Your information, treated with care.

Last updated: October 22, 2026.

What this website collects

Fonts and images are served with the site. Normal hosting requests may include an IP address, browser details, requested URL, and request time. Website analytics is described below. We do not use advertising cookies or remarketing pixels.

Website analytics

We use Google Analytics 4 to understand visits across our website, including checkout, order-status pages, private report pages, and interactive portfolio examples. We also measure form starts and submission attempts, transitions to Stripe, and accepted contact and website-checkup requests. Google may process cookie identifiers, approximate location, device and browser information, referring website, and page and event activity. Analytics cookies expire after up to 60 days. We do not send form contents, names, email addresses, phone numbers, billing details, submitted website addresses, report contents, or private report and order tokens to Analytics.

Analytics runs automatically unless you turn it off or your browser sends a privacy signal. Form tracking records only a fixed form category and the interaction; it does not record entered values. A submission attempt does not mean a payment succeeded or a request was accepted. Portfolio demo interactions are identified separately from real inquiries. We remove query strings and fragments from the page addresses sent to Analytics and limit referring addresses to their website origin. Advertising personalization and Google signals are off. Analytics is optional and does not affect forms, reports, or checkout.

Use the controls below to turn analytics off or on at any time. Previously saved opt-outs are respected. We remember an explicit preference in your browser for up to 180 days. Turning analytics off removes accessible Analytics cookies and stops further collection on this site; it does not erase information already processed. We also keep analytics off when your browser sends Global Privacy Control or Do Not Track. Read Google’s privacy policy and how Google uses information from sites that use its services for its processing practices.

The contact form

When you send a message, we collect your name, email, business name, message, service preferences, and any optional phone number or website you provide. We save the inquiry in our private database and use Resend to email a notification to BayBold. The notification includes your details so we can respond. We record the request time and the version of this notice. Sending an inquiry does not subscribe you to marketing.

Contact-form records are normally removed after 90 days; separate email correspondence may be retained as needed to manage our relationship. Backup copies expire on their own rotation. We use a keyed IP hash for abuse prevention and remove those rate records after 24 hours. We do not store the raw IP address in inquiry records or save your message in browser storage. If notification delivery is delayed, the saved inquiry remains available to BayBold and delivery is retried.

The free website checkup

When you request a checkup, we collect your name, email, business name, website address, optional phone and city/area, selected goal, and your report and optional marketing choices. We store the request time and consent version. We use those details to prepare your report and follow up about its findings. Requesting a report does not subscribe you to marketing; occasional website tips are a separate optional choice.

The checkup reads a limited sample of public website pages, crawl instructions, and sitemap information. It does not sign in, submit forms, make bookings or purchases, or access your customer accounts. When configured, Google PageSpeed Insights processes the submitted website URL to provide a mobile lab measurement; we do not send your name, email, or phone to that service.

We use Resend for report email delivery when live sending is enabled. Private report links contain an access token and work for 30 days; anyone you share the complete link with can open the report during that period. Keep the link private. We do not include report tokens in ordinary server request URLs. In local preview mode, report emails are saved locally and are not sent.

Checkup reports and local email previews are normally removed after 30 days. Lead and consent records are normally removed after 90 days unless you begin a separate engagement or another obligation requires retaining separate correspondence. We use a keyed hash of the requesting IP address for short-lived abuse prevention, with those checkup rate records removed after 24 hours. Hosting and email providers may retain their own operational logs under their policies. We do not store the raw requesting IP in checkup lead records.

Your cart and checkout

Your chosen plan, billing period, add-ons, and content preference are saved in local browser storage so your cart can survive a refresh. We do not save contact fields or billing addresses in browser storage. Your browser session may retain random checkout retry identifiers and a private order-status token. Clearing the cart removes its local selections.

When you continue to Stripe, we collect your name, business name, email, optional phone, billing address, selected services, and timestamped acceptance of the checkout terms. We save the order and scope so we can manage billing, delivery, and support. We send the necessary contact, billing, and order information to Stripe, which handles payment details and subscriptions under its own privacy policy. BayBold does not receive your full card number. This does not subscribe you to marketing.

Abandoned checkout records are normally removed after 30 days. Completed orders and consent records are retained as needed to deliver services and meet accounting or legal obligations. Checkout abuse prevention uses a keyed IP hash for up to one hour; raw IP addresses are not stored in checkout records. Private order links allow access to limited payment-status information, so keep them private.

When you contact us

If you email or call BayBold, we may receive your name, contact information, business details, and the information you choose to share. We use that information to respond, discuss your project, and manage the relationship. Please do not send sensitive patient, customer, financial, or payment records through general inquiries.

Service providers and sharing

Email, phone, and hosting providers process information needed to provide their services. BayBold does not sell inquiry information or use this website for targeted advertising. Client projects may require a separate agreement covering access, confidentiality, and data handling.

Retention and requests

We keep correspondence as needed to respond, manage a potential or active engagement, and meet applicable obligations. To ask about access, correction, or deletion of information you provided, email hi@baybold.com. We may need to confirm your identity and retain information required for an ongoing obligation.

Links and future changes

Other websites and your chosen email application have their own policies. We will update this notice when our data handling changes.

Contact

For privacy questions, email hi@baybold.com or call (415) 465-2729 with a privacy question.