California Notice at Collection / State privacy rights. See the State privacy rights notice for important information about your rights under applicable U.S. state privacy laws.
Dirt Road (“Dirt Road,” “we,” “us,” or “our”) provides websites, custom software, and technical consulting for small and medium-sized businesses. This Privacy Policy describes how Dirt Road processes personal information that we collect through our digital or online properties or services that link to this Privacy Policy (including our website) as well as our marketing activities and other activities described in this Privacy Policy (collectively, the “Service”).
This policy is about the Service. Professional services we perform under a separate written agreement may involve additional personal information, which those agreements and any project-specific notices will cover.
Personal information we collect
Information you provide to us
Personal information you may provide through the Service includes:
- Contact data, such as your name and email address.
- Professional data, such as your company name and the nature of your inquiry.
- Communications data based on our exchanges with you, including messages you send through the contact form, email, or otherwise.
- Other data you choose to include in free-form fields. Please do not submit government identification numbers, payment card details, health information, or other sensitive personal information through the Site.
The Site does not offer user accounts, checkout, or file uploads. We do not ask you to create a password, make a purchase, or submit government identification or payment card information through the Service.
Third-party sources
We may combine personal information we receive from you with personal information we obtain from:
- Service providers that help us operate the Service, including hosting, security, bot protection, and email delivery.
- Business transaction partners, if we receive information in connection with an actual or prospective business transaction such as a sale of assets.
We do not buy personal information from data brokers, and the Site does not use social login.
Automatic data collection
We, our service providers, and our security vendors may automatically log information about you, your computer or mobile device, and your interaction with the Service, such as:
- Device data, such as browser type, operating system, device type, IP address, language settings, and general location derived from IP address (for example, city or region). We do not collect precise geolocation.
- Online activity data, such as pages requested, referring URL, timestamps, and diagnostic information needed to operate and secure the Service.
We do not currently use email tracking pixels or advertising identifiers. Google Analytics may also collect device and online activity data as described below. For more on cookies, see Tracking & other technologies and our Cookie Notice.
Data about others
Please do not submit someone else’s personal information through the Service unless you have their permission to do so.
Tracking & other technologies
Some automatic collection is facilitated by cookies and similar technologies. We use Cloudflare security cookies to operate the Service, and Google Analytics 4 to understand how the Site is used. We do not currently use advertising cookies, social-media cookies, or session-replay tools.
The Site does not include a public chatbot or other generative-AI interface that would send your prompts to an AI provider.
Details, including how to control cookies, are in our Cookie Notice.
How we use your personal information
We may use your personal information for the following purposes:
Service delivery and operations
- Provide, operate, and maintain the Service
- Enable security features, including bot protection and abuse prevention
- Receive and respond to your inquiries, requests, and feedback
- Send service-related messages about an inquiry you submitted
Service improvement
We may use logs and similar operational data to diagnose errors, understand whether the Service is working, and improve the Site. We use Google Analytics 4 for aggregated usage metrics such as pages viewed, referrers, device type, and general location. We disable Google Signals and ad-personalization signals. Learn how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites.
Marketing and advertising
We do not currently send marketing emails to Site visitors, and we do not use the Service for interest-based advertising. If that changes, we will update this Privacy Policy and provide opt-out choices.
Compliance and protection
- Comply with applicable laws, lawful requests, and legal process
- Protect our, your, or others’ rights, privacy, safety, or property
- Enforce the terms that govern the Service
- Prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical, or illegal activity, including cyberattacks
Aggregated or de-identified data
We may create aggregated, de-identified, or anonymized data from personal information. We will not attempt to reidentify such data except to test whether our de-identification processes work. We do not use Site visitor personal information to train generalized AI models.
Further uses
If we want to use your personal information for a new purpose that is not compatible with the purpose for which it was collected, we will ask for your consent where required.
Retention
We generally retain personal information to fulfill the purposes for which we collected it, including legal, accounting, or reporting requirements, establishing or defending claims, and fraud prevention. How long we keep it depends on the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes of processing, and legal requirements.
Contact inquiries are kept in our email and business records for as long as needed to respond and maintain ordinary records of the correspondence. Security and request logs are kept according to our hosting and security providers’ operational defaults and our need to investigate abuse. When we no longer need personal information, we delete it, anonymize it, or isolate it from further processing.
How we share your personal information
We may share personal information with the following parties (or as otherwise described in this Privacy Policy or at the time of collection).
- Service providers. Companies that help us operate the Service:
- Cloudflare — hosting, content delivery, and security
- Arcjet — bot protection, email validation, and rate limiting on the contact form
- Resend — email delivery of contact-form notifications
- Google Analytics — site usage measurement
- Third parties you designate, when you ask us to share information (for example, if you request an introduction).
- Professional advisors, such as lawyers, auditors, bankers, and insurers, in the course of the services they provide to us.
- Authorities and others, when we believe in good faith it is necessary for the compliance and protection purposes described above.
- Business transferees, in connection with an actual or prospective financing, acquisition, merger, sale of assets, or similar transaction, including in bankruptcy or receivership.
We do not share personal information with advertising networks, and the Site has no public user profiles. We do not sell your personal information.
Your choices
This section describes rights and choices available to users. Residents of certain U.S. states can find additional information under State privacy rights notice.
- Access or update your information. The Site does not have accounts. To access or update information you submitted, email contact@dirtroad.dev.
- Opt out of marketing. We do not currently send marketing emails. If we do, you may unsubscribe using the link in the email or by contacting us. You may still receive service-related messages about an inquiry you submitted.
- Cookies and analytics. See our Cookie Notice. You can also block Google Analytics with the Google Analytics opt-out browser add-on.
- Do Not Track. Some browsers can send “Do Not Track” signals. We currently do not respond to those signals. Learn more at allaboutdnt.com.
- Declining to provide information. You can browse most of the Site without sending us a message. If you do not provide the information required by the contact form, we cannot respond.
Other sites and services
The Service may contain links to websites and online services operated by third parties. We do not control those services and are not responsible for their practices. Those links are not an endorsement. Read the privacy policies of the other services you use.
Security
We employ technical and organizational safeguards designed to protect the personal information we collect. Security risk is inherent in internet and information technologies, and we cannot guarantee the security of your personal information.
International data transfer
We are based in the United States and use service providers that may operate in other countries. Your personal information may be processed in the United States or other locations where privacy laws may not be as protective as those in your state, province, or country.
Children
The Service is not intended for anyone under 18. If you are a parent or guardian and believe we collected personal information from a child in a manner prohibited by law, contact us. If we learn we collected personal information from a child without required parental consent, we will delete it as required by law.
Changes to this Privacy Policy
We may modify this Privacy Policy at any time. If we make material changes, we will update the effective date and post the revised policy on the Service. Changes take effect when posted (or as otherwise stated at the time of posting). Your use of the Service after the effective date means the modified policy applies to your interactions with the Service.
How to contact us
Questions about this policy, or requests to exercise a privacy right, can be sent to contact@dirtroad.dev.
We do not currently publish a mailing address or phone number for privacy requests. Email is the method we can reliably monitor.
State privacy rights notice
Except as otherwise provided, this section applies to residents of U.S. states to the extent they have privacy laws applicable to us that grant the rights described below (collectively, the “State Privacy Laws”). Not every right is available in every state. We may decline a request as permitted by law, including if we cannot verify your identity or understand the request.
“Personal Information” and “Sensitive Personal Information” have the meanings given to similar terms in the State Privacy Laws, excluding information those laws do not cover.
Your privacy rights
Depending on your state, you may have some or all of the following rights:
- Information. Request the categories of Personal Information we collected, the sources, the business or commercial purposes, and the categories of third parties with whom we disclose it.
- Access. Request a copy of the Personal Information we have collected about you.
- Correction. Ask us to correct inaccurate Personal Information.
- Deletion. Ask us to delete Personal Information we collected from you.
- Appeal. Appeal our denial of a valid request, where the law provides that right.
- Nondiscrimination. Exercise these rights free from discrimination prohibited by the State Privacy Laws.
Sales, sharing, targeted advertising, and profiling
- Targeted advertising. We do not process your personal information for targeted advertising purposes.
- Sale or sharing. We do not sell your Personal Information, and we do not share it for cross-context behavioral advertising, within the meaning of the State Privacy Laws.
- Profiling. We do not use your Personal Information for profiling or automated decision-making that produces legal or similarly significant effects. Automated security tools may block abusive traffic.
- Consumers under 16. We do not have actual knowledge that we collect, sell, or share the personal information of consumers under 16.
- Sensitive Personal Information. We do not intentionally collect or process Sensitive Personal Information, and we do not process it to infer characteristics about consumers.
We honor Global Privacy Control (“GPC”) signals as valid opt-out requests. When we detect a GPC signal, we do not load Google Analytics. We do not sell or share Personal Information for targeted advertising. Learn more at globalprivacycontrol.org.
How to exercise your rights
Email contact@dirtroad.dev with the subject line “Privacy Request.” Tell us which right you want to exercise and enough detail for us to locate your information (typically the email address you used on the contact form).
We may need to verify your identity before processing an access, correction, deletion, or appeal request. We may ask you to confirm information you previously provided, such as that email address, and we reserve the right to request additional information where permitted by law.
You may use an authorized agent where the law allows. We may require proof of the agent’s identity and authority, such as a power of attorney or signed permission, plus verification of your identity.
Information practices
The following describes our practices currently and during the 12 months preceding August 21, 2026. We collect the categories below from you, your device, and service providers, and we use them for the purposes described in this policy. We do not attempt to reidentify de-identified information except to test our de-identification processes. Information you type into free-form fields may include categories not listed.
| Personal information we collect | CCPA category | Purposes | Disclosed for a business purpose | Sold or shared |
|---|---|---|---|---|
| Contact data (name, email) | Identifiers | Operate the Service; respond to inquiries; security | Email delivery and security providers | None |
| Professional data (company, inquiry context) | Identifiers; professional information | Operate the Service; respond to inquiries | Email delivery providers | None |
| Communications data (messages, correspondence) | Identifiers; customer records information | Respond to inquiries; keep business records; compliance | Email delivery providers | None |
| Device data (IP address, browser, device type) | Identifiers; internet activity | Operate and secure the Service; diagnose issues; analytics | Hosting, security, and analytics providers | None |
| Online activity data (pages requested, referrer, timestamps) | Internet or other electronic network activity | Operate and secure the Service; analytics | Hosting, security, and analytics providers | None |
Additional information for California residents
Shine the Light. California residents may ask companies with whom they have a business relationship primarily for personal, family, or household purposes for the names of third parties that received certain personal information for those parties’ own direct marketing during the preceding calendar year, and the categories of information disclosed. Send requests to contact@dirtroad.dev with the subject “Shine the Light Request,” your first and last name, mailing address, and a statement that you are a California resident. We reserve the right to require additional information to confirm identity and residency. We will not accept these requests by phone. We do not disclose personal information to third parties for their own direct marketing.
Additional information for Nevada residents
Nevada residents may opt out of the sale of certain personal information for monetary consideration. We do not currently make those sales. To request that we not make any potential future sales, email contact@dirtroad.dev.
If you have questions about our privacy practices, contact us at contact@dirtroad.dev.