGPD Art. 7, V). You wrote to us; we need the message to reply.
- Server logs — legitimate interest in keeping the site up and secure (GDPR Art. 6(1)(f), LGPD Art. 7, IX).
Who else sees it
- Google (Google Analytics) — page views, and only when analytics is allowed.
- Mailjet — delivers the contact form as email.
- Vercel — hosts the site and holds the request logs.
- Cloudflare — answers DNS for the domain.
All four are United States companies, so data about visitors in the EEA, the UK or Brazil is processed outside those regions under the transfer mechanisms each provider offers, including the EU Standard Contractual Clauses. We add no other recipients.
How long it is kept
- Analytics — 14 months, then deleted by Google automatically.
- Contact messages — kept while the conversation is live and for as long as the relationship it started lasts. Ask and we delete them.
- Server logs— short-lived, on Vercel's own schedule.
Your rights
Wherever you are, you can ask what we hold about you, ask for it to be corrected or deleted, and object to how it is used. Write to hi@jethro.agency and we will answer within 30 days. We do not charge for this and we will not treat you differently for asking.
- EEA and UK (GDPR) — access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time. You may also complain to your national supervisory authority.
- Brazil (LGPD) — the rights in Article 18, including confirmation, access, correction, anonymisation, portability, deletion, and information about who we share data with. You may also contact the ANPD.
- California and other US states — the right to know, delete, and correct, and to opt out of sale or sharing. We do neither, and we honour Global Privacy Control.
Change your choice
Analytics is the only thing here you can switch. This reopens the consent panel, and the change applies the moment you make it.
Nothing happens if analytics was never loaded for you — for example because your browser already refuses it.
Changes to this notice
If what the site does changes, this page changes with it and the date at the top moves. There is no mailing list to notify; the page is the record.