Legal
Privacy Policy
Plain language, same as everything else here. This page explains what this site collects, why, who else touches it, how long I keep it, and how you can see or delete it.
On this page
1. Who I am
This site, tuckershively.com, is run by Tucker Shively, a marketing and systems developer based in Owensboro, Kentucky. I work alone, so "I" on this page means me personally: I am the one who reads what you send and decides what happens to it. You can reach me at tucker@tuckershively.com or (502) 689-3174.
This policy covers tuckershively.com and every page under it, including the free guides at /docs/ and the review and proposal pages I build for businesses I am talking to. My clients' own websites have their own privacy policies.
2. The short version
- I collect what you choose to send me, plus standard visit data (pages viewed, time on page, browser, approximate location from your IP address).
- I use Google Analytics, run through Google Tag Manager and my own tagging server, to see how the site is used.
- I do not sell your personal information, I do not share it for targeted advertising, and I do not run advertising or remarketing pixels on this site.
- You can ask me to show you, correct, or delete what I hold about you at any time.
3. What you give me
The contact form. Your name, email address, phone number (optional), business name (optional), and your message. Along with it the form sends the page you were on, the page that referred you there, your browser's user agent, and the time. My server also records your IP address, which it uses to block spam (no more than a few messages per address per hour).
Email, calls and texts. If you email, call or text me, I have whatever you send and your email address or phone number.
Working together. If you become a client, I keep the contact and business details needed to do the work and bill for it. The details of that are in your written agreement with me.
4. What is collected automatically
Server logs. Like every web server, mine records each request: IP address, the page or file requested, the time, the referring page, and your browser's user agent.
My own visit log. A small script on every page reports to my server, every 15 seconds while the tab is visible, the page you are on, how long it has been visible, the referring page, and your screen width. It sets no cookies and sends nothing to anyone else. My server combines this with the server log into visit summaries: when a visit happened, which pages were viewed and for how long, an approximate country from your IP address, and the network name your IP address belongs to (for example, your internet provider or company). I use this to see what gets read, and, when I send a business a link to a review or proposal I made for it, to know whether that page was opened.
Google Analytics. The site loads Google Tag Manager, which runs Google Analytics 4. Analytics requests go first through a tagging server I operate at s.tuckershively.com and then to Google. Google Analytics records pages viewed, clicks on links such as phone and email links, scrolling, approximate location, device and browser type, and how you arrived (for example a search, a link, or a campaign tag in the link). Google processes this under its own terms; you can read how Google uses information from sites that use its services.
How you arrived. If the link you arrived on carries campaign tags (such as utm_source) or an ad click ID (Google's gclid or Facebook's fbclid), a script stores them in first-party cookies, along with the first page you landed on, so I can tell which link or campaign brought you if you later get in touch.
Fonts and code libraries. Pages load fonts from Google Fonts and an animation library from the jsDelivr network. Your browser requests those files directly, so those services receive your IP address and browser details as part of serving them.
5. Cookies and similar storage
These are the cookies and browser storage this site uses. None of them are advertising cookies.
| Name | Set by | What it does | How long |
|---|---|---|---|
_ga, _ga_FJ5Z3BECZM | Google Analytics (first party) | Tells one visitor's visits apart and keeps track of the current session. | Up to 2 years |
FPID, FPLC, FPGSID | My tagging server (first party) | The same job as the Google Analytics cookies, set by my own server so measurement is more reliable. | From one session up to 2 years |
_cdp_utm_*, _cdp_gclid, _cdp_fbclid, _cdp_landing_page, _cdp_referrer | This site (first party) | Remembers the campaign, ad click ID, first page and referring site you arrived with. | Up to 90 days |
tsx_self (local storage) | This site | Only set on my own devices, to keep my visits out of the visit log. | Until cleared |
You can block or delete cookies in your browser's settings. The site works fine without them; I just see less about how it is used.
6. How I use it
- To reply to your message, and if you hire me, to deliver and bill for the work.
- To understand how the site and the guides are used, so I can improve them.
- To know which links, searches or campaigns bring people here.
- To keep the site and the form secure and free of spam and abuse.
- To keep business records and meet legal obligations.
I do not sell your information, I do not share it for targeted advertising, and I do not add you to a marketing email or text list unless you ask to be on one.
7. Who it is shared with
Only the service providers that run these systems for me, and only so they can do that job:
- Hosting. The site, the form, the visit log and my customer records run on servers I rent from hosting companies in the United States.
- Email delivery. Form messages are emailed to me through Mailgun and arrive in a Google (Gmail) inbox.
- Analytics. Google receives the analytics data described above.
- Fonts and code. Google Fonts and jsDelivr receive the standard request details needed to serve their files.
I keep my customer records in a system I built and host myself, not in a third-party CRM. I may also disclose information if the law requires it, to protect my rights or someone's safety, or to a successor if my business is ever transferred, in which case this policy would still apply to what you gave me.
8. Text messages
If you give me your mobile number, I may text you about your inquiry or an active project. I do not send marketing texts. Message and data rates may apply, and how often I text depends on the conversation. Reply STOP at any time to stop texts, or HELP for help.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties.
9. How long I keep it
- Messages you send me: as long as I need them to reply and keep a record of the conversation. If you become a client, for the length of the work and then as long as tax and business records require.
- Raw server logs: about 7 days, then deleted automatically.
- Visit summaries: kept so I can compare trends over time. I delete them on request when I can match them to you.
- Google Analytics: event-level data is kept for up to 14 months, then deleted by Google.
- Cookies: as listed in the table above, or until you clear them.
10. How I protect it
The whole site runs over HTTPS. The form handler and the logs live outside the public part of the web server, and access to my servers is limited to me by key-based login. No system is perfectly secure, but I hold my own systems to the same standard I set up for clients, and I will tell you promptly if a problem ever affects your information.
11. Your choices and rights
- See, correct or delete. Email tucker@tuckershively.com and I will show you what I hold about you, fix it, or delete it. I answer within 30 days, usually much sooner, and I may ask you to confirm it is really you first. This does not depend on which state you live in.
- Opt out of Google Analytics. Block cookies in your browser, or install Google's Analytics opt-out browser add-on. Content and tracking blockers also stop it.
- Stop texts or emails. Reply STOP to any text, or ask by email.
12. Do Not Track and privacy signals
There is no settled standard for responding to "Do Not Track" browser signals, and this site does not currently change what it collects when it receives one or a Global Privacy Control signal. The opt-outs in section 11 work regardless. Google Analytics and the cookies above are only used on this site; I do not use them to follow you across other websites.
13. Children
This site is for businesses and is not directed to children under 13. I do not knowingly collect information from children. If you believe a child has sent me information, email me and I will delete it.
14. Visitors outside the United States
I work from Kentucky and everything here is stored and processed in the United States. If you contact me from another country, your information comes to the US, where privacy law may differ from yours. You can still use every choice in section 11.
15. Changes to this policy
When I change what the site collects or how it is used, I update this page and the date at the top. If a change is significant, I will say so on this page and, for clients, by email.
16. Contact
Questions or requests about your information: tucker@tuckershively.com or (502) 689-3174. Tucker Shively, Owensboro, Kentucky.