Privacy policy.

Icy Vale is a web design and marketing studio based in Tucson, AZ. This policy covers our public website, icyvale.com, and our client portal, panel.icyvale.com. If anything here is unclear, write to support@icyvale.com.

We measure how this site is used with our own analytics script. It runs on our servers, and nothing it collects goes to anyone else. It records:

• the pages you view, including the address in your browser, and the page that sent you here;
• your browser, operating system and type of device;
• your screen size, language and time zone;
• your approximate location (country, region and city), worked out on our server from your IP address, which is then discarded and never stored;
• how long a page stayed visible, how far you scrolled, and clicks on links to other sites, downloads, email addresses, phone numbers and buttons we have tagged;
• which forms you submit, never what you typed into them;
• errors your browser reports while on our pages (the message and the script it came from), and requests for pages that no longer exist;
• how quickly pages loaded.

The script keeps three entries in your browser’s local storage, not cookies: your choice on this page, a random session ID that expires after 30 minutes of inactivity, and a random visitor ID that lasts up to two years so we can tell returning visits from new ones. Neither ID is linked to your name or to an account, and neither follows you to other websites. We keep the page-speed measurements for 13 months and the other analytics records for as long as we run the site.

Opting out. Use the button above at any time. We also honor Global Privacy Control: when your browser sends it, we collect no analytics unless you allow them here. We do not respond to the older “Do Not Track” browser setting. To have the analytics records from your browser deleted, send us the visitor ID shown above.

The contact form asks for your name, email address, a subject and your message. We keep the message in our own systems and email it to ourselves, and we use it only to reply to you. Your IP address is used for a moment to limit repeated submissions and is not stored with the message.

• Payments. Checkout asks for your email address and is handled by Stripe, which collects your card details on its own secure form. We never see your full card number. We keep the amount, the payment status and Stripe’s reference numbers for your order.
• Your account. A purchase creates a client portal account with your name and email address. Your password is stored only as a hash.
• Your project. The portal stores what you tell us about your business in the project brief (for example the business name, phone number, description, services, links and domain details), your orders and invoices, your change requests and the comments on them.
• Email. We send receipts, account and password emails, and project updates to the address on your account.

We keep account and project records while your account is open, and afterwards for as long as bookkeeping and tax rules require.

We do not sell your information, share it for advertising, or use advertising networks or cross-site tracking. A few providers handle data on our behalf:

• Stripe processes payments.
• Cloudflare sits in front of our servers and sees the traffic that passes through it, as any network provider does.
• Google Workspace is the email service we send and receive mail with.

Everything else runs on servers we operate ourselves. We would disclose information if the law required it.

If a “Privacy policy” link on another website brought you here, that site was built by Icy Vale and measures its traffic with the analytics script described in the section above: the pages you view, your browser and approximate location, how you use the pages, and nothing that identifies you by name. The site’s owner chose to use it and the data belongs to them; we store it for them under the practices on this page and never share it with anyone else.

The same controls apply there. The site’s privacy settings let you opt out at any time, Global Privacy Control is honored, and you can have the records from your browser deleted by sending the visitor ID shown in those settings to the site owner or to us at support@icyvale.com. Anything else that site collects, such as a contact form, is covered by its own privacy policy.

You can ask us what information we hold about you, ask us to correct it, or ask us to delete it. Email support@icyvale.com and we will reply within 30 days. We never treat anyone differently for asking.

Our services are for businesses. The site is not directed at children under 13, and we do not knowingly collect information from them.

Connections to our sites are encrypted, passwords are hashed, and only the people who run Icy Vale can reach the systems that hold your information. No system is perfectly secure; if something looks wrong, tell us at support@icyvale.com.

When this policy changes, the new version appears here with a new effective date at the top of the page.