Privacy Policy

Who we are

McCor Labs LLC is a software development firm based in Minnesota, United States. This policy explains what happens to information you give us through this website.

If you have a question about any of it, email marcm@mccorlabs.com.

Postal address: TODO(owner): a real PO box for McCor Labs LLC, to replace the placeholder address before publishing.

The short version

We collect what you send us through the contact form, and nothing else. We do not use cookies. We do not use analytics. We do not track you across websites, and we do not sell or share your information with anyone for advertising.

The detail below explains this more precisely, because you should not have to take our word for it.

What we collect, and when

When you use the contact form

The form asks for:

• Your name — required
• Your email address — required, so we can reply
• Your company — optional
• Your budget range — optional
• Your message — required

We use this only to respond to your enquiry and, if it leads somewhere, to carry on that conversation. We do not add you to a mailing list. We do not have a mailing list.

The form includes a hidden field that automated bots fill in and people do not. If it is filled in, we discard the submission. It collects nothing about you.

When you email us directly

We receive whatever you send, including your email address and anything in your signature or attachments. Same use: replying to you.

When you simply read the site

Nothing is collected in your browser. Specifically:

• No cookies are set. Not for analytics, not for advertising, not for functionality
• No analytics service is used. We do not know how many people visit this site or which pages they read
• No advertising or tracking pixels
• No embedded third-party scripts. Fonts are served from our own domain rather than a font CDN, so no third party sees your request for them
• No social media widgets or share buttons that phone home

If you have turned on a "do not track" or "global privacy control" signal, there is nothing here for it to switch off.

The site does store a small amount of information in your own browser to remember your preferences. This never leaves your device, is never sent to us, and you can clear it at any time through your browser settings.

Server logs

We do not keep server access logs for this website.

Who else sees your information

We keep this list short on purpose.

• Amazon Web Services gets contact form submissions in transit and at rest, and the email itself. They host this site and run the email delivery. Data is processed in the US East (N. Virginia) region
• Google (Calendar appointment scheduling) gets whatever you enter when you book a call, typically your name, email address and any note you add. This happens only if you click through to book, and Google’s own privacy policy applies from that point

That is the complete list. We do not use a CRM, an email marketing platform, an analytics provider, an advertising network, or a chat widget.

We have never sold personal information and will not. We do not "share" it for cross-context behavioural advertising, in the sense those terms are used in US state privacy laws.

Booking a call is a deliberate handoff. The booking button is an ordinary link to a third-party scheduling service. We do not embed their code in this site, so they see nothing about you until you choose to click it. Once you are on their page, you are subject to their privacy policy, not this one.

How long we keep it

Contact form submissions and email correspondence are kept for TODO(owner): retention period, 24 months proposed, from our last exchange, then deleted. If your enquiry becomes a project, the correspondence is kept as a business record for as long as we are required to keep it.

Ask us to delete your information sooner and we will, unless we are legally required to keep it.

How it is protected

• All traffic to this site is encrypted in transit (HTTPS)
• Contact form submissions are encrypted in transit
• Our email is stored on encrypted storage, and access requires multi-factor authentication
• Only the people who need to see an enquiry can see it. This is a four-person firm, so that is a short list

No system is perfectly secure, and we are not going to claim otherwise. What we can say is that we do not collect what we do not need, which is the most effective protection available.

Your rights

Wherever you are, you can ask us to:

• Tell you what we hold about you
• Correct it if it is wrong
• Delete it
• Send you a copy in a portable format
• Stop using it

Email marcm@mccorlabs.com and we will respond within 30 days. We will not charge you and we will not make it difficult.

If you are in the European Economic Area or the United Kingdom, you also have the right to object to processing and to complain to your national data protection authority. Our lawful basis for handling your enquiry is legitimate interest: you contacted us and we are replying.

If you are a California resident, you have the rights described above under the CCPA as amended. We do not sell or share personal information, so there is no opt-out to exercise. We will not discriminate against you for making a request.

If you are a Minnesota resident, the Minnesota Consumer Data Privacy Act gives you comparable rights. We will honour them regardless of whether the Act’s size thresholds apply to a firm of this size.

Children

This website is aimed at businesses and is not directed at children. We do not knowingly collect information from anyone under 16. If you believe a child has sent us information, email us and we will delete it.

International visitors

We operate in the United States and your information is processed there. If you are contacting us from outside the US, you are sending it to the US by doing so.

Changes to this policy

If we change what we collect, adding analytics for instance, or a new tool that handles your information, we will update this page and change the date at the top. Material changes will be flagged on the page rather than made quietly.

Complaints

Email marcm@mccorlabs.com first. We would rather sort it out directly. If you are in the EEA or UK and we do not resolve it, you can complain to your national data protection authority. If you are in the US, your state attorney general’s office handles privacy complaints.