The fine print
Privacy
What this site collects, why, and what happens to it. Written to be read, because a policy nobody reads protects nobody.
Last updated: . This page changes as the way we work changes, and this date changes with it.
The short version
- This site sets no cookies of its own and loads no advertising scripts.
- We use Microsoft Clarity to see how people use the pages. On the intake form, what you type is hidden from it.
- We count a few anonymous things, like how many people start the form and how far they get, as totals that can’t be tied to you.
- We only collect personal information when you send us a problem or write to us.
- What you send is used to understand your problem and reply to you. Nothing else.
- It isn’t sold, isn’t shared for marketing, and isn’t used to train AI models.
- If your submission never becomes a project, its case record and files are deleted automatically after 90 days. Ask us and we’ll delete anything else we hold, sooner.
Who we are
Growing Research Labs (GRL) is the public name of Growing Research and Infrastructure Laboratories, LLC, a Kentucky limited liability company. When this page says “we”, that’s who it means. You can reach us at hello@growingresearch.org.
If you just visit
Reading this site doesn’t require an account. The site sets no cookies of its own, and there are no advertising pixels and no social media widgets. The fonts are served from our own site, so your browser doesn’t call a font service either.
What we count, and what we don’t
To learn where people give up on the form, the site counts a handful of moments: someone opens the home page, clicks a “send us your problem” button, starts typing, reaches each step, finishes, or hits an error. Each one adds 1 to a daily total, and that’s all that’s stored: the date, the name of the moment, and at most one word from a fixed list, such as the step’s name or the kind of error.
No cookie, identifier, IP address, page address or anything you type is stored with these counts, so they can’t be tied to you or to each other. If your browser sends a Do Not Track or Global Privacy Control signal, nothing is counted at all.
What your own browser keeps
While you fill in the form, your answers are kept in your browser’s session storage, so a reload doesn’t wipe them. That copy stays on your device, is never sent anywhere until you press Send, and is cleared when you send the form or close the tab. The site also leaves small markers there so each of the counts above happens once per visit. They hold no information about you.
The site is hosted by Cloudflare. Like any web host, Cloudflare handles each request your browser makes, which means it processes technical details such as your IP address, the page you asked for, and the type of browser you use. It does that as our infrastructure provider, to deliver the site and keep it safe.
Microsoft Clarity
To find the parts of the site that confuse people, we use Microsoft Clarity. It records how a visit moves through the pages: clicks, scrolling, mouse movement and what the page looked like, plus technical details such as your browser, device, screen size and approximate location. We see these as heatmaps and replays of anonymous visits.
We tell Clarity not to set cookies on this site, so it can’t use them to link one visit to the next, and we block its link to Microsoft’s advertising cookies. If your browser allows third-party cookies, Microsoft’s own servers (clarity.ms) may still set their own; many browsers block these by default. On the Send us your problem page, all text is masked, so what you type is never recorded. Clarity doesn’t load at all if your browser sends a Do Not Track or Global Privacy Control signal. Clarity is run by Microsoft, and its handling of this data is covered by the Microsoft Privacy Statement.
Cloudflare Turnstile
The Send us your problem page loads Cloudflare Turnstile, a check that tells people from automated spam, usually without asking you to do anything. It loads on that page only. Turnstile is run by Cloudflare, and what it does with the signals it looks at is covered by Cloudflare’s privacy policy.
If you send us a problem
We collect what you put in the form:
- your description of the problem;
- your answers to the follow-up questions, all of which are optional;
- any files you choose to attach, which is also optional;
- your name and email address, so we can reply;
- your company name and phone number, if you choose to give them.
To limit abuse of the form we also store a salted one-way hash of your IP address, not the address itself, and a shortened version of your browser’s user-agent string. A hash lets us notice that a burst of submissions came from the same place without keeping a record of where that place is.
If you email us instead, we get what any email carries: your address, your message and anything you attach.
What we use it for
To understand your problem and to respond to you about it. If it turns into a project, to do that project. That’s the whole list.
What we don’t do with it:
- We don’t sell it.
- We don’t share it for marketing, ours or anyone else’s.
- We don’t put you on a mailing list.
- We don’t use it to train AI models.
- We never add it to the permanent or shared memory of A.N.T.O.N., our research system. Each case’s data is kept separate, under its own case number.
Who sees it, and where it lives
People at GRL who are reviewing your problem see what you sent. We don’t give anyone else access to it. The services that store and carry it for us, named below, handle it only to provide that service.
Submissions are stored with Cloudflare, in a D1 database and R2 file storage. Files you upload are private and kept in quarantine: they’re never published, never served from a public address, and never opened automatically. Cloudflare holds this data for us as our infrastructure provider.
When a problem arrives, our system emails us a short notice so it doesn’t sit unread. It contains your case number, name, email address, company if you gave one, and a short summary of the problem. If you told us the problem may involve sensitive information, the summary is left out. It never contains your files, your answers or your phone number. That email is delivered by Cloudflare’s email service to our own inbox, which is run by an email provider, like any business mailbox.
The full detail, including upload limits and file types, is on How we handle your data.
How long we keep it
If your submission never becomes a project, its case record (your description, answers and contact details) and any files you uploaded are deleted 90 days after you sent it. That happens automatically; you don’t have to ask.
The short email notice we receive when your problem arrives is separate from that case record. It sits in our business inbox and is not deleted automatically. The same goes for any emails we send each other: those are kept like any business correspondence, for as long as we need them to deal with your enquiry.
You can ask us to delete any of it, including those emails, at any time: write to hello@growingresearch.org.
If it does become a project, how long we keep project material is written into that project’s terms, which you’ll see and approve before work starts.
Your choices
Wherever you live, you can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email hello@growingresearch.org, from the address you used if you can, and include your case number if you have it. We’ll do it and tell you when it’s done.
Children
This site is for people with work to get done. It isn’t aimed at children, and we don’t knowingly collect information from them.
Changes to this page
If how the site works changes, this page changes with it, and so does the date at the top.
Questions
Write to hello@growingresearch.org. A person will answer.