Privacy policy

Effective October 2, 2026

I’m Amber Cotton, and Rheanbow is my business. This page explains what rheanbow.com collects when you visit or write to me, why, who handles it, and how to ask me about it. The short version: I collect only what I need to answer your note and to understand how the site is used. I don’t run ads, and I don’t sell your information.

What I collect

When you send the contact form. Your name, your email address, your business name if you add it, the service you’re asking about, and your message. The form also sends the address of the page you were on. If you’d rather not use the form, you can email amber@rheanbow.com directly.

When you visit. The site is hosted on Ploy, which adds a small analytics script to every page. It records the pages you view, how long you stay, how far down each page you scroll, which links and buttons you click (including the words on them), when you start and send a form (not what you typed), the page you came from and the one you leave from, the time of your visit, your browser and device type, screen size, and language. Ploy also works out the country you’re connecting from, using your IP address. To tell visits apart, the script stores a random visitor ID in a cookie named ploy_anon_id, kept for one year, and in your browser’s local storage, along with a session ID that resets after 30 minutes of inactivity. The ID is random and doesn’t carry your name. I see totals and trends, not a list of people.

Your Pause choice. If you press Pause on the home page, the site remembers that choice in your browser’s local storage so the page stays still next time. Nothing is sent anywhere.

A security cookie. Cloudflare, which delivers the site, sets a cookie named __cf_bm to tell people from bots. It lasts 30 minutes and is created separately for every site you visit.

Your IP address. Like every website, the servers that deliver these pages (Ploy and Cloudflare) see your IP address.

Why I collect it

  • To read and answer your note, and to work with you if we go ahead.
  • To see which pages people visit and where they lose interest, so I can make the site better.
  • To keep the site secure and working.

Who handles it

  • Ploy, Inc. (San Francisco) hosts the site, stores form submissions, and runs the analytics. Ploy processes this information on my instructions. Its privacy policy is at ploy.ai/privacy.
  • Cloudflare delivers the pages and protects the site from bots. Its privacy policy is at cloudflare.com/privacypolicy.
  • PayPal, if you pay for a project through PayPal. Payment happens on PayPal’s site under PayPal’s privacy policy. I receive your name, email address, and the payment confirmation, never your card or bank details.
  • Email. When you write to me, or I reply, the message lives in my email.

I don’t sell or rent your information, and I don’t share it with anyone else unless the law requires it.

How long I keep it

  • Notes you send through the form stay in Ploy’s dashboard and in my email for as long as I need them to answer you and to keep a record of our work together. Tell me and I’ll delete them.
  • Analytics records are kept by Ploy under its own retention policy. The visitor ID expires after a year unless you clear your cookies first.

Your choices

  • Email amber@rheanbow.com to ask what I hold about you, to correct it, or to have it deleted. I’ll answer as soon as I can.
  • You can block or delete cookies in your browser’s settings, and the site still works. The visitor ID lives in both cookies and local storage, so clear both.

California

California’s online privacy law asks every site that collects personal information from Californians to say what it collects, who it shares it with, how it responds to Do Not Track, and whether others use the site to follow visitors across the web. The sections above cover the first two. The site doesn’t change its behavior when your browser sends a Do Not Track or Global Privacy Control signal, because the analytics script doesn’t read them. No other company collects information through this site to follow you across other websites. Rheanbow is a small business that falls below the thresholds of the California Consumer Privacy Act, but you’re welcome to make any of the requests above and I’ll honor them. I don’t sell personal information, and I don’t share it for advertising.

Children

This site is for business owners and other adults. I don’t knowingly collect information from children under 13. If you think a child has sent me information, email me and I’ll delete it.

Changes

If I change what the site collects or how I use it, I’ll update this page and the date at the top.

Contact

Amber Cotton, Rheanbow
amber@rheanbow.com