What this site collects, and how to turn it off

Nothing that identifies you is stored until you press Allow on the bar at the foot of the page. If you press Decline, or ignore it, or arrive with JavaScript switched off, no analytics cookie is written and no advertising identifier is kept. If you press Allow and change your mind, the control in the footer of every page turns it off again and deletes the cookies it had set.

If you send me an enquiry, you get an automatic reply within a minute saying it arrived, the fields you filled in reach me, and I reply from my own address. I do not sell your details to anybody, I run no advertising on this site, and there is no third-party tracker on it beyond the one named below.

The site is hosted on Vercel. Like every web host, it records requests to its servers — the address requested, the time, your IP address and your browser's user-agent string. That happens at the network level, before any code of mine runs, and it is what makes it possible to serve you a page at all. Vercel is the processor for those logs and they are retained under Vercel's own terms.

Nothing else happens until you answer the consent bar.

I use Google Analytics 4, property G-MWRRLFLET3. The tag loads on every page, but it loads in a denied state. In Google's terms, analytics_storage, ad_storage, ad_user_data and ad_personalization are all set to denied before the tag can execute. In practice that means a first visit sets no analytics cookie and creates no persistent identifier for you.

Press Allow and all four are granted together. From that point the following is recorded:

• Which pages you read, and for how long, in the ordinary way.
• Which asks you pressed. When you click a button, a phone number, an email address or a link off the site, I record what the link said, what kind of link it was, where it sat on the page, where it went, and which page you were on. I do not record anything about you personally in that event.
• Whether you started a form, and whether it sent. Two separate records, so I can tell the difference between a form nobody finishes and a form nobody starts. Neither record contains what you typed.

Google processes this on my behalf and I hold the account. I have not enabled Google Signals, and no advertising audience is built from your visit unless you granted advertising storage above.

Set regardless of consent, because they are how the site works rather than how it measures you:

• pp-theme — whether you chose the light or dark theme.
• pp-consent — the answer you gave the bar, so it stops asking.
• pp-gclid — if you arrived by clicking one of my ads, the click identifier Google put on the address. It is held for the browser session only, and it is sent with an enquiry if you send one, so I can tell which advertisement produced it. Closing the tab discards it.
• pp-ga-debug — only ever present if I am debugging the site from your browser, which I am not.

Set only after you press Allow:

• _ga and _ga_MWRRLFLET3 — Google Analytics.
• _gcl_au, _gcl_aw, _gcl_dc — Google's advertising cookies, if they are set at all.

Pressing the analytics control in the footer to turn it off deletes every cookie in that second list. Consent tools commonly stop the next cookie being written and leave the one already there; this one removes it.

The forms on this site ask for some combination of your name, your website, your email address, your phone number and a line about what you want looked at. An email address that parses is always required, because a reply has to have somewhere to go. The contact page also asks for your name and what you want looked at.

What you send is posted to a function on this domain, which passes it to the enquiry system I run for my own business and for clients. That system stores the enquiry, sends you the automatic reply from david@proofpracticeconsulting.com through Resend, the mail service I use, and alerts me with your address as the reply-to, so that when I answer, you get the answer. Also included: which page you sent it from, the time, and the ad click identifier if there was one. If that system cannot be reached, the function emails your enquiry straight to me through Resend instead, and you get no automatic reply.

Two things worth saying plainly. That message passes through Resend's systems in order to become an email, so Resend is a processor for it. The enquiry system keeps it in a database hosted by Supabase in the United States, which makes Supabase a processor too. And the submitted fields are written to my server log at Vercel as a backstop, so that an enquiry is not silently lost if the mail service fails — which means your message exists in that log as well as in my inbox, for as long as Vercel retains logs.

I read every enquiry myself. It is not fed to a mailing list, a CRM, an advertising platform or anybody else. I keep correspondence for as long as it is useful to the work, and you can ask me to delete it.

There is no advertising on this site. I do advertise this business on Google, which is why the consent bar asks about advertising storage as well as analytics. If you granted it, Google may connect your visit to the advertisement you clicked, and may use that connection to measure the advertisement and to show you others. If you declined, that connection is not made and Google is told so on every page.

The pp-gclid value described above is a separate, first-party record kept so that an enquiry in my own inbox can be matched to the advertisement that produced it, without depending on anything Google reports back to me.

Typefaces are served from this domain rather than from a font service, so reading a page makes no request to a third party for them. The only third-party request an ordinary page makes is to Google's tag server, and it is made in the denied state described above.

The exception, because it is true and it would be easy to leave out: the sample pages under /services/attorney-page/sample/ are a demonstration built for a client, and they load web fonts from Google's font servers. Loading a font from Google means your IP address reaches Google. If that matters to you, those four pages are the only ones on the site where it happens.

Links to other sites, including the demonstration site at wrenfield.proofpracticeconsulting.com, are governed by those sites. The Wrenfield site runs its own separate analytics and is not covered by this page.

Turn analytics off. The control at the foot of every page. One press, no form, no account.

Ask what I hold. Email me and I will tell you, and delete it if you want it deleted. I am one person, not a request portal, so it will be a reply from me rather than a ticket number.

I do not sell or share personal information, and I do not process it for cross-context behavioural advertising beyond the consented Google measurement described above. If you are in a place with statutory data rights — California, the United Kingdom, the European Union or elsewhere — exercising them here is the email address below, and I will not ask you to prove anything unreasonable first.

This site is not directed at children and I do not knowingly collect anything from them.

Proof Practice Consulting, 650 Castro St Ste 120, Mountain View, CA 94041.
david@proofpracticeconsulting.com • 415-350-0268

Last updated 21 October 2026. If this page changes in a way that affects what is collected, the consent bar will ask again rather than assuming your previous answer still applies.