Privacy Policy

1. Who this policy covers

This policy covers leadlinepartners.co and the forms, links, and tools on it. It does not cover work we do for clients through separate systems, or third-party sites you reach by clicking a link from ours.

2. The data we collect, by feature

We only collect what a given form or feature needs to work. Here is every place on the site that collects information from you, and exactly what happens to it.

2.1 Newsletter signup

If you submit your email to our newsletter form (in the site footer, or on the Resources page), we store that email address in our content system (Sanity), along with which form you used. We use your email to identify the same signup if you submit it again, so re-submitting does not create a duplicate.

We do not currently send newsletter emails. We have not connected a sending provider yet. If we start sending, every email will include an unsubscribe link, and this policy will be updated to name the provider we use.

2.2 Proof request form

The “we go first” form on the homepage and the Proof page asks for your company name and a work email. We store that submission in our database (Supabase) and email ourselves a notice containing your company and email so we can research and follow up. We do not automatically email you back.

As part of following up, we may look up publicly available information about the company you named, so we can decide whether and how to respond. This is normal business research and does not involve buying or aggregating data about you as an individual beyond what you submitted.

2.3 Contact form

The contact form asks for your name, email, company (optional), and a message. We do not save this in a database. It is sent, once, as an email to us through our email provider (Resend), the same way any email you sent us directly would be.

2.4 Meeting scheduler

If you book a meeting through the scheduler on the Contact page, we collect your name, email, company (optional), any notes you add, the time you pick, and your time zone. We store this in our database (Supabase) so we can manage the booking, including if you later cancel or reschedule it.

Booking a meeting creates a real event on our calendar and generates a Google Meet link, using our own connection to Google Calendar. That connection is ours, not yours: you are never asked to sign in to Google to book a meeting. Google itself emails you the calendar invite (and any cancellation) directly, because that is how Google Calendar invites work. We also send you a confirmation email, and we send ourselves an internal notice with your booking details, both through Resend.

2.5 Tools directory links

Every tool listed in our tools directory links out to that tool’s own site through a short redirect on our domain. We do not collect anything about you when you click through. Once you land on that third party’s site, their own privacy practices apply, not ours.

Some of those links may become affiliate or referral links, meaning we would earn a commission if you sign up through them. None of our tools directory links are enrolled in an affiliate program as of this policy’s last update. If that changes, we disclose it directly on the tool page next to the relevant link, not only here.

2.6 Our internal admin console

We use a password-protected internal console to review proof requests, bookings, and newsletter signups, and to manage site content. It is not a page visitors use. It does not collect anything from you beyond what the features above already collected.

3. Cookies we use

We use a small number of cookies. Here is the complete list.

• An admin session cookie. Set only when someone signs in to our internal console. It keeps that session logged in for up to 30 days. You will never see this cookie as an ordinary site visitor.
• A short-lived Google sign-in cookie. Set only while we (the operator) are connecting or reconnecting our own Google Calendar in the admin console. It is unrelated to your visit to the site.
• Content preview cookies. Standard Next.js cookies that let our editors preview unpublished articles before they go live. They only activate with a private preview link and are not set for ordinary visitors.
• Google Analytics cookies. Once our Google Analytics rollout is live (see the Analytics section below), it sets first-party cookies named _ga and _ga_* to tell repeat visits apart. They are used for audience measurement only and are easy to block; the site works the same without them.

We do not currently show a cookie banner. The first three cookies above are either strictly necessary for the feature they belong to or never touch an ordinary visitor, and neither category needs consent. We will revisit this once Google Analytics is live, since analytics cookies are treated differently in some regions.

4. Analytics

We use two analytics tools, and nothing else. No advertising pixels, no session recording, no heatmaps.

• Vercel Analytics. A privacy-focused page-view counter built into our hosting platform. It sets no cookies and does not track you across sites; it tells us which pages get read and roughly where visitors come from.
• Google Analytics (GA4). A standard web analytics tool we are rolling out alongside launch. It uses first-party cookies (named _ga and similar) to tell repeat visits apart and gives us aggregate reports about how the site gets used. We use it for audience measurement only, not advertising. You can block it with Google’s opt-out browser add-on or any standard content blocker, and the site works exactly the same without it.

5. What we do not do

We do not sell your personal information. We do not share it for cross-site advertising. We do not build advertising profiles from your visit. We do not run retargeting ads based on anything collected here.

6. Who we share data with

We do not sell or rent your information to anyone. We do use a small set of service providers to run the site and its forms, and each one only sees the data described above for the feature it supports:

• Sanity stores our content and newsletter signups.
• Supabase stores proof requests and scheduler bookings.
• Resend delivers the emails our forms and scheduler generate.
• Google hosts the calendar our scheduler books meetings on, and emails you the invite directly. Once our Google Analytics rollout is live, Google also processes the aggregate usage data described in the Analytics section.
• Vercel hosts the site itself.

We may also disclose information if the law requires it, such as in response to a subpoena or a valid government request.

7. Where your data is processed

We and the providers listed above operate primarily in the United States. If you are contacting us from outside the U.S., your information will be processed there. We have not put a formal cross-border transfer mechanism (such as EU Standard Contractual Clauses) in place. If you are located in the EEA, the UK, or elsewhere and this raises a concern for you, contact us and we will address it directly.

8. How long we keep your data

We keep the information above for as long as we reasonably need it for the purpose it was collected for, for example, to follow up on a proof request or manage a booking, plus a limited period after that in case you follow up. When we no longer need it, we delete it or remove what identifies you. You can also ask us to delete it sooner at any time; see Section 10.

9. California privacy rights

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you rights over your personal information, including the right to know what we collect, request deletion, and correct inaccurate information. We do not sell or share personal information as those terms are defined under the law. Based on the size of our business, we do not believe the CCPA/CPRA’s additional disclosure and opt-out requirements currently apply to us, but you can still exercise the rights above by contacting us at the email in Section 12, and we will honor your request.

10. Rights for visitors in the EU, UK, and elsewhere

Wherever you are, you can ask us to:

• Tell you what we hold about you.
• Correct information that is wrong.
• Delete your information.
• Restrict or object to how we use it.
• Send you a copy in a portable format.
• Withdraw consent, where we rely on it (for example, the newsletter).

To make any of these requests, email us at the address in Section 12. We will respond within the timeframe required by applicable law. If you write in about a specific booking or request, mentioning the email address you used for it helps us find your record faster.

11. Children’s privacy

This site is a business site for a B2B audience. We do not knowingly collect information from anyone under 16. If we learn we have, we will delete it.

12. Contact us

For anything in this policy, including exercising the rights above, email anshul@leadlinepartners.co.

13. Changes to this policy

We will update this page if what we collect or how we handle it changes. The “Last updated” date at the top will always reflect the most recent revision.