Effective 2026-07-25

Privacy, in plain words.

What we collect

• Email you send us. If you write to studio@upshiftsites.com, we keep the correspondence — that's it.
• Aggregate traffic stats. This site uses cookieless, privacy-first analytics (Cloudflare Web Analytics). No fingerprinting.
• Analytics and advertising measurement, on our public pages. Those pages carry a Google tag doing two jobs, and the two reach different pages. Google Analytics runs on all of them: it counts visits and tells us which page someone landed on and what sent them — a search, a link, an ad — so we can see what's working. Google Ads measurement runs only on the store pages under /store/: it records which ad brought you here, and when an order completes reports the purchase and its value so we can tell which ads pay for themselves. Read anything else on this site — the home page, /ai/, the guides, the legal pages — and the advertising half never loads at all. To match a sale to the ad click, the order confirmation page also sends Google a one-way SHA-256 hash of your email address; the hashing happens in your browser and the readable address never leaves the page.
  Where it deliberately does not run: the unlisted /for/… client pitch pages, the preview door at /gate/, and your template library at /store/library/. Those are reached by a private link, and we keep both the pages and the links out of analytics entirely.
• Payments. Checkout is Stripe's own payment form, embedded in our page so you don't get bounced to another site. Card numbers go straight to Stripe and never touch our servers; see Stripe's privacy policy for how they handle payment data.
• Private previews. Demo sites on *.preview.upshiftsites.com set one functional cookie so your access link keeps working. It identifies the preview, not you.

What we never do

• No selling your information, and no sharing it beyond what's named above — Stripe to take the payment, Google to measure the ad.
• No data brokers, no scraped mailing lists.
• No advertising audiences. We measure whether an ad worked; we don't build a retargeting pool out of you or feed personalized advertising. Google's ad-personalization signal is switched off site-wide.
• Nothing at all in the EEA, the UK and Switzerland. Visitors there get no advertising cookies and no user data sent, by default. We ask first, and nothing is set unless the answer is yes.
• No ignoring your browser. If your browser sends a Global Privacy Control signal, we treat it as a no and don't ask again.
• Unsubscribe requests are honored promptly and kept on a permanent suppression list.

Changing your mind

Every page that carries the tag has an Ad measurement link in the footer. It shows whether the cookie is on and lets you switch it either way, whenever you like — and turning it off deletes the cookie rather than merely stopping there. No account, no form, no waiting on us.

Questions or deletion

Email studio@upshiftsites.com and we'll answer, correct, or delete — your call.