Website privacy notice
What this website collects, and what it doesn't.
This site is a static set of pages with no analytics, no advertising and no cookies of our own. We learn almost nothing about you by your visiting. The exception is the contact page, which carries a form and is the only page that runs a script — what that involves is set out below in full.
Who we are
trainedstate.com is operated by STACSTRAT LLC, a United States company. Questions about this notice, or about your personal information, go to hello@trainedstate.com.
What this notice covers
This notice covers the website only. The Trained State product, once in service, handles training records on behalf of customer organizations under a separate agreement and a separate notice. In that setting the customer organization determines what is collected about its personnel and why; STACSTRAT processes it on the customer's instructions.
Information we collect
The contact form
The form on the contact page asks for your name, email address, company and message, and optionally a phone number. You choose what to put in the message.
When you submit it, the form posts to Submit Kit, a third-party form provider, which delivers it to our inbox as an email and, it states, keeps no copy afterwards — so the email in our inbox is the only record of your message. Your address is set as the reply-to, which is how we answer you. We use what you send to reply, to evaluate a pilot or design-partner request, and to keep a record of the correspondence, for as long as the conversation and our ordinary business records require. You are not added to a mailing list; we do not run one.
The form is protected by Cloudflare Turnstile, a check that distinguishes people from automated submissions. It runs in the page, is the only script this site loads, and receives your IP address and browser characteristics in order to do its job. It is not an advertising or analytics product.
If you would rather not involve either, email us directly. It reaches the same inbox.
Email you send us
If you write to us by email instead, we receive whatever you send: typically your name, email address, organization and the content of your message, and we use and keep it as described above.
Technical data processed by our host
The site is served by Cloudflare. To deliver pages and to protect the site from abuse, Cloudflare's systems process the technical details of each request: your IP address, browser type, the page requested and the time. Cloudflare provides us with aggregate, non-identifying request statistics. We do not receive, and do not look for, records of individual visitors. Cloudflare's own handling of this data is described in its privacy policy.
Fonts
The site's typefaces are loaded from Google Fonts. When your browser requests them, Google receives your IP address, the font requested, your browser and operating system versions, and the address of the page you are on, as it does for any resource fetched from its servers. Google states in its Fonts FAQ that the Fonts API does not set or log cookies, and that it does not use this information to profile users or for targeted advertising; Google's wider handling of data is described in its privacy policy. If this is a concern, a browser setting or extension that blocks third-party requests will stop it; the site remains readable with your system fonts.
What we do not do
- We set no cookies of our own and use no browser storage. Cloudflare may set a cookie on the contact page as part of the anti-automation check; see the cookie statement.
- We run no analytics, tracking pixels, session recording or advertising scripts, on any page. The site's security policy permits exactly one external script — the Cloudflare check on the contact page — and blocks every other script origin.
- We do not sell personal information, and we do not share it for cross-context behavioral advertising, in the meaning those terms have under United States state privacy laws.
- We do not embed social media widgets, hosted video, or any third-party content beyond the anti-automation check described above, which appears only on the contact page.
Why we are allowed to process this (EEA, UK and similar jurisdictions)
Where a legal basis is required, we rely on our legitimate interests in operating a secure, functioning website, in keeping the contact form free of automated abuse, and in responding to people who write to us. Submitting the form is your choice, and every route to us has a plain-email alternative. Where consent is required for something, we will ask for it at the time; nothing on the site today requires it.
Who we share information with
Only the service providers needed to run the site, take a message and read our mail:
- Cloudflare — hosts the site, and provides the Turnstile check on the contact page.
- Google — serves the typefaces.
- Submit Kit — delivers contact form submissions to our inbox and, it states, retains no copy.
- The email service through which we receive and answer messages.
Each processes data for us under its own terms. We may also disclose information where the law requires it, or to protect the rights and safety of STACSTRAT, our customers or others.
Where information is processed
STACSTRAT is based in the United States, and correspondence with us is handled there. Cloudflare serves the site from the location nearest to you, so technical request data may be processed in your region and in the United States. If you are outside the United States, the protections your local law provides may differ from those that apply here.
Your rights
Depending on where you live, you may have the right to ask what personal information we hold about you, to have it corrected or deleted, to object to or restrict how we use it, to receive a copy in a portable form, and to withdraw consent where we relied on it. To exercise any of these, email hello@trainedstate.com. We will need enough information to confirm it is you, we will not treat you differently for asking, and we will respond within the time your local law allows. If you are unhappy with our response, you may complain to the data protection authority where you live.
In practice, the personal information we hold about a website visitor is limited to what you have sent us, by the form or by email, so most requests are simple.
Children
This site is intended for professionals and is not directed at children. We do not knowingly collect personal information from anyone under sixteen.
Security
The site is served only over HTTPS with a strict content security policy, sends no data to us from your browser, and stores nothing on your device. Because we sell security discipline, we also publish a security.txt for reporting anything you think we have got wrong.
Changes
When this notice changes, the effective date and version at the top change with it. Material changes will be noted on this page for a reasonable period.
Contact
STACSTRAT LLC · hello@trainedstate.com