Privacy
Clear information about what this site collects.
This notice covers the public Baldwinson site, correspondence form, waitlists, and authenticated client surfaces.
Last updated:
Information you choose to provide
The site collects information only when you choose to provide it through a relevant surface:
- Contact: your name, email address, and message.
- Ethics or publication waitlists: your email address and any fields shown by that specific form.
- Client accounts: account, authentication, billing, and service information needed to operate the client relationship.
Do not include secrets, credentials, payment-card data, medical information, or other highly sensitive personal information in an ordinary contact message.
Contact-form processing
Contact submissions are sent to Postbox, a form-processing service operated by Variant Systems. Along with the fields you submit, Postbox records request metadata used for delivery, abuse prevention, and diagnosis. That metadata can include IP address, user agent, referrer, origin, and campaign parameters.
Baldwinson uses contact submissions to read and respond to correspondence, assess whether a request is relevant, maintain necessary business records, and protect the form from abuse. Contact messages are not sold and are not used for unrelated marketing lists.
Postbox retains submissions while the form remains active unless they are deleted. Its published policy states that service logs are purged after 90 days. Baldwinson does not currently promise a shorter automatic deletion period for correspondence. You may request deletion of a message.
Waitlist processing
The ethics publication waitlist is operated by Baldwinson infrastructure. It stores the email address you submit, the waitlist source, your request IP address, your browser user agent, and the submission date. The IP address and user agent are used to limit abuse and diagnose delivery problems.
Waitlist records are used for the notification described beside the form. The current system does not have a shorter automatic deletion schedule, so a record remains until it is no longer needed or you ask Baldwinson to remove it, subject to applicable security or legal requirements.
Technical Workers Guild interest
The interest form beside the Technical Workers Guild essay is a separate list with a separate purpose. It stores your email address, any optional name and role you provide, your request IP address, your browser user agent, and submission dates. A repeat submission from the same email may update the optional fields and request metadata on the existing record.
Those records are used only for substantive updates about that work. They are not merged into the ethics publication waitlist or an unrelated marketing list. The current system does not have a shorter automatic deletion schedule; you may ask Baldwinson to remove your record.
Analytics
The public site uses Vercel Web Analytics and PostHog to understand aggregate page use and whether public forms are started or completed.
Vercel documents that Web Analytics does not use tracking cookies and does not associate analytics data with a persistent personal identifier. Its data points can include page path, referrer, approximate geography, browser, device, and operating-system information.
PostHog records pageviews on public pages and conversion events for the contact form and the Technical Workers Guild interest form. Those events include the form name and outcome (for example, success or validation error). They do not include names, email addresses, messages, or other field values. Visitors are not identified. Session recording is disabled. PostHog is initialized in cookieless mode so it does not set a tracking cookie.
Baldwinson removes query strings and fragments from analytics events and suppresses analytics on login, invitation, portal, and administrative routes. No form contents are sent as analytics properties.
Read Vercel Web Analytics privacy and compliance (opens in a new tab) and the PostHog privacy policy (opens in a new tab).
Authentication and billing
Client and administrative accounts use security cookies that are necessary for sign-in and session continuity. These cookies are not advertising cookies. Authentication data is used to establish account access and enforce the applicable client or administrator role.
When billing applies, payment processing and hosted billing surfaces are provided by Stripe. Baldwinson does not ask you to send card details through the contact form.
Retention and deletion
- Waitlist records are retained for the stated notification purpose until they are no longer needed or deletion is requested, subject to applicable security or legal requirements.
- Contact correspondence remains until it is deleted or no longer needed for the conversation, legitimate business records, security, or legal obligations.
- Client records remain for the duration of the relationship and any additional period needed for billing, security, dispute, tax, or legal obligations.
- Backups and service-provider copies may disappear on a different schedule from the active record.
A deletion request is not described as complete until the relevant active systems and applicable provider paths have been handled.
Your choices
You may request access, correction, export, or deletion of information you provided, subject to identity verification and any information Baldwinson must retain for legitimate legal or operational reasons.
You may also ask which service or form holds a particular submission. A request should include enough context to find the record without sending new sensitive information.
Contact
For privacy questions or a data request, use the contact form and identify the request as privacy-related.