Privacy
Policy

This website belongs to GrayMatter Media, the photography and video business of Matt Jones in Jacksonville, Florida. This page says what the site collects, which services help run it, and what you can do about it. Questions go to matt@graymattermedia.io.

What the site collects

When you visit. Like most websites, this one records the pages you view, when, for how long, the page you came from, the type of device and browser, your approximate location from your IP address, and any campaign tags in the address you arrived on (for example a link from Instagram). The site keeps the first of these arrival details in your browser for 90 days so that, if you later send me a message, I know which post, listing or search led to it.

When you write to me. The contact form sends me your name, email address and message, together with the arrival details above and a pseudonymous analytics identifier (a random number, not your name) so I can see which pages you looked at before writing. I use them to answer you and to keep a record of our conversation. The message is stored in my own lead log, a small database at Cloudflare, so I can follow up and see which inquiries turn into bookings, and a copy travels through Web3Forms, a form delivery service, to my email.

When you call or text. The business number is a Google Voice line in my Google Workspace account. Google keeps the call log, voicemails with their transcripts and text messages in that account so I can call you back and keep a record of what we agreed; a copy of voicemails and texts reaches my email. Nothing from a call goes into the site analytics. Google's terms: Google privacy policy.

When you watch a film. The videos play through Mux, which records anonymous playback statistics (how much of a film was watched, on what kind of connection) so I can tell which work people actually watch.

I do not collect health, financial, biometric or other sensitive information, and I do not knowingly collect anything from children under 16.

Services that help run the site

Each of these receives some of the data above under its own privacy terms:

Cloudflare hosts and protects the site, stores the lead log described above and provides privacy-first visitor counts that use no cookies and no personal identifiers (Cloudflare privacy policy).

Google Analytics measures how the site is used: pages, sources, approximate location, device, and events such as opening a gallery, playing a film or sending the form. Google may also report aggregated age, gender and interest categories for signed-in Google users who allow ad personalization. How Google uses this data: policies.google.com/technologies/partner-sites. You can opt out with the Google Analytics opt-out add-on.

Microsoft Clarity records how visitors move through pages (scrolling, clicks, recordings of sessions and heatmaps) so I can improve the site. Anything you type into the contact form is masked and never recorded. Microsoft's terms: Microsoft privacy statement.

Google Ads tells me which of my Google ads led to a message, a call or an email, and lets me show ads on Google to people who visited this site. It does not load if you visit from the European Economic Area, the United Kingdom or Switzerland and have not accepted advertising, if your browser sends Global Privacy Control, or if you turn advertising off in Privacy choices (see below). It never receives what you type into the contact form. How Google uses this data: policies.google.com/technologies/partner-sites; choose which Google ads you see in My Ad Center.

LinkedIn Insight Tag lets LinkedIn tell me, in aggregate only, the industries, company sizes and job titles of visitors who are LinkedIn members, and lets me show ads on LinkedIn to people who visited this site. Like Google Ads, it does not load in those three cases. LinkedIn's terms: LinkedIn privacy policy; opt out of LinkedIn ads at LinkedIn's retargeting opt-out.

Mux streams the films (Mux privacy policy). Web3Forms delivers contact messages (Web3Forms privacy policy).

I do not sell your information, and I do not share it with anyone else except when the law requires it.

Cookies and storage in your browser

The site itself stores a few small values in your browser: your privacy choice, your arrival details (90 days), your region for the privacy notice (one day), a copy of the Google Analytics identifier, a note that a message was sent and a copy of what you type into the form until it is sent, so nothing is lost if the page reloads or the send fails (all for the current tab only). Only the arrival details and the analytics identifier leave your browser, and only with a message you choose to send.

Google Analytics sets cookies (names starting with _ga) that tell returning visits apart for up to two years. Microsoft Clarity sets cookies (_clck, _clsk) for up to a year. Google Ads sets advertising cookies (names starting with _gcl) for up to 90 days, except where advertising is off as described below. LinkedIn sets advertising cookies (names starting with li_ and lms_) for up to a year, except where advertising is off as described below. You can delete or block cookies in your browser settings at any time; the site keeps working without them.

Your choices

If you visit from the European Economic Area, the United Kingdom or Switzerland, nothing beyond Cloudflare's cookieless counting runs until you choose Accept or Reject in the notice at the bottom of the page. Everywhere else the measurement and advertising tools run once the page has loaded, and a short notice tells you so on your first visit (on the home page it appears when you first tap, click, scroll or press a key). In both cases the Privacy choices link in the footer opens the choice again, so you can change your mind whenever you like; if you withdraw a permission, the page reloads without that tool.

If your browser sends the Global Privacy Control signal, the site treats it as a refusal of advertising: no advertising tag loads and Google's advertising features stay off.

You can also ask me to tell you what I hold about you, to correct it, or to delete it. Write to matt@graymattermedia.io and I will answer within 30 days.

How long I keep things

Messages you send me stay in my email, and calls, voicemails and texts stay in Google Voice, for as long as we might work together. Google Analytics keeps event data for 14 months. Clarity keeps session recordings for 30 days and heatmap data for 13 months. Cloudflare keeps aggregated visit counts for 6 months.

Changes

When a tool is added or removed, this page changes with it and the date at the top moves. The current version is always the one on this page.