Privacy policy.

Identity and contact

Open Street Media Inc., doing business as Spartan Atlas Web Design, is responsible for the personal information collected through this site. Privacy enquiries and requests go to privacy@spartanatlas.com.

Information you provide

The contact forms on this site collect your email address, and some also ask for the address of your current website or the name of your business. They optionally collect your name, phone number, and, where a message field is offered, whatever you write in it. A form sent from a demo also records the business the demo was built for, the address of the demo page, and which form was used, so an enquiry can be matched to the work it refers to. The forms on this site do not collect payment details, and no part of the site requires an account.

Payments

Invoices and care plan subscriptions are billed through Stripe. Payment is completed on a payment page Stripe provides, so card details are entered directly into Stripe's systems and are never received by this site or held on its servers. To take a payment, Stripe holds the cardholder name, email address, billing address, and card details, and reports back to us the amount, the date, whether it succeeded, and the card brand and last four digits. Stripe uses that information to process the payment, to prevent fraud, and to meet its own legal obligations, under its privacy policy. Where a care plan renews on a schedule, Stripe keeps the payment method on file until the plan is cancelled.

Usage measurement

Page views are measured with Vercel Web Analytics and with Umami, both of which set no cookies, store nothing on your device, and report in aggregate. They record the page viewed, the referring site, any campaign parameters in the address you arrived on, the country, and the general device and browser type. Vercel Speed Insights measures how quickly pages load, recording the page and timing figures taken from your browser. A further event records which form a submission came from and, where a submission fails, the error it failed with. None of it is linked to you as an individual.

Server logs

Submitting a form exposes your IP address to the server, which uses it to limit repeated submissions from the same source. It is held in memory and not written to a database. A submission blocked as automated or over that limit is recorded in the server log along with the IP address it came from. Those entries and the hosting provider's ordinary request logs, both of which include IP addresses, are retained for no longer than 30 days.

Purposes

Personal information collected through this site is used to reply to enquiries, to build requested demos, to prepare quotes, and to keep records of work discussed and performed. Usage measurement is used to judge which pages are working. Personal information is not sold, rented, or traded, and contacting this site does not add you to a marketing list.

Service providers

These processors handle this data on our behalf. Their servers are located outside Canada, generally in the United States, where information can be accessible to local courts and authorities under local law.

• Vercel hosts the site and provides the usage measurement described above.
• Umami provides the page view measurement described above.
• Formspree delivers form submissions by email.
• Stripe processes invoice and care plan payments.

Google Search Console reports aggregated search statistics about the site and receives no personal information from it. Google Ads is not on the list above for the reason OpenAI is not: what it receives, described under Advertising, it uses for its own measurement rather than handling on our behalf.

Embedded content

Demo and concept pages embed Google Maps, and some embed YouTube video. Loading one of those pages gives Google your IP address, your browser and device type, and the address of the page you are viewing, and lets Google set its own cookies in your browser. Google receives that information directly and uses it for its own purposes under its own privacy policy. Video players load only after you press play, though the still image on each video comes from Google when the page loads.

Advertising

We advertise on OpenAI's platform. Arriving from one of those ads adds a reference code to the address of the page you land on. That code is kept in your browser's local storage, not in a cookie, for 30 days, so that a form you submit later in the same browser can be matched to the ad you arrived from.

If you submit a form having arrived that way, our server tells OpenAI that a submission happened and sends the reference code, the time, and the address of the page you submitted from. Your name, email address, phone number, and message are not included. Nothing is sent for a submission from anyone who did not arrive from one of those ads. OpenAI receives that information directly and uses it for its own purposes under its own privacy policy.

We also advertise on Google. Arriving from one of those ads adds a click identifier to the address of the page you land on, and Google's measurement tag stores it in a cookie in your browser so that a page you reach later in the same browser can be matched to the ad you arrived from.

Reaching the page shown after a form is submitted tells Google that a submission happened, along with the click identifier and the page it happened on. Your name, email address, phone number, and message are not included, and nothing is sent for anyone who did not arrive from one of those ads. Google receives that information directly and uses it for its own purposes under its own privacy policy.

Cookies

Google's advertising tag sets one cookie in your browser, described under Advertising above, which holds a click identifier and nothing that identifies you. Google may also set cookies through the embedded maps and video described above, and the OpenAI advertising reference described above is held in local storage rather than in a cookie.

Security

Traffic between your browser and spartanatlas.com is encrypted with TLS, enforced by the host on every page and every form submission. No customer database runs on this site, and nothing you submit through a form is written to one: a submission is passed straight to email and kept from there in the project records. Card details are never received by this site, and no payment credentials are stored on it. The only personal information held on the server itself is the short-lived request and rate-limiting log described above.

Accounts with our service providers, and the email account enquiries arrive in, are protected with unique passwords and two-factor authentication. Access to enquiries and project records is limited to those who need it to carry out the work, and providers are engaged only where they offer comparable protection under their own agreements. Automated and repeated form submissions are blocked before delivery. No safeguard is absolute, and a breach affecting personal information under our control is reported to the Office of the Privacy Commissioner of Canada and to those affected where it creates a real risk of significant harm.

Retention

Enquiries and project records are kept indefinitely unless you ask for them to be deleted. Records relating to paid work are kept for at least seven years to satisfy tax and business record requirements. Anything held about you is deleted on request, except where a record must be retained by law. Analytics data is aggregated and retained by the provider on a rolling basis.

Your rights

You may request a copy of the personal information held about you, request that it be corrected, or request that it be deleted. Requests go to privacy@spartanatlas.com and receive a response within 30 days.

Demo sites

Demo sites, ranging from a single page to a complete multi-page build, are made from publicly available information, such as the business's existing website, public listings, published photographs, and published customer reviews. A review is shown with the name its author published it under. A demo is published at an unlisted address, excluded from search engine indexing, and removed on request, as is any individual review shown in one.

Linked sites

The portfolio and demo sections link to client sites and third-party products that operate under their own privacy practices. This policy applies to spartanatlas.com.

Complaints

Complaints about the handling of personal information go to privacy@spartanatlas.com. If the response is unsatisfactory, the Office of the Privacy Commissioner of Canada accepts complaints at priv.gc.ca.