Privacy Policy

This policy explains what information this website collects, why, and who else touches it. It covers boxermediacorp.com only. It does not cover websites I build or manage for clients, which have their own policies.

Who is responsible

Boxer Media Services Corp, a New York corporation operating on Long Island. Matthew Schuller is the person responsible for this site and the only person who reads what comes through it.

Contact: matthew@boxermediacorp.com or 516-880-4201.

What this site collects

When you fill in the contact form

The form asks for your name, phone number, and a message. Business name, email address, and current website address are optional. Everything you type is sent to me by email. The only other place any of it goes is the spam check described under Cloudflare Turnstile below, which receives the widget's token and your IP address so it can confirm the submission came from a person.

The form also records the moment the page finished loading. That is used only to tell a person from an automated script and is discarded once the message is sent.

I use this information to reply to you and, if we end up working together, to run the project. I do not sell it, rent it, trade it, or add you to a mailing list. There is no mailing list.

When you simply read the site

If you accept cookies, Google Analytics records which pages get visited, how long people stay, roughly where in the world they are, and what kind of device they used. It is aggregate traffic data. It does not tell me who you are.

If you decline, Google Analytics never loads and the site works exactly the same. Cloudflare's own cookieless page count, described below, runs either way.

Server logs

This site is hosted on Cloudflare Pages. Like any web host, Cloudflare records requests, including IP addresses, for security and abuse prevention. That happens at the infrastructure level, before anything reaches my code, and I cannot switch it off. Cloudflare's own privacy documentation covers what they retain.

Third parties

Five outside services are involved. Each one is listed here with what it does and when it runs. Only one of them, Google Analytics, waits for your cookie decision — the reasons for the others are given below.

Google Analytics 4

Measures site traffic. Sets cookies in your browser. Loads only after you accept cookies — the Google tag is not placed on the page until you click Accept, so declining means it never runs rather than running in a limited mode. Google Analytics 4 does not store full IP addresses.

Elfsight Google Reviews

Displays reviews left on my Google Business Profile. It appears on the reviews page only. It is an embedded widget served by Elfsight, so your browser makes a request to Elfsight's servers, and they can see your IP address and set their own cookies. The reviewer photos inside the widget are served by Google.

This one is not behind the cookie banner. It loads with the reviews page, because the widget is the content of that page rather than a measurement tool running in the background — blocking it would leave the page empty. It does not track you across other websites and it is not used for advertising.

The reviews it displays are already public on Google. Elfsight operates under its own privacy policy, which I do not control. If you would rather not load it, simply do not visit the reviews page — it appears nowhere else on this site.

SMTP2GO

Delivers the email generated by the contact form. What you typed passes through their system on its way to my inbox. They do not use it for anything else. No cookies are involved.

Cloudflare Turnstile

A spam check on the contact form, which appears on the homepage and the contact page. It looks at browser signals to decide whether a submission is automated. When you send the form, this site's server passes the check's token and your IP address to Cloudflare to confirm the result. It does not track you across sites. If it is not switched on for this site, the form does not send at all rather than sending unchecked.

Cloudflare Web Analytics

Cloudflare, which hosts this site, adds a small measurement script to every page. It counts page views and load times, sets no cookies, stores nothing in your browser, and does not identify you. Because it is added at the hosting level rather than by this site's own code, it runs whether or not you accept cookies. Turning it off is a hosting setting rather than a banner choice.

Fonts

The typefaces used on this website are hosted here directly. Loading them sends no request to Google Fonts or any other outside font provider, so no third party learns your IP address from a font.

What is not here

• No advertising, no ad networks, no retargeting pixels
• No Facebook or LinkedIn tracking pixels
• No session recording or heatmap tools
• No data brokers, no selling, no sharing for anyone else's marketing
• No accounts, no logins, no passwords stored anywhere

How long anything is kept

Contact form emails stay in my inbox as ordinary business correspondence. If we never work together, I clear inquiries out periodically. If we do, the correspondence is kept as part of the project record.

Google Analytics data is retained according to the setting on the property, which is currently the standard fourteen months.

Your cookie choice is stored in your own browser, not on any server.

Your choices

• Cookies. Accept or decline when the banner appears. Change your mind any time with the cookie settings link in the footer.
• Your information. Email me and ask what I hold about you, ask for it to be corrected, or ask for it to be deleted. I will do it. You do not need to give a reason.
• Browser controls. Every browser can block or clear cookies, and most can send a Do Not Track signal.

Visitors from jurisdictions whose privacy laws grant rights to access, correct, and delete personal information can exercise them here. Rather than sort out which framework applies to you, I will simply honor any reasonable request of that kind.

Children

This is a site selling services to businesses. It is not directed at children and I do not knowingly collect anything from anyone under 13.

Changes

If this policy changes in a way that matters — a new third-party service, for instance — the date at the top changes and the consent version is raised, which brings the cookie banner back so you can make a fresh decision. The date is shared by all five legal pages and moves whenever any of them is revised.