Privacy Policy

How we handle data on this website.

Last updated: October 7, 2026

Scope

This policy covers the public Ortelian website at ortelian.com, including its pages, notes, newsletter form, contact form, and contact links. It does not cover the Ortelian application, customer projects, private workspaces, product environments, or services that have their own agreement or notice.

Controller

This website is operated by Ortelian, Inc., a Delaware corporation. Ortelian, Inc. is the controller of the personal data described in this policy.

Ortelian, Inc.
131 Continental Dr, Suite 305
Newark, DE 19713, United States
Delaware corporation

For privacy questions or requests, email laurens@ortelian.com.

What we collect

  • Website delivery data. When you load the site, Cloudflare and related delivery infrastructure process request data such as IP address, requested URL, browser details, timestamps, and security signals to serve, secure, and troubleshoot the site.
  • Newsletter data. If you subscribe through the newsletter form, we collect your email address and a small source label, such as the page where the form was shown. Our server on Cloudflare passes this to Substack, which manages the list. Our server does not store your address, and its diagnostic logs record only whether a signup worked, never your address. We use this only for the Ortelian notes/newsletter, not for unrelated sales outreach.
  • Direct contact data. If you use our contact form or email us, we receive your email address, the content of your message, and ordinary metadata needed to receive and reply to it. Contact form submissions are stored by our server on Cloudflare, with the page you sent it from and your approximate country, and added to our CRM, Twenty. We are notified through Slack and by email sent through Resend. A copy is also sent through Web3Forms.
  • Analytics data. The site uses Open Analytics to understand aggregate website traffic and whether important site actions occur. It measures page URL, referrer, campaign parameters, coarse browser, operating-system and device classes, approximate location, engagement, performance, and the custom events we define. It sets no cookies, stores nothing in your browser, and does not store raw IP addresses or form values.
  • Google Analytics data. If you accept analytics cookies, Google Analytics 4 measures visits, referral and campaign sources, device and browser details, approximate location, engagement, clicks, and confirmed form conversions. Google uses first-party analytics cookies to distinguish visits. We do not send contact-form values, email addresses, or message contents to Google, and we disable Google Signals and advertising personalization.
  • Company-level visitor identification data. The site uses Dealfront / Leadfeeder Web Visitors to understand which companies visit the public website. Dealfront may process request and visit data such as IP address, page URL, referrer, campaign parameters, browser and device details, timestamps, visit duration, and pages viewed in order to identify visiting companies and show company-level website activity. We use this at company level, not to identify individual visitors, retarget ads, or make automated decisions about people. We do not use Dealfront form tracking on this site.

Why we use it

  • To publish, secure, maintain, debug, and improve the website.
  • To send the Ortelian notes/newsletter when you ask to receive it.
  • To respond when you contact us.
  • To understand aggregate site performance and which writing or pages are useful.
  • To understand which companies visit the public website and which pages they view, so we can evaluate account-level interest in Ortelian.
  • To comply with legal obligations and protect the site, Ortelian, and others.
  • Consent. We use consent for newsletter subscriptions, Google Analytics cookies, and any optional communications you ask to receive. You can withdraw analytics consent using Analytics preferences in the footer of every page.
  • Legitimate interests. We rely on legitimate interests to operate, secure, debug, improve, and measure the public website; understand company-level interest in Ortelian; and protect the website and our business. We use privacy-friendly aggregate analytics and company-level visitor identification, and do not use the public website for targeted advertising.
  • Pre-contractual steps. If you contact us about working together, we use your message and contact details to respond and take steps before a possible agreement.
  • Legal obligation. We may process or keep information where law requires it.

When you provide data

You are not legally or contractually required to provide personal data through this website. Newsletter signup is voluntary; if you do not provide an email address, we cannot subscribe you. Contacting us is voluntary; if you do not provide contact details or message content, we may not be able to reply.

Processors and recipients

We do not sell personal data or share it for cross-context behavioral advertising. We use a small set of providers:

  • Cloudflare for hosting, CDN, DNS, security, deployment, storing contact-form submissions, and passing newsletter signups to Substack.
  • Open Analytics for privacy-friendly aggregate analytics.
  • Google for Google Analytics, only after you accept analytics cookies.
  • Dealfront / Leadfeeder for company-level website visitor identification.
  • Substack for newsletter signup and email-list management.
  • Twenty for managing contacts and conversations.
  • Slack and Resend for notifying us of contact-form submissions.
  • Web3Forms as a second delivery path for contact-form submissions.
  • Email, legal, accounting, or professional-service providers when needed to receive messages, run the business, or comply with law.

We may also disclose information if required by law, to protect rights or security, or in connection with a merger, financing, acquisition, or similar business transaction.

International transfers

Because Ortelian, Inc. is in the United States, website data may be processed in the United States. Some providers also operate globally. Where required, we rely on applicable safeguards such as provider data-processing terms, certifications, standard contractual clauses, or other lawful transfer mechanisms. Open Analytics states that visitor analytics data is processed and stored in the EU.

Retention

  • Newsletter data is kept until you unsubscribe, ask us to delete it, or we no longer run the notes/newsletter. We may keep minimal suppression records where needed to honor opt-outs.
  • Contact emails and contact-form submissions are kept for as long as needed to respond, manage the relationship, and maintain ordinary business records.
  • Website delivery and security data is kept by our infrastructure providers according to their policies and only for as long as needed for delivery, security, debugging, and compliance.
  • Open Analytics is aggregate site measurement and is not used by us to identify individual visitors.
  • Google Analytics event and user data is retained for two months. Aggregate reports may remain available for longer.
  • Dealfront visitor data is kept according to our Dealfront account settings and only for as long as needed to review company-level website interest, improve the website, and manage ordinary business records.

Cookies and browser storage

Google Analytics loads only after you accept analytics cookies. Declining sends no data to Google Analytics. Analytics preferences in the footer lets you accept or withdraw consent at any time; withdrawal stops collection and removes the site's Google Analytics cookies. We remember your choice in local storage for six months and configure Google Analytics cookies to expire after six months. Google Analytics stays off when your browser sends Global Privacy Control or Do Not Track.

Open Analytics sets no cookies, stores nothing in your browser, and honours Global Privacy Control and Do Not Track. Dealfront runs in consent mode on this site and does not set its visitor cookies. Cloudflare may use strictly necessary security cookies if security features are triggered.

Your choices and rights

You can unsubscribe from newsletter emails using the unsubscribe link in those emails or by contacting us. Depending on where you live, you may also have rights to access your personal data; correct inaccurate personal data; request deletion; restrict processing; object to processing based on legitimate interests; receive your data in a portable format where the right applies; and withdraw consent where processing is based on consent. These rights are not absolute and may depend on the circumstances and applicable law.

To exercise those rights, email laurens@ortelian.com. Where applicable, you may also lodge a complaint with your local data protection authority. For people in the EEA, this can be the authority where you live, work, or where the issue happened; the European Data Protection Board keeps a list of EU and EEA authorities.

Limits

We do not knowingly collect personal data from children through this website. We do not process sensitive personal data through this website. We do not use website visitors' personal data for automated decision-making, targeted advertising, cross-context behavioral advertising, or sale.

Changes

We may update this policy when the website, providers, or legal requirements change. The latest version will be posted here with its updated date.