Privacy policy

Who this is

This site is operated by TRJ Technology, LLC, a limited liability company organised in the State of Missouri, United States. For anything in this policy the contact is tim@trjtech.com. Messages go to Tim Johnson personally; there is no support queue.

What is collected

Three things, and nothing else.

1. Analytics, only if you say yes

If you accept analytics on the consent banner, this site loads Google Analytics 4 and Microsoft Clarity. Those tools record the pages you visit, roughly where in the world you are, which site or search sent you, your device and browser type, and how long you stayed. Google Analytics is configured with IP anonymisation on and Google advertising signals off, so nothing here feeds ad targeting.

2. Session recording, also only if you say yes

Microsoft Clarity records your interactions with the page — mouse movement, scrolling, clicks, and taps — and replays them as a video-like session so I can see where the page is confusing. Clarity masks text input by default, so what you type into the contact form is not captured in the replay, but the fact that you interacted with the form is. If that is more than you want to share, decline on the banner and no recording happens at all.

3. What you send me through the contact form

The form asks for your name, work email, company, team size, situation, and a description of what is going on. Only the email address and the description are required. It all goes to my inbox as an email and nowhere else — not to a mailing list, not to a CRM, not sold, not shared.

Your IP address is used to rate-limit the form and to run the anti-spam check. The address itself is never written down. To count submissions it is converted to a one-way keyed hash, and that hash is stored with a timestamp for up to one hour and then deleted. The hash cannot be turned back into your address, it is not stored alongside your message, and it is not used for anything else.

Consent, and how to change your mind

No analytics or recording script loads before you accept. Your choice is stored in this browser’s localStorage under the key trj.consent.analytics, and a decline is honoured on every later visit — the scripts are never fetched.

If your browser sends a Do Not Track or Global Privacy Control signal, the choice is made for you: analytics are declined automatically and the banner never appears.

To reverse an earlier acceptance, clear this site’s data in your browser settings, or open the browser console and run trjAnalytics.reset(), then reload and choose again.

Who processes your data

Google LLC

Google Analytics 4. Consent-gated. IP anonymisation on, advertising signals off. Governed by Google’s own privacy policy and data processing terms.

Microsoft Corporation

Microsoft Clarity, for analytics and session replay. Consent-gated. Governed by the Microsoft privacy statement.

Microsoft Azure

Hosting (Azure Static Web Apps), the contact form backend (Azure Functions), outbound email (Azure Communication Services), and the one-hour rate-limit window (Azure Table Storage). Standard platform request logs are generated and retained by the platform.

Cloudflare, Inc.

Turnstile, the anti-spam check on the contact form. It sees your IP address and basic browser signals in order to decide whether the submission is automated. It does not set advertising cookies.

These are the only third parties involved. The two typefaces this site uses are served from this domain rather than from a font CDN, so no third party learns about your visit through them.

How long things are kept

• Google Analytics - event and user data retained for 14 months, then deleted automatically by Google.
• Microsoft Clarity — session recordings and heatmaps retained for 30 days, per Clarity’s default.
• Contact form emails — kept in my mailbox for as long as the conversation is live, and for up to 24 months afterwards for business records. Deleted on request.
• Rate-limit records — a keyed hash of your IP address and a timestamp, kept for one hour and then deleted automatically.
• Platform request logs — retained by Azure under its own operational schedule; I do not export or analyse them.

Your choices

• Decline analytics on the banner, or send a Do Not Track / Global Privacy Control signal, and nothing is loaded.
• Ask what I hold about you and I will tell you, in plain language, within 30 days.
• Ask me to delete it and I will delete the email thread and any notes, and confirm when it is done.
• Ask Google or Microsoft directly about the data they hold; each runs its own request process, and their retention is outside my control.

For any of these, email tim@trjtech.com with the word “privacy” in the subject line. No form required.

Cookies and local storage

This site sets no cookies of its own. Declining analytics leaves exactly one item in local storage — your recorded choice. Accepting additionally allows Google Analytics and Microsoft Clarity to set their own first-party cookies and storage, as described in their policies.

Children

This is a business-to-business site aimed at company founders and executives. It is not directed at children under 13, and I do not knowingly collect anything from them.

Where data is processed

Hosting and email processing run in Microsoft Azure regions in the United States. Google and Microsoft may process analytics data in the United States and elsewhere under their own transfer mechanisms. If you are in the EEA or the UK and you decline analytics, no personal data leaves this site except the contact form message you choose to send.

Changes

If this policy changes in a way that affects what is collected, the “last updated” date at the top changes with it.

Contact

TRJ Technology, LLC — St. Louis, Missouri, United States
tim@trjtech.com