Privacy Policy

Introduction

This policy applies only to the thinkcode.ai marketing website, which ThinkCode, LLC operates, and the ThinkCode Water Alerts text message program. It describes what we collect, why, and what you can do about it.

Information We Collect

We collect the following:

• Contact information — if you email us at hello@thinkcode.ai, we receive the information you include in that email.
• Gift claim details — if you claim the gift, the details on that form, including a postal address. See Gift Claims below.
• Contact form details — if you send us a message through the contact form, what you enter in it. See Contact Form below.
• Text message alerts — if you join ThinkCode Water Alerts, your mobile number, the keywords you text us, and when you joined or opted out. See Text Messages below.
• Analytics data — we use Google Analytics 4 to see which pages visitors open. It receives the address of the page you are on, the page you came from, your browser and device type, and an approximate location based on your IP address. It does not receive your name, your email address, or anything you type on this site. Your visits are linked only if the analytics cookie is set. See Cookies below.
• Your country — on every visit, this site reads a country code that Vercel, our hosting provider, works out from your IP address. It decides whether you are shown the cookie banner and whether Google Analytics may set its cookie without asking you. It is used while the page loads and is not stored.
• Server logs — Vercel, our hosting provider, collects standard server logs (IP address, timestamp, page requested) as part of normal operation.

This site has no user accounts, and we do not collect payment information.

How We Use Your Information

We use what we collect for four things:

• Replying to you — if you email us, we use your message and your address to write back.
• Sending text alerts — the alerts you signed up for, and replies when you text HELP or STOP.
• Seeing how the site is used — which pages you and other visitors open, and roughly where from, so we can improve it.
• Running the site — server logs, and the country check that decides whether you are shown the cookie banner.

Cookies

Google Analytics uses Consent Mode, a Google system with four settings, called consent signals, that control what it may store on your device:

• analytics_storage — the cookie Google Analytics uses to recognize your browser on a later visit
• ad_storage — cookies used for advertising
• ad_user_data — whether your data may be sent to Google for advertising
• ad_personalization — whether your data may be used for personalized advertising

Every visit starts with all four denied, for every visitor.

Google Analytics receives a record of each page you open as it loads, before you do anything on the page, including answering the banner.

If you have not accepted analytics cookies here before, or your browser sends a Global Privacy Control signal, all four signals are denied when the first record of your visit is sent. That record carries no cookie and no identifier that would follow you between visits.

If you accepted analytics cookies here before and your browser sends no Global Privacy Control signal, your earlier acceptance is restored before the record is sent. Google Analytics then reads its existing cookie from your browser, and the record carries the identifier in that cookie.

Where no banner is shown, analytics_storage switches to granted right after that first record, unless you have declined here before, your browser sends a Global Privacy Control signal, or your browser blocks site data. Records sent after that, on the same page and on later pages in the visit, carry the analytics cookie, including one set on an earlier visit.

The request carries your IP address either way, because every request on the internet does. Declining does not stop that request. It stops the cookie.

In the European Economic Area, the United Kingdom, Jersey, Guernsey and the Isle of Man, a banner asks you before analytics cookies are set. All four signals stay denied until you answer. Everywhere else there is no banner, and Google Analytics is allowed to set its cookie without you being asked. If your country cannot be worked out, you are shown the banner.

Only analytics_storage can switch to granted. That happens if you accept, and it happens on its own where no banner is shown. Google Analytics then sets cookies in your browser, named _ga and one beginning _ga_. They last up to two years, and they let Google tell that two visits came from the same browser. The three advertising signals stay denied on every path: if you accept, if you decline, and if analytics is switched on for you. Neither accepting nor the automatic switch permits Google to set advertising cookies, or to use your visit for advertising or personalization.

If you decline, all four signals stay denied. Google Analytics sets no new cookies, and still receives the cookie-free record described above. A Google Analytics cookie already in your browser is deleted when you decline.

Your answer is stored in this browser under the name tc-consent-v1. It is a local storage entry, not a cookie. It never leaves your device. It stops the banner asking again. Clearing your site data clears it, and you are back to the default for your country. Analytics switched on for you is not stored anywhere. It is worked out again on every visit. If your browser blocks site data, no answer can be stored and no analytics cookie is switched on. All four signals stay denied, and the banner is not shown.

We set no other cookies on this site.

If your browser sends a Global Privacy Control signal, all four signals stay denied on every visit, whichever country you are in. No banner is shown, and no analytics cookie is switched on for you. The button below will not open the banner. Google Analytics still receives the cookie-free record described above. A Google Analytics cookie already in your browser is deleted as soon as that signal is detected.

Gift Claims

If you claimed the free gift for the Craven Cancer Classic, the form collects:

• Your name and email address
• Your phone number, if you choose to give one
• Whether the gift is for you or for another golfer
• The name of that golfer, if it is not you
• The postal address the gift is being sent to
• Your business name, your role, and what you are looking for, if you asked to talk to Scott

We use it to post the gift, to send you one email confirming the claim, and, if you asked for it, to have a conversation about your work. We do not use it for anything else.

We also check how long the form took to fill in and whether a hidden field was filled, which is how we spot claims that may be automated. We do not keep either measurement. If they suggest a claim is automated, we note that on the claim so a person can check it.

If you claimed for another golfer

We hold that golfer's name and the postal address you gave us, and nothing else about them. We got both from you, not from them. We use them to address the parcel and for nothing else, and we put a note inside telling them we held their details and how to have them corrected or deleted.

Contact Form

If you send us a message through the contact form on the home page, the form collects:

• Your name and email address
• Your phone number, if you choose to give one
• Your business name and what you are looking for
• Your role, if you choose to give one
• Which button on the site you opened the form from

We use it to reply to your message. We store it in Notion and send a copy to our own inbox, and we send you one email confirming that we received it. The confirmation and the copy to us are sent through Resend.

The form also times how long it takes to fill in and checks a hidden field, to help us spot messages that may be automated. We do not keep either measurement. If they suggest a message is automated, we note that on it so a person can check it.

Google Analytics is told when the form is opened, sent, or shows an error. It is never sent anything you type.

Text Messages

Mobile numbers and text-message consent are collected only to send the alerts you signed up for. That includes answering HELP and honoring STOP.

We do not share or sell mobile numbers or SMS opt-in data with third parties or affiliates for marketing purposes. Text messaging originator opt-in data and consent are not shared with any third parties.

Our text message provider, Twilio, receives your mobile number and the messages we exchange only to deliver them on our behalf. Twilio is also where your number and your opt-in and opt-out record are stored.

How the program works is set out in our Text Message Terms.

Legal Basis for Processing

Where you are asked, our legal basis for setting analytics cookies and for the visit data collected through them is your consent. The Cookies section above sets out where you are asked and when analytics is turned on without asking you.

You can withdraw your consent at any time by making a new choice. Withdrawing applies from that moment onward and does not undo processing that already happened.

For an email you send us, our legal basis is our legitimate interest in replying to you. For server logs, it is our legitimate interest in operating and securing this site.

For a gift claim, our legal basis is your consent, given by ticking the box on the claim form. You can withdraw it by emailing us, and we will delete what we hold.

If you claimed for another golfer, that golfer's name and address are a separate case from your own details. They have not agreed to anything on this site, because they have never been on it. The box you tick is your statement that you have their agreement to pass their details to us. It is not their consent and we do not treat it as consent. We hold their address because a gift cannot be posted without one, and posting the gift is the only thing it is used for.

For a message sent through the contact form, our legal basis is our legitimate interest in replying to a message you chose to send us.

For text message alerts, our legal basis is your consent, given by texting WATER and replying Y. You can withdraw it at any time by replying STOP.

How We Share Your Information

We rely on the following third-party services to operate this site:

• Vercel — website hosting and edge network
• Google Analytics 4 — site analytics, with cookies set as described under Cookies above
• Google Workspace — our business email, where messages you send to hello@thinkcode.ai are received and stored
• Notion — where we store what you send us through the forms on this website
• Resend — sends the emails about what you send us through those forms
• Twilio — sends our text message alerts and stores your mobile number and opt-in record, as described under Text Messages above
• GitHub — open source repositories linked from this site

Each provider has its own privacy policy covering the data it collects. We do not sell your data to any third party.

International Data Transfers

Google Analytics is operated by Google LLC, in the United States. The record described in the Cookies section above is sent there and handled there, including the cookie-free record, whether or not you accept. Google Workspace is operated by Google LLC too, so email you send us is also received and held in the United States. Notion and Resend are also operated in the United States, so what you send through the forms on this website is stored and sent there. Twilio is also operated in the United States, so if you join ThinkCode Water Alerts, your mobile number and messages are sent and stored there.

Google publishes its own account of how it handles these transfers for its advertising and analytics products. That account names the frameworks and contract terms it says it relies on. It is on the Google page about data transfers. Whether Google LLC holds a current certification under the EU-U.S. Data Privacy Framework is recorded on the public Data Privacy Framework list, which is the live source for that rather than anything stated here.

That account comes from Google, and that listing is a public register entry. Neither one is an assessment by us of whether they cover the way this site is set up.

Data Retention

Email correspondence is kept in Google Workspace, our business email provider. It is not deleted on a schedule, and you can ask us to delete it at any time. Google holds analytics data for the retention period set on our Google Analytics property, then deletes it. Google Analytics cookies, once set, last up to two years. Clearing your site data removes them, along with your stored answer if you made one. Server log retention is set by Vercel.

Anything we needed only to post a gift, including the postal address, is deleted once the parcel is posted. If the gift was all you asked for, that is the whole record. If you asked to talk to Scott, we keep your contact details and what you told us about your work, because you asked us to get in touch. You can ask us to delete those at any time and we will. The details of a golfer you claimed for are deleted once the parcel is posted, every time.

What you send through the contact form is kept so we can reply and follow up, because you asked us to get in touch. You can ask us to delete it at any time and we will.

If you join ThinkCode Water Alerts, we keep your mobile number while you are subscribed. After you opt out, we keep a record of the opt-out so we do not text you again.

Your Rights

You can ask us to do any of the following with the personal data we hold about you:

• Access — give you a copy of it
• Correction — fix anything inaccurate, or fill in anything incomplete
• Deletion — erase it
• Restriction — pause what we do with it while a question about it is open
• Portability — where our basis is your consent and the data is what you gave us, send you a copy in a form you can take elsewhere, or pass it to someone else where that is technically feasible

To make any of these requests, email us at hello@thinkcode.ai. You can also turn analytics cookies off at any time using the control in the Cookies section above, even if you were never shown the banner.

Your right to object

Our legal basis is legitimate interest for three things: email you send us, messages you send through the contact form, and our server logs. You can object to that processing on grounds relating to your particular situation. Tell us those grounds and we will stop, unless we demonstrate compelling legitimate grounds that override yours, or we need the data to establish or defend a legal claim.

Where our legal basis is your consent, there is nothing to object to. You withdraw it instead, using the control described above.

If your country has a data protection authority, you can complain to it about how we handle your data. You do not need to contact us first.

Data Security

This site is served over HTTPS, so traffic between your browser and the site is encrypted. The site has no accounts or passwords. What you send through its forms is stored in Notion. Your mobile number and opt-in record for text message alerts are stored with Twilio. Email you send us is received and held in Google Workspace, our business email provider.

Children's Privacy

This site is not aimed at anyone under 18. We do not knowingly collect personal data from children. If you think a child has sent us personal data, email us and we will delete it.

Changes to This Policy

We may update this policy from time to time. When we do, we change the effective date at the top of this page.

Contact Us

ThinkCode, LLC — hello@thinkcode.ai