Who we are
Generation Web is a web development and digital strategy company. We build custom web applications for businesses and fundraising platforms for community foundations. Our website address is https://generation-web.com.
For questions about this policy or about information we hold, email info@generation-web.com.
What we don't collect
Worth stating up front, because it rules out most of what a privacy policy usually has to cover. This site is a static website. It has no user accounts, no login, no comments section, no forum, and no database of visitors. We do not sell personal information. We do not share it with data brokers. We do not run advertising networks, retargeting pixels, or social media tracking tags on this site.
Information you give us
When you submit a form on this site, we collect what you type into it. Depending on the form, that's some combination of your name, email address, organization, and whatever you tell us about your project. Providing it is entirely your choice; the only consequence of not providing it is that we can't reply.
Alongside your message, we record the page the form was submitted from and the time of submission. That context helps us route your message to the right person and reply usefully.
We use this information to respond to you, to provide the services you ask about, and to keep a record of our correspondence. We do not add form submissions to a marketing list. Subscribing to our newsletter is a separate, explicit opt-in, and you can unsubscribe at any time by replying to any email we send.
Information collected automatically
Like nearly all websites, our servers record standard technical information when a page is requested — IP address, browser type and version, operating system, the page requested, and the referring page. These logs help us keep the site running, diagnose problems, and identify abuse. They are not used to build a profile of you.
We also use analytics to understand which pages are useful and where visitors get stuck. Analytics only runs if you consent to it — see the next section.
Cookies and consent
When you first visit, a consent banner asks what you're willing to allow. Nothing optional loads until you answer. Specifically:
- Strictly necessary — a small number of cookies are required for the site to function and to remember your consent choice. These are always active, because without them the site can't work or can't remember that you said no.
- Analytics — these load only after you accept. If you decline, or simply ignore the banner, analytics cookies are never set.
We've implemented this using Google Consent Mode, which means analytics tags are held in a denied state by default and only activate on your explicit consent. You can change your mind at any time through the consent preferences link in the banner, and you can clear or block cookies entirely in your browser settings.
Third-party services
A handful of outside services help run this site. Each one is listed here with what it receives and why. Where a service processes data on our behalf, it does so under contract and may not use that data for its own purposes.
Analytics — Google Analytics 4
Measures aggregate site usage: pages viewed, rough traffic sources, general geographic region. IP anonymization is enabled, and the service loads only with your consent. We do not use Google Analytics for advertising, remarketing, or audience sharing.
Consent management — CookieYes
Powers the consent banner and stores a record of the choice you made, so we can honor it and demonstrate that we asked.
Email delivery — Postmark
When you submit a form, Postmark delivers that submission to us as an email and sends you a confirmation. It processes the contents of your message in order to deliver it.
Spam protection — Cloudflare Turnstile
Verifies that form submissions come from a person rather than a bot. Turnstile is designed to do this without the behavioral tracking and cross-site profiling that traditional CAPTCHAs rely on.
Hosting and security — Cloudflare
Delivers this site and filters malicious traffic. Requests pass through Cloudflare's network, which processes IP addresses and request metadata to do that job.
Fonts — Google Fonts
Typefaces on this site are served from Google's font CDN, which means your browser's IP address is disclosed to Google when a page loads. We're in the process of moving to self-hosted fonts, which removes this entirely.
Payments — Stripe
If you make a payment to us online, that transaction is handled by Stripe. Your card details go directly to Stripe and are never received or stored on our servers. Stripe processes them as an independent controller under its own privacy policy.
Who we share information with
We share personal information only with the service providers listed above, and only to the extent they need it to perform their function. Beyond that, we may disclose information if legally compelled — a subpoena, court order, or similar legal obligation — or where necessary to protect our rights or someone's safety.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We never have.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
How long we keep things
Form submissions and the correspondence that follows are kept as long as we have an active or prospective relationship with you, and afterwards for as long as we need them for legitimate business or legal record-keeping. Server logs are retained for a short operational window. Analytics data is retained according to the retention period configured in Google Analytics.
If you'd like your information deleted sooner, ask us and we will, subject to any records we're legally required to keep.
Your rights
Depending on where you live, you may have specific legal rights over your personal information. We extend the following to everyone who asks, regardless of location, because drawing lines by geography seemed like the wrong instinct:
- Know what personal information we hold about you and how we use it.
- Access a copy of it.
- Correct anything inaccurate.
- Delete it, subject to records we're required to retain.
- Opt out of analytics — through the consent banner, at any time.
- Non-discrimination — exercising any of these rights will never affect the service you receive from us.
To exercise any of these, email info@generation-web.com. We'll respond within 45 days, and we may need to verify your identity first — usually by confirming you control the email address associated with the information.
California residents have these rights under the CCPA as amended by the CPRA. Colorado residents have comparable rights under the Colorado Privacy Act. Residents of other states with consumer privacy laws have similar protections. If you're in the UK or EU, you also have the right to lodge a complaint with your local data protection authority.
Do Not Track and Global Privacy Control
This site honors the Global Privacy Control (GPC) signal. If your browser or extension sends GPC, we treat it as an opt-out of non-essential tracking without requiring you to interact with the consent banner.
Children
This site is intended for a business audience and is not directed at children. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us information, contact us and we'll delete it.
Security
This site is a static website — there is no database, no content management system, and no admin login attached to the public pages, which removes the routes most websites get compromised through. Traffic is encrypted with HTTPS, and access to form submissions is limited to the people who need it.
No system is perfectly secure, and we won't claim otherwise. But we've tried to build one where a breach has very little to take.
Changes to this policy
If we change this policy we'll update the effective date at the top. Material changes — anything that meaningfully alters what we collect or how we use it — will be flagged more prominently than a quiet date change.
Contact
Questions, requests, or concerns about privacy: info@generation-web.com. For anything else, the contact page will route you to the right person.