Privacy policy
Last updated September 29, 2026.
The short version
- We collect what you send us in a brief or message, plus basic visit data.
- We use it to reply, write your quote, do the work and keep spam out. We don’t sell your contact details.
- Email [email protected] and we will show you, correct or delete what we hold.
Information we collect
We collect what you give us directly, when you:
- send a brief or a message through a form on this site;
- email, text or message us;
- become a client and work with us on a project.
This can include your name, email address, phone number or chat handle, and what you tell us about the project, its budget and timeline.
When you send a brief, we record the page you sent it from and information needed to operate and protect the form, including your IP address and browser’s user agent. If optional measurement is on (see Cookies and analytics), we also attach the permitted acquisition-page paths, campaign tags and ad-click identifiers. Your browser’s referrer may also be sent with its HTTP request. We do not send your brief, email or phone number as ordinary analytics event parameters.
We also count article page loads without identifying individual readers. Server security logs may record request details needed to operate and protect the site.
How we use it
- To reply to you and send the written quote you asked for.
- To plan, build and support your project.
- To answer questions and support requests.
- To understand how the site is used and improve it.
- To keep spam and abuse out of our forms.
We only send you marketing email if you have agreed to it.
Who else processes it
We don’t sell your contact details. Ad platforms’ tags on this site may count as “selling” or “sharing” under some US state laws; you can opt out as described in Cookies and analytics. Otherwise, we share personal information only:
- with the people on our team who work on your inquiry or project;
- with service providers that run parts of the site for us: DigitalOcean (hosting), Google (Tag Manager, Analytics and reCAPTCHA spam protection), Microsoft (Clarity, which records how pages are used) and Telegram (we receive a notification with the details of each new brief);
- with analytics and advertising platforms whose tags may run on the site when optional cookies are on: Google (Analytics and Ads), Meta, Reddit and Microsoft (Clarity). See Cookies and analytics for how to turn them off;
- when you ask us to, or when the law requires it, or to protect our rights and safety.
These providers have their own privacy policies, and we encourage you to read them.
SiteMatchup data
When you run SiteMatchup, we store the public website addresses entered, page-check results, an unlisted report link and a salted hash of the request IP for abuse limits. The site also asks Google PageSpeed Insights to test those public URLs when that service is available. We normally delete free reports after 90 days. If you explicitly attach one to a quote request or buy a Fix Pack, we keep it for up to 13 months. A quote request stores the attached report link with your brief; it is not attached unless you tick the box in SiteMatchup. See how SiteMatchup checks pages.
Cookies and analytics
The site uses cookies and similar technologies to:
- keep forms working and secure;
- measure traffic and how pages are used, through Google Tag Manager and Google Analytics;
- see how people use pages (clicks, scrolling and session replays where enabled), through Microsoft Clarity;
- tell people from bots on the brief form, through Google reCAPTCHA.
When we run ads, advertising tags may also measure which ads led to a visit or a brief. The tags that may load are from Google (Analytics and Ads), Meta, Reddit and Microsoft Clarity.
Whether these optional cookies start on depends on where you are:
- In the United States, optional analytics and advertising cookies are on by default. You can turn them off at any time: choose “Decline” in the cookie bar, or open “Cookie settings” at the bottom of any page. Some US state laws treat advertising tags as “selling” or “sharing” personal information. To opt out on this site, choose “Decline” or turn on Global Privacy Control in your browser.
- Everywhere else (including the EU, EEA, UK and Switzerland), and whenever we cannot tell where you are, optional analytics and advertising cookies stay off until you choose “Accept”.
- Global Privacy Control: if your browser sends a Global Privacy Control signal, we treat it as an opt-out of advertising cookies, including in the United States. In the United States, analytics that measure how pages are used may still run until you choose “Decline”.
Your own choice always wins and is remembered in your browser. When optional measurement is on, permitted campaign tags are kept in your browser for up to 30 days, with the first and latest landing-page paths; ad-click identifiers are kept only while advertising cookies are on. Declining clears that attribution storage. Forms, your saved cookie choice and spam protection work without optional analytics or advertising.
Data security
We take reasonable steps to protect your information from unauthorized access, change, disclosure or destruction. The site is served over an encrypted connection, the data sits on our own server, and access is limited to the people who need it for your inquiry or project. No system is perfectly secure, so we cannot promise absolute security.
Your rights
You can ask us to:
- show you the personal information we hold about you;
- correct information that is wrong;
- delete your information;
- stop sending you marketing messages.
Email hello@bybowu.com. You can also complain to the data protection authority where you live.
Data retention
We keep personal information only as long as we need it to provide our services, meet legal obligations, resolve disputes and enforce our agreements. When we no longer need it, we delete or anonymize it.
Children’s privacy
Our services are not meant for children under 13, and we do not knowingly collect their personal information. If you think we have, email us and we will delete it.
International transfers
Our team works remotely from the US, Ukraine and Spain, and our service providers operate in several countries. Your information may be processed outside the country where you live. We protect it as this policy describes wherever it is handled.
Changes to this policy
We may update this policy from time to time. When we do, we publish the new version on this page and change the “Last updated” date at the top. If you keep using our services after that, the updated policy applies.
Contact
Questions about this policy or your data: email hello@bybowu.com or text +1 (602) 748-9530. BYBOWU is run by Roman, based in Phoenix, Arizona.