What I collect, and what I don't.

1. Who this is about

This site is operated by Ad-Crafters ("Ad-Crafters", "I", "me"), reachable at ian@ad-crafters.com or 818 369 3067. Mailing address: 1547 W 206th St #2, Torrance, CA 90501.

This policy covers ad-crafters.com and the ad concept work I do for clients.

2. What I collect

What you hand me directly

The contact form on this site asks for three things: your name, your website address, and your email address. That's the entire form. There is no phone field, no budget dropdown, no hidden profiling.

If you email or call me instead, I hold whatever you chose to put in that message — and nothing more.

What you send me later

Clients often send photos of their jobs, logo files, brand colors, service lists, price sheets or offers. I hold those to build your creative. If any of it contains a person's face — your crew, a customer, a homeowner in a before-and-after — that's personal information too, and section 5 covers how long I keep it.

What I look up about you

This one matters, because it's the actual method. Once you give me your website, I go read it — your services, your photos, your colors, your guarantees, the city you serve. I may also look at your public social profiles and public review pages. All of this is information you have already published to the open web. I don't buy data about you, and I don't use data brokers or enrichment services.

What the server records on its own

This site is hosted on Netlify. Like any web host, their servers keep standard request logs — IP address, browser and device type, the page requested, and a timestamp. I don't control the retention of those logs and I don't use them to build any profile of you. See Netlify's privacy notice at netlify.com/privacy.

3. Cookies and analytics

This site uses Google Analytics 4 to count visits and see which parts of the page people actually read. It sets cookies in your browser — typically _ga and _ga_<id>, which last up to two years and hold a randomly generated identifier, not your name.

Nothing loads until you say yes

On your first visit you get a banner with Accept and Decline. Until you press Accept: no Google Analytics script is downloaded, no cookie is set, and no request is made to Google at all. Decline is a real answer, not a delayed yes — the site behaves identically either way, and I won't keep asking.

Your choice is stored in your browser's local storage (which isn't a cookie and never leaves your device) so you aren't asked on every page. Change it whenever you like with Cookie Settings at the bottom of any page, or by clearing site data for this domain.

What I actually look at

Aggregate patterns: how many people visited, which sources sent them, which sections held attention, and how many reached the thank-you page after submitting the form. I use it to judge whether the page is working — not to identify or follow individuals.

Google Ads

Because I advertise, the analytics property is configured so it can be linked to Google Ads for conversion measurement and remarketing audiences. In plain terms: if you accept, Google may use this data to measure ad performance and potentially to show you ads elsewhere. If that's not something you want, press Decline — everything in this section then stops applying to you.

Google's own explanation of how it handles data from sites using its services is at policies.google.com/technologies/partner-sites. You can also install Google's Analytics opt-out add-on, which blocks it across every site, not just mine.

What this site still doesn't do

• no Meta pixel, no LinkedIn insight tag, no TikTok pixel, no third-party retargeting tags;
• no session recording or heatmaps — nothing watches your mouse or replays your visit;
• no cookies of any kind for anyone who declines, and none at all before you answer;
• no selling of personal information, and no sharing of it for money.

If I add anything else that tracks you, I'll update this page and ask again before switching it on.

4. Who else touches your data

Four third parties are involved in running this site, and one more in replying to you:

• Netlify — hosting. The site's files are served from their network.
• Web3Forms — form delivery. When you submit the form, your name, website and email pass through Web3Forms, which emails them to me and keeps a copy in my account there. Their privacy policy is at web3forms.com/privacy.
• Google Analytics — only after you accept. Then it receives your IP address, device and browser details, the pages you view, and a randomly generated ID held in a cookie. Covered in full in section 3.
• Google Fonts — the typefaces load from Google's servers, which means your browser discloses your IP address to Google when the page loads. This happens regardless of your cookie choice, because it's how the page renders, and no cookie is set by it. A tracker-blocking extension will stop it if you'd rather it didn't.
• Google Workspace, my email provider, which holds our correspondence the way any mail provider does.

Beyond those, no one. I don't pass your details to other agencies, lead brokers, or partners.

5. Why I hold it, and for how long

I use what I collect to do exactly four things: build your concepts, send them to you, reply when you write to me, and follow up once or twice if you asked me to. I don't use your information to market to unrelated people, and I don't add you to a newsletter you didn't ask for.

If you're in the UK or EEA, my lawful bases are legitimate interests (responding to a business enquiry you initiated), performance of a contract once we work together, and your consent for analytics cookies — which you can withdraw at any time through Cookie Settings, with no effect on anything processed before you did.

On retention: I keep enquiry records and correspondence for 24 months after our last contact, then delete them. Analytics data is held by Google under my property's retention setting, currently 14 months. Brand assets you sent me — photos, logos, price sheets — I delete on request at any time, and otherwise when they're clearly no longer needed. Finished creative I may retain longer under section 6.

6. Showing the work

I may show finished ad concepts as portfolio samples on this site or in a pitch to another business. Where I do that, I'm showing the creative — the layout, the headline, the design decisions.

I will not publish your customer lists, your pricing, your performance numbers, or anything you've marked confidential. If you'd rather your work never appear as a sample, tell me and it won't. That request is honoured permanently and you don't need to give a reason.

7. Your rights

Wherever you live, you can ask me to show you what I hold, correct it, or delete it. Email ian@ad-crafters.com and I'll deal with it — realistically within a few days, and within 30 days at the outside.

If you're in the UK or EEA, you also have the right to object to processing, to request a portable copy, to restrict processing, and to complain to your data protection authority.

If you're in California, you have the right to know, delete, and correct, and the right to opt out of the sale or sharing of personal information. I don't sell your information for money. But if you accept analytics cookies and the property is linked to Google Ads, that use can count as "sharing for cross-context behavioral advertising" under California law — so treat it as covered. Pressing Decline on the banner, or Cookie Settings at the foot of any page, is your opt-out, and it takes effect immediately. I won't discriminate against you for using it.

I don't need an account or a password to action any of this. Just write to me from the address you contacted me on.

8. Security

The site is served over HTTPS with HSTS. Form submissions are encrypted in transit. Your files and our correspondence live in my email and storage accounts, which are protected by strong, unique credentials and two-factor authentication.

That said — no method of transmission or storage is perfectly secure, and I won't claim otherwise. Please don't send me anything genuinely sensitive: no card numbers, no Social Security numbers, no passwords. I never need them, and I'll never ask.

9. Children

This is a business-to-business service. It isn't directed at children, and I don't knowingly collect information from anyone under 16. If you believe a child has sent me information, email me and I'll delete it.

10. Changes to this policy

If I change this policy I'll update the date at the top. For anything material — adding analytics, adding a new third party, changing retention — I'll say so plainly here rather than quietly editing a line.

11. Contact

Questions, requests, or a complaint about how I've handled your information — ian@ad-crafters.com or 818 369 3067. A real person reads it.