What we collect, and what we don’t

Last updated: September 7, 2026

The short version

This site collects almost nothing. There is one contact form, and it exists so you can send us a message. We set no cookies of our own. There is no advertising, no ad pixel, and no cross-site tracking anywhere on meserow.com. We do not sell personal information and we do not share it for cross-context behavioral advertising. A handful of other companies — the company that hosts the site, our font provider, our form relay, our page-view counter — necessarily see a request as it passes through. What each of them receives is set out below.

This policy covers the website. It is written for visitors in the United States and Canada.

What we collect

The only place this site asks you for anything is the form on the contact page. Its fields are:

• Name — required
• Email address — required
• Organization — optional
• Message — required
• A consent checkbox — required. Ticking it is how you tell us we may use the details above to reply.

The form also carries a few hidden technical fields — the subject line it should use, where to send you afterwards, and an empty decoy field that catches automated spam. They contain nothing about you.

The message box is free text, so what ends up in it is entirely your choice. Please keep confidential material out of it. Don’t send passwords or credentials, anything covered by an NDA, personal health or financial details, or contract language you are not free to share. What you type is relayed to us as an ordinary email, which is not a secure channel. If a conversation needs to be handled carefully, say so in a sentence and we will arrange a better way to talk.

There are no accounts on this site, no login, and no payments taken here. Our own scripts read exactly two things from your device, both about how the page should behave: the motion preference described under Cookies and tracking below, and your browser’s “reduce motion” accessibility setting, which we honor by holding animations still. Neither is transmitted anywhere.

Why we collect it

To read your message and reply to it. That is the entire reason the form exists.

We do not add you to a marketing list. We do not build a profile on you, score you, or sort you into a segment. We do not pass your details to anyone who wants to sell you something. If you want our newsletter, you sign up for it yourself on Substack — that is separate from this form, and filling in the form does not subscribe you to anything.

Who else receives it

Running a website means other companies are involved in getting a page to you. Here is what each of them gets.

formsubmit.co

The contact form posts to formsubmit.co, a third-party service that relays form submissions by email. It receives everything you typed — name, email address, organization and message — and delivers it to our inbox. It acts as a processor: it handles the submission on our behalf so this site does not have to run a mail server of its own.

Google Calendar

The Meet with us page carries nine read-only availability embeds, one for each member of the team. They do not load when the page loads. They load only when you click to open one. At that point your browser connects to Google, Google receives your IP address and user agent, and Google may set cookies. If you never click, nothing loads and Google sees nothing beyond the font request described above.

Substack

Our newsletter lives at eli5withellen.substack.com. Signing up, managing a subscription and paying for a paid tier all happen on Substack’s own site, under Substack’s terms and privacy policy. Substack holds the subscriber record, not us. No payment information ever passes through meserow.com.

Cloudflare Web Analytics

We count page views with Cloudflare Web Analytics. Every page loads a small script from static.cloudflareinsights.com, so Cloudflare receives your IP address and user agent as part of that request. It sets no cookies, it does not follow you from site to site, and it builds no profile of you. What it gives us is totals — which pages get read, and roughly which country they are read from — not who read them. Any content blocker will stop it, and the site works exactly the same without it.

cdn.jsdelivr.net

One page — the PRISMnx case study — loads a 3D model viewer script from cdn.jsdelivr.net. If you open that page, your browser requests the script from jsDelivr, which receives your IP address and user agent. No other page on the site uses it.

Cookies and tracking

This site sets no cookies of its own. Not one. Our page-view counter is cookieless by design: Cloudflare Web Analytics records that a page was viewed without storing anything on your device. There is no advertising, no ad pixel, no tag manager, no session recording and no heatmapping.

One thing is stored on your device, and only if you ask for it. If you press the Pause motion button in the footer, your browser remembers that choice in local storage under the name “meserow-motion”, so pages stay still the next time you visit. It holds a single word, it is never sent to us or to anyone else, and clearing your browser’s site data removes it. Nothing else is written to your device: no sessionStorage, no service worker.

There is one place a third party may set a cookie, and it only happens if you click. Opening one of the Google Calendar availability embeds on the Meet with us page loads that embed from Google, and Google may set a cookie at that moment. Leave the embeds closed and nothing is set.

Server logs

The company that hosts this site receives every request your browser makes for a page, which necessarily includes your IP address, your user agent and the address of the page you asked for. Like any website, its servers keep ordinary request logs of exactly that. That is a normal part of serving a page and keeping a site running. We do not mine those logs, and we do not connect them to anything you send us through the form.

How long we keep it

Enquiry emails sit in our mailbox as ordinary business correspondence. We keep them for as long as they are useful — for the conversation itself, for the project it may turn into, and for the ordinary records a small company keeps. We are not going to publish a retention schedule we do not actually follow.

If you would rather your message were not kept, email us and we will delete it.

Your choices

Email info@meserow.com and tell us what you want. You can ask what we hold about you, ask us to correct it, or ask us to delete it. One of the partners handles these directly — we are a small company, so there is no ticket queue and no privacy portal to log into. Expect a reply within a few business days. We may ask a question or two so we can match your request to the right message.

For the third parties listed above, their own policies govern what they hold. Newsletter subscriptions, for example, are managed in your own Substack account, not by us.

Children

This site is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us something through the contact form, email info@meserow.com and we will delete it.

Changes to this policy

We update this page when the site changes — a new form field, a new third party, a service dropped. The date at the top says when it was last revised. The version published here is the one that applies.

Contact

Questions about this policy, or about anything we hold, go to the same place as everything else:

Meserow Design Inc.
600 1st Ave Ste 102 PMB1217
Seattle, WA 98104
info@meserow.com

Meserow Design Inc. is a corporation registered in Washington State.