Ephesus Technology Consulting Group LLC (“Ephesus Tech,” “we,” “us”) operates https://www.ephesustech.com. This policy explains what we collect when you visit the site or contact us, how we use it, who processes it on our behalf, how long we keep it, and the choices you have.
Information we collect
- Contact form. When you send a message through the contact form, we collect your name, work email, company (optional), phone (optional), the topic you choose, and your message. With a submission we also receive your IP address. It is sent to Cloudflare to verify the bot check, included in the email notification we receive, and may be recorded in our server logs for security and abuse prevention.
- Direct contact. If you email or call us instead, we receive the contact details and message you choose to send.
- Website analytics. We use Microsoft Application Insights. It is on unless you opt out or your browser sends the Global Privacy Control signal. It collects page views, the referring page, browser and operating system type, approximate location derived from your IP address, performance timings, script errors, and pseudonymous identifiers stored in cookies and browser storage. Microsoft uses the IP address for geolocation and then stores it as 0.0.0.0.
- Bot detection. Cloudflare Turnstile runs in a frame on the contact page. Cloudflare processes your IP address, browser characteristics and our site key for bot detection.
How we use information
- To respond to your inquiry and to discuss the work you asked about.
- To protect the site and the contact form from spam and abuse.
- To see which pages are visited, how the site performs, and where scripts fail.
Who we share it with
Two providers process information on our behalf for the purposes described here.
- Microsoft. Azure Static Web Apps hosts the site. Azure Functions receives contact form submissions. Microsoft Application Insights provides analytics and server logging. Microsoft 365 and Exchange Online receive the submission email through Microsoft Graph.
- Cloudflare. Cloudflare Turnstile provides bot detection for the contact form. See the Cloudflare Turnstile privacy policy.
We do not sell or share personal information. We do not use it for targeted advertising. Apart from the Cloudflare Turnstile frame on the contact page, no third party collects personal information about your activity across other websites through this site.
Data retention
- Contact form submissions are delivered by email through Microsoft Graph into our Microsoft 365 mailboxes, and a copy is kept in the sending mailbox. We keep them for as long as needed to respond and to support any resulting engagement, then delete them. Email info@ephesustech.com to have them deleted sooner.
- Server logs are kept for 90 days. For successful submissions they record the domain of your email address, a hashed form of the address, and the length of your message. They do not record your name, email address, phone number, company, the topic you chose, or the message text.
- Analytics data is kept for 90 days.
- Cookies and browser storage last for the durations listed in the table below.
Cookies & similar storage
Analytics are on unless you opt out. A short notice appears until you dismiss it, this page lists everything that is set, and the toggle below turns analytics off for the browser you are using. Nothing on this site is used for targeted advertising.
Analytics cookies and storage are set only while analytics are on. If you opt out, or your browser sends the Global Privacy Control signal, they are not set, and any that were set earlier are removed.
| Name | Set by | Purpose | Duration | Category |
|---|---|---|---|---|
| ai_user | Microsoft Application Insights, only while analytics are on | Pseudonymous identifier for this browser (cookie) | 365 days | Analytics |
| ai_session | Microsoft Application Insights, only while analytics are on | Pseudonymous identifier for the current visit (cookie) | 30 minutes of inactivity | Analytics |
| ai_session | Microsoft Application Insights, only while analytics are on | Backup copy of the current-visit identifier, written when you leave a page, so the visit can be continued or closed cleanly when the cookie is unavailable (localStorage) | Removed when analytics are turned off | Analytics |
| AI_buffer_1, AI_sentBuffer_1 | Microsoft Application Insights, only while analytics are on | Buffers telemetry before it is sent (sessionStorage) | Until the tab closes or analytics are turned off | Analytics |
| ephesus:cookie-notice:dismissed | Ephesus Tech | Remembers that you dismissed the cookie notice (localStorage) | Persistent | Strictly necessary |
| ephesus:analytics:optout | Ephesus Tech | Remembers that you opted out of analytics (localStorage) | Persistent | Strictly necessary |
| Cloudflare frame cookies and storage | Cloudflare | Bot detection for the contact form. Set inside the Cloudflare Turnstile frame from challenges.cloudflare.com, on the contact page only, and scoped to Cloudflare’s own domain. | Controlled by Cloudflare | Strictly necessary |
Your privacy choices
You can turn analytics off in either of two ways.
- Global Privacy Control. If your browser sends the GPC signal, we treat it as an opt-out for that browser. Nothing else is needed.
- The toggle below. It stores your choice in this browser only, in the
ephesus:analytics:optoutkey listed above.
If either one gives you trouble, email info@ephesustech.com.
Analytics
Loading your preference…
How we respond to Do Not Track and Global Privacy Control signals
We do not track visitors over time and across third-party websites, so there is no cross-site tracking for a Do Not Track signal to switch off. We honor the Global Privacy Control (GPC) signal: when your browser sends it, our analytics (Microsoft Application Insights) are disabled for that browser automatically, and you can also opt out with the toggle on this page. We do not otherwise respond to browser Do Not Track signals. Apart from Cloudflare’s bot-detection signals described in the cookie table, no third party collects personally identifiable information about your online activities over time and across different websites when you use this site.
Security
The site is served over HTTPS from Azure Static Web Apps, and contact form submissions are sent over HTTPS to Azure Functions. Submissions are delivered into our Microsoft 365 mailboxes. Server logs for successful submissions hold the domain of your email address, a hashed form of the address, and the length of your message. They do not hold the message text.
Your rights
If you live in California or another state with a privacy law, you may have the right to access the personal information we hold about you, to correct or delete it, and to opt out of its sale or sharing. We do not sell or share personal information. To make a request, email info@ephesustech.com. We respond promptly and may need to verify your identity before acting on a request. Whether or not a privacy law applies to you, you can use the same address to ask what we hold about you, or to have it corrected or deleted.
Children
This site is for businesses and is not directed to children under 13. We do not knowingly collect personal information from children.
Changes
We may update this policy. When we make a material change, we post the new version here and update the date at the top of the page.
Contact
Questions about this policy and requests about your information can be sent to info@ephesustech.com.