Privacy Policy
BitssyBytes ("we") runs Agent Safety Score (agentsafetyscore.com) and its newsletter. This policy explains what we collect, why, who processes it for us, and your choices. We don't sell personal information, and we don't use advertising cookies or trackers.
What we collect and why
| When | What we collect | Why | Where it's kept |
|---|---|---|---|
| You browse the site | Aggregate traffic stats through Cloudflare Web Analytics, which Cloudflare says uses no cookies or local storage and doesn't fingerprint visitors by IP address. Cloudflare also processes IP addresses and request data to deliver and protect the site. | Understand which pages are used. Keep the site secure. | Cloudflare |
| You subscribe to the newsletter | Your email address, plus whatever Buttondown records under its own policy, such as signup IP address, device or browser details, and open or click data if that tracking is turned on. | Send the newsletter you asked for (double opt-in). | Buttondown |
| You use the submit form | Tool name, website, docs links, category, your email, whether you're the vendor, your notes, the time, the country your request came from (as reported by Cloudflare), and the site hostname. A one-way hash of your IP address is kept for about an hour to rate-limit spam. | Review your submission or correction and reply. | Cloudflare (KV storage) |
| You book a sponsor slot | Payment details (handled by Stripe; we never see your full card number), your email, company or tool name, and website. Then the ad details you send after paying: product name, headline, body, button text, link, preferred weeks, whether you're a graded vendor, and your contact name and email. Logos are currently sent by email. | Take payment, run your placement, contact you, keep business and tax records. | Stripe (payment and checkout records, including ad details stored with the order), Cloudflare (if intake storage is on), our email |
| You email us | Your email address and what you write. | Reply to you. | Google (Gmail) |
We don't knowingly collect information from children under 13, and the Service isn't directed to them.
Service providers
We use these companies to run the Service. Each processes data under its own terms and privacy policy:
- Cloudflare: hosting, security, form storage, analytics. cloudflare.com/privacypolicy
- Buttondown: newsletter. buttondown.com/legal/privacy
- Stripe: payments. Stripe may also use payment data under its own policy, for example to prevent fraud. stripe.com/privacy
- Google (Gmail): email. policies.google.com/privacy
We share information only with these providers, when the law requires it, to protect our rights or users' safety, or as part of transferring the Service to a successor that keeps this policy.
How long we keep it
- Newsletter: until you unsubscribe. After that, Buttondown handles your data under its own policy.
- Submissions and corrections: until you ask us to delete them.
- Rate-limit hashes: about one hour.
- Sponsor and payment records: as long as needed for tax and accounting law.
Your choices and rights
- Unsubscribe with the link in any newsletter, or email us. We honor unsubscribe requests promptly, and always within the time the law requires.
- Access, correction, deletion: email [email protected]. If you're in the EU/UK, California, or another place with privacy laws that apply to us, you may have extra rights, including to object, restrict processing, port your data, or complain to your data protection authority. We'll honor them as the law requires.
- Legal bases (EU/UK): consent (newsletter), contract (sponsor bookings), and legitimate interests (reviewing submissions, security, analytics).
- International transfers: we and our providers are based in the United States. Data may be processed there.
Security
We use reputable providers and limit what we collect. No method is perfectly secure.
Changes
We'll update the effective date when this policy changes and note material changes on the site or in the newsletter.
Contact
BitssyBytes · [email protected]