Privacy policy

Ruud Media LLC is Neil Ruud’s independent software and systems design studio. This policy explains how we handle information from visitors to ruud.media, people who contact us, and clients who use our invoice pages. Contact us at hello@ruud.media with privacy questions or requests.

Information we collect

• Website requests. Our hosting and security provider, Cloudflare, processes technical information needed to deliver and protect the site, such as IP addresses, requested URLs, request times, browser information, and security signals. These requests occur whether or not you allow analytics.
• Messages you send. If you email us, we receive your email address, name and other information you choose to include. We use this information to respond, discuss possible work, and maintain business records. Please avoid sending passwords, payment card details, or unnecessary sensitive information.
• Optional analytics. With your consent, Google Analytics 4 collects information about visits and engagement. This may include browser and device information, approximate location, referral source, page visits, and identifiers stored in cookies.
• Invoices and payments. Private invoice pages may process client contact and billing details, invoice references, payment status, and technical information needed to provide access. Stripe processes payments and payment information under its own privacy policy. We do not include Google Analytics on invoice or payment pages.

What optional analytics measures

We use analytics to understand which pages people visit, how far they scroll, which sections they see, how long they actively read a visible page, and whether they click or copy our email address or follow links. Enhanced Measurement also measures interactions with forms, site search, supported videos, and downloadable files when those features are present. Cookie-preference form interactions are not treated as business inquiries. This helps us assess and improve the site.

Our pageview URLs use public page paths and selected campaign parameters, without unrelated query parameters or URL fragments. We retain validated campaign sources, channels, names, IDs, terms, and content labels to understand which campaigns bring visitors. With advertising consent, these URLs may also retain Google advertising click identifiers. Referral information is limited to public pages on this site or external website origins, without external paths or queries. Enhanced Measurement can collect public link destinations and form metadata; email and sensitive URL-parameter redaction provide additional protection. Email interaction events record the action, not message contents. We do not send email addresses, message contents, invoice details, payment details, or account user IDs to Google Analytics.

Google Signals and advertising features

A separate, optional choice allows Google Signals and advertising features, including demographics and interests reporting and advertising personalization. These features can combine first-party analytics cookies or identifiers with Google advertising cookies or identifiers.

If you allow these features, Google may associate your visit information with information from your Google account when you are signed in and have enabled Ads Personalization. This can support reporting across browsers and devices. We receive aggregated reporting from Google Signals rather than your Google account identity. Google’s use of this information also depends on your Google settings and its policies.

Read how Google uses information from sites that use its services and how Google Signals works. You can also manage advertising preferences in Google’s My Ad Center or use the Google Analytics opt-out browser add-on in supported browsers.

Your cookie and consent choices

Optional analytics and advertising features are off by default. We load Google’s analytics script only after you allow analytics. You can allow analytics without allowing Google Signals and advertising features, or reject both. Rejecting optional tracking does not prevent you from reading the site or contacting us.

Use Cookie settings in the footer to change or withdraw your choice at any time. A change applies to future collection; it does not automatically erase information already collected. We store your choice in your browser for up to 180 days so we can remember it. Clearing browser storage or using another browser may cause us to ask again.

When your browser sends a supported Global Privacy Control (GPC) signal, we keep Google Signals and advertising features off. You can still choose whether to allow analytics. The older Do Not Track signal does not change our settings; use Cookie settings or GPC instead.

Browser controls can also block or delete cookies. Essential browser storage used to remember your privacy choice is separate from optional analytics cookies.

We configure Google Analytics cookies with a 180-day lifetime and without automatic renewal on each visit. Withdrawing analytics consent also attempts to remove Google analytics and advertising cookies set for this site. Your browser and Google account may retain other information under their own settings.

Why we use information

We use information to deliver and secure the website, respond to inquiries, discuss or carry out work, administer invoices and payments, understand site use when you consent, and meet legal or accounting obligations.

Where data protection law requires a legal basis, we rely on consent for optional analytics and advertising features; steps requested before a contract or performance of a contract for client work and billing; legitimate interests in operating a secure site and responding to ordinary business inquiries; and applicable legal obligations for required records. You may withdraw consent without affecting processing that occurred before withdrawal.

Providers and other disclosures

We use Cloudflare for hosting and security, Google for consented analytics and advertising features, email providers for correspondence, and Stripe for payment processing. Providers process the information needed for their services, and some also process information for purposes described in their own policies. See Cloudflare’s privacy policy, Google’s privacy policy, and Stripe’s privacy policy.

We may disclose information when reasonably necessary to comply with law, respond to lawful requests, protect people or our rights, or obtain professional legal and accounting advice. If the business is transferred or reorganized, relevant records may be transferred with it, subject to applicable protections.

We do not sell personal information for money. Certain advertising disclosures can count as a “sale” or “sharing” under privacy laws even without payment. Our optional Google advertising features are subject to your separate choice and our GPC handling described above. Turn off those features in Cookie settings to opt out of that use.

Retention and international processing

We keep inquiry and business records for as long as needed for the conversation or client relationship, applicable accounting and legal obligations, and the resolution of disputes. Security records and analytics information are subject to the relevant provider’s retention controls and our service settings. Retention varies with the information, its purpose, and required obligations; consent preferences expire after 180 days.

Our providers may process information in the United States and other countries with different privacy laws from those where you live. Contact us if you need more information about the providers or safeguards relevant to your information.

Your privacy rights

Depending on where you live and which laws apply, you may have rights to access, correct, delete, or obtain a copy of personal information; restrict or object to certain processing; withdraw consent; or opt out of sale, sharing, or targeted advertising. You may also have the right to complain to your local data protection authority. These rights can be subject to legal exceptions.

To make a request, email hello@ruud.media. Describe what you want us to do and provide enough context to locate the relevant information. We may need to verify your identity or an authorized agent’s authority before providing or deleting records. We will not discriminate against you for exercising rights provided by applicable law.

Security, children, and changes

We use reasonable technical and organizational measures appropriate to the information we handle. No website, email system, or transmission method can guarantee complete security.

This site is intended for a general professional audience and is not directed to children under 13. If you believe a child has provided us personal information, contact us so we can review and address it.

We may update this policy as the site or our practices change. We will publish the revised policy here with a new effective date and provide additional notice when required by law.