Privacy / Demonstration
Privacy should be understood before information is shared.
Policy specimen · Updated July 22, 2026
Information collected
A production site may collect information submitted through contact, guide-request, or scheduling forms, including a name, email address, phone number, and chosen message.
How information is used
Information would be used to respond to requests, schedule meetings, provide requested material, maintain records, improve the site, and meet legal or regulatory obligations. It would not be sold.
Service providers
A production site may use providers for hosting, analytics, scheduling, secure document exchange, email, and customer relationship management.
Security and retention
No website transmission is risk-free. A production adviser should use reasonable safeguards, restrict access, and retain information only as long as needed.
Demonstration notice
Harbor Advice is fictional. This policy is a design specimen and is not legal advice.
Allux first-party analytics
Allux records eligible pageviews using the trusted page path, UTC event time and day, hostname-only external referrer when available, and a desktop, tablet, mobile, or unknown device category. To estimate daily unique visitors, Allux stores a daily, project-scoped salted hash. Exact IP addresses and raw user-agent strings are used only transiently in request memory for hashing, bot filtering, and device classification; neither is persisted.
Lead attribution
When a visitor submits a form, Allux may retain best-available context from the current tab since its latest full load: the initial landing page, trusted submission page, hostname-only referrer and channel, and most recently visited advisor article. This context is not joined to anonymous analytics events or used to identify or de-anonymize a visitor. Do Not Track and Global Privacy Control suppress anonymous analytics and optional attribution, while information deliberately submitted through a form may still be accepted to respond to the inquiry. Lead records, including their page, referrer, and article attribution fields, are the advisor's business records and are retained under the advisor's own retention policy rather than the 90-day anonymous-analytics window; visitors should contact the advisor regarding those records.
Retention and data not collected
Anonymous Allux analytics events are hard-deleted from active storage after 90 rolling days. Encrypted backups may retain a deleted record for up to 35 additional days before automatic expiration. Allux analytics uses no cookies or local/session storage, fingerprinting, persistent visitor profile, cross-day, cross-project, or cross-site tracking, full referrer URL, query string, fragment, session recording, or visitor de-anonymization. Allux adds no third-party tracking.