Website privacy notice
What this website collects, and what it doesn't.
This site is a static set of pages with no scripts, no analytics, no advertising and no cookies of our own. The short version: we learn almost nothing about you by your visiting, and what we do learn is described here in full.
Who we are
trainedstate.com is operated by STACSTRAT LLC, a United States company. Questions about this notice, or about your personal information, go to hello@trainedstate.com.
What this notice covers
This notice covers the website only. The Trained State product, once in service, handles training records on behalf of customer organizations under a separate agreement and a separate notice. In that setting the customer organization determines what is collected about its personnel and why; STACSTRAT processes it on the customer's instructions.
Information we collect
Email you send us
The only way to contact us through this site is a link that opens your own email program. If you write to us, we receive whatever you send: typically your name, email address, organization and the content of your message. We use it to reply, to evaluate a pilot or design-partner request, and to keep a record of the correspondence. We keep it for as long as the conversation and our ordinary business records require.
Technical data processed by our host
The site is served by Cloudflare. To deliver pages and to protect the site from abuse, Cloudflare's systems process the technical details of each request: your IP address, browser type, the page requested and the time. Cloudflare provides us with aggregate, non-identifying request statistics. We do not receive, and do not look for, records of individual visitors. Cloudflare's own handling of this data is described in its privacy policy.
Fonts
The site's typefaces are loaded from Google Fonts. When your browser requests them, Google receives your IP address, the font requested, your browser and operating system versions, and the address of the page you are on, as it does for any resource fetched from its servers. Google states in its Fonts FAQ that the Fonts API does not set or log cookies, and that it does not use this information to profile users or for targeted advertising; Google's wider handling of data is described in its privacy policy. If this is a concern, a browser setting or extension that blocks third-party requests will stop it; the site remains readable with your system fonts.
What we do not do
- We set no cookies and use no browser storage. See the cookie statement.
- We run no analytics, tracking pixels, session recording or advertising scripts. The site's security policy forbids scripts from running at all.
- We do not sell personal information, and we do not share it for cross-context behavioral advertising, in the meaning those terms have under United States state privacy laws.
- We do not embed third-party content that could track you, such as social media widgets or hosted video.
Why we are allowed to process this (EEA, UK and similar jurisdictions)
Where a legal basis is required, we rely on our legitimate interests in operating a secure, functioning website and in responding to people who write to us. Where consent is required for something, we will ask for it at the time; nothing on the site today requires it.
Who we share information with
Only the service providers needed to run the site and read our mail: Cloudflare, which hosts the site; Google, which serves the fonts; and the email service through which we receive messages. Each processes data for us under its own terms. We may also disclose information where the law requires it, or to protect the rights and safety of STACSTRAT, our customers or others.
Where information is processed
STACSTRAT is based in the United States, and correspondence with us is handled there. Cloudflare serves the site from the location nearest to you, so technical request data may be processed in your region and in the United States. If you are outside the United States, the protections your local law provides may differ from those that apply here.
Your rights
Depending on where you live, you may have the right to ask what personal information we hold about you, to have it corrected or deleted, to object to or restrict how we use it, to receive a copy in a portable form, and to withdraw consent where we relied on it. To exercise any of these, email hello@trainedstate.com. We will need enough information to confirm it is you, we will not treat you differently for asking, and we will respond within the time your local law allows. If you are unhappy with our response, you may complain to the data protection authority where you live.
In practice, the personal information we hold about a website visitor is limited to email you have sent us, so most requests are simple.
Children
This site is intended for professionals and is not directed at children. We do not knowingly collect personal information from anyone under sixteen.
Security
The site is served only over HTTPS with a strict content security policy, sends no data to us from your browser, and stores nothing on your device. Because we sell security discipline, we also publish a security.txt for reporting anything you think we have got wrong.
Changes
When this notice changes, the effective date and version at the top change with it. Material changes will be noted on this page for a reasonable period.
Contact
STACSTRAT LLC · hello@trainedstate.com