This policy explains what happens to your information when you visit itcouldbesimple.co. The short version: almost nothing. We don't track you, we don't use cookies, and we don't sell or share anything about you.
Who we are
It Could Be Simple is a small software company. We build calm, affordable software for purpose-driven teams and for people making changes in their own lives.
The website is run by It Could Be Simple. Under data protection law we are the "controller" of the little personal information described here. You can reach us at [email protected].
This policy covers this website only. Our apps will each have their own privacy policy, and that policy will apply when you use them.
What we collect, and what we don't
This is a simple website. It has no accounts, sign-ups, forms, newsletter, comments or payments.
We do not use:
- analytics or visitor statistics tools
- advertising, tracking pixels or social media plugins
- third-party scripts of any kind
- cookies, localStorage or similar browser storage
Our fonts and images are hosted with the site itself, so loading a page doesn't send your details to font or image services.
The interactive parts of the site (drawing in the sand, water lines that follow your pointer, the motion pause button) run entirely in your browser. Nothing you draw or do with them is sent to us or saved anywhere.
That leaves just two things: hosting logs and emails.
Hosting logs
The site is served by our hosting provider (currently Cloudflare). Like every web host, when your browser asks for a page, the provider processes technical information such as your IP address, the page requested, the date and time, and your browser and device type. This is needed to deliver the site to you and to protect it from abuse and attacks.
The provider handles this information on our behalf. We don't use it to identify you, build profiles, or follow you around the web. We rely on our legitimate interest in running a working, secure website.
If you email us
If you write to [email protected], we receive your email address, your name if you include it, and whatever you choose to write. We use it only to read and reply to your message. We won't add you to a mailing list or use your message for marketing. Our email is handled by our email provider (currently Google Workspace). We rely on our legitimate interest in answering people who contact us, or on taking steps you ask for before entering an agreement with us.
Cookies and "Do Not Track"
We don't set any cookies or use similar technologies, so there is no cookie banner and nothing to accept or decline. Because we don't track visitors over time or across other websites, there is nothing for "Do Not Track" or Global Privacy Control signals to switch off, though your browser is welcome to send them.
We don't sell or share your information
We don't sell your personal information, "share" it for cross-context behavioral advertising, or use it for targeted ads. We have not done so in the past 12 months. We don't make automated decisions or profiles about anyone.
Children's privacy
This website is for a general audience and isn't directed at children. We don't knowingly collect personal information from children under 13 (or under 16 where local law sets that age). If you think a child has emailed us, let us know and we'll delete the message.
How long we keep information
- Hosting logs are kept by our hosting provider for a limited period under its own retention settings, then deleted. We don't copy or keep them ourselves.
- Emails are kept for as long as we need them to reply and follow up on the conversation, and then deleted. You can ask us to delete your emails at any time.
Your rights
Wherever you live, you can ask us to:
- tell you what personal information we have about you and give you a copy
- correct it
- delete it
- stop or restrict using it, or object to how we use it
If you are in the European Economic Area or the United Kingdom, these rights come from the GDPR or UK GDPR, which also give you a right to data portability and a right to complain to your local data protection authority (in the UK, the Information Commissioner's Office). If you live in California or another US state with a consumer privacy law, you have similar rights to know, access, correct and delete your information, and to opt out of its sale or sharing (which we don't do).
To use any of these rights, email [email protected]. We may ask a question or two to confirm the request is genuinely from you. We won't charge you or treat you differently for asking. You can also have an authorized agent contact us on your behalf.
In practice we hold very little: unless you've emailed us, we usually have nothing that identifies you.
International transfers
Our hosting provider runs servers around the world, so the technical information described above may be processed outside your country, including in the United States. Where the law requires it, these transfers rely on recognized safeguards such as the EU-U.S. Data Privacy Framework (and its UK extension) or Standard Contractual Clauses in our provider's data processing terms.
Security
The site is served over an encrypted (HTTPS) connection. Because we collect so little, there is very little that could be exposed. We limit access to our email inbox and hosting account to the people who need it. No system is perfectly secure, but we take reasonable care with what we have.
Changes to this policy
If anything about this website changes, for example if we add a contact form, we'll update this policy before the change goes live and change the "Last updated" date at the top. If a change is significant, we'll say so clearly on the site.
Contact
Questions about privacy, or anything else, are welcome:
- Email: [email protected]