Privacy policy

What you type into a form: your name, your business name, your email or phone, your website if you give it, and your answers or message. We use it to reply to you and to prepare the audit you asked for.

Where your visit came from. When you arrive from an ad, a campaign link or another website, the site stores the campaign tags (utm_source, utm_medium, utm_campaign, utm_content, utm_term), the Google or Meta click id (gclid, fbclid), the page you landed on and the site that sent you, in a first-party cookie named orium_attr that lasts 90 days. If you send a form, this travels with it, so we know which ad or page brought you.

How the site is used. Google Analytics 4 and Vercel Analytics count page views, clicks on buttons and links, and form submissions, with the browser, device and approximate location these tools derive from a visit.

The site uses the Meta pixel and the Google Ads tag to measure whether our ads lead to enquiries. They record page views, which service pages you view, steps of the /start questionnaire, a sent form, and a tap on the phone number or WhatsApp. Meta and Google may set their own cookies to do this.

When you send a form, we also tell Meta and Google from our server that a lead arrived, so the count holds when a browser blocks the pixel. With it we send your IP address, your browser's user agent, Meta's browser cookies if present, and your email and phone only as a one-way SHA-256 hash, never in readable form. Meta receives these events with its Limited Data Use setting, which restricts how it may use them for people in California.

Under the California Consumer Privacy Act, sharing this information with Meta and Google for advertising counts as "sharing" even though no money changes hands. We do not sell personal information for money.

You can turn the advertising pixels off with the button below. It stores a cookie named orium_optout for one year; while it is there, the Meta pixel and the Google Ads tag do not load on this site, no conversion is sent to them from your browser or from our server, and Google Analytics is told your visit may not be used for ads. Analytics itself keeps counting visits.

If your browser sends Global Privacy Control, the site treats it the same way, with no button needed.

The choice is stored in your browser, so it applies to the browser and device you make it on. Clearing cookies removes it.

A form you send reaches Eugene Romanov, who runs the studio, as a message through Telegram or email (Resend), and is kept in a Google Sheet that only he can open. If you came from an ad, Meta or Google receive the hashed conversion described above. The site is hosted by Vercel. These companies process the data on our behalf or, for Meta and Google, as described above.

We do not sell your information, and we do not give it to anyone else except where the law requires it.

You may ask what we hold about you, ask us to delete it or correct it, and opt out of sale or sharing. We do not collect sensitive personal information and do not use any for profiling. You will not be treated differently for using these rights.

Send a request to eugene@wallflow.pro from the email address or phone number you gave us, so we can confirm it is you. You may also authorise someone to ask on your behalf.

The source cookie expires after 90 days and the opt-out cookie after one year. A form you sent is kept as long as we need it to answer you and keep our business records, and is deleted when you ask.

The site is for business owners and is not directed to anyone under 16. We do not knowingly collect information from children.

When this policy changes, the date at the top changes with it.