What this site keeps, and where it keeps it.

The four things this site remembers

The page remembers a little so that it behaves like something you have met before: the question you asked, the example you pressed, whether you turned Proof mode on. All four are written by the page and read by the page, and they go no further. This site is a set of static files; there is nothing behind it to send them to.

• onist_reader_question

  The question you typed into the box at the foot of the homepage, word for word, exactly as you wrote it, with the time you wrote it. It is kept so that coming back shows you what you asked last time rather than an empty box.

  It is also the one entry here worth a moment’s thought before you type. We ask for the question your systems cannot answer, people answer that honestly, and an honest question about a business is a sentence you may not want left lying about — it survives closing the browser, and anyone else using that browser profile can read it.

  Where

  localStorage

  Lasts

  30 days

• onist_scout_question

  Which of the example questions in the Scout section you last pressed — its name, and the time you pressed it — so that the section opens where you left it. There is nothing to type in that section, so there is no free text in here: a short word such as which or why, and a number.

  Where

  localStorage

  Lasts

  30 days

• onist_proof_mode

  The word on or off, recording whether you switched on Proof mode — the toggle that marks every figure on the page with a link to the record behind it. No expiry, because a preference that quietly forgets itself is more irritating than one that was never offered.

  Where

  localStorage

  Lasts

  Until you clear it

• onist_attribution

  If you arrive with utm_ tags or a gclid on the address, or by a link from another site, that goes in here — the tags, the referring page, and the full address you landed on — so that a demo request made ten sections further down still knows where it came from. Session storage lasts as long as the tab and not a moment longer.

  In this build it is never written at all. It is captured only when the demo form is configured, and the demo form is not configured. The next section says what that means.

  Where

  sessionStorage

  Lasts

  Until you close the tab

Nothing on the page clears these for you. Clearing site data for this domain in your browser removes all four at once, and a private window never keeps them in the first place. They sit in one browser on one device, under no name, and nothing joins them up with anything.

If you ask for a demo

Today there is no form. The button at the foot of the homepage opens your email client, and what reaches us is whatever you chose to put in the message — the ordinary way of things, and not something this page needs to describe.

The form is built and switched off. It appears only when a HubSpot portal id and form id are compiled into the build, and this build has neither, so no part of this site posts anything anywhere. It will be switched on, and what follows is better read now than discovered afterwards.

Submitting the form posts, from your browser, straight to HubSpot at api.hsforms.com. HubSpot is where our sales records live: they receive it, and they hold it. It carries:

• the email address you type into the form;
• the question you typed above it, if you typed one, in a field called message;
• any utm_source, utm_medium, utm_campaign, utm_term, utm_content or gclid on the address you arrived at, the page that referred you, and the full address of the page you were on, query string and all;
• and hubspotutk — HubSpot’s own visitor cookie — if your browser already carries one from some other site that uses HubSpot.

The last of those deserves saying out loud rather than leaving at the end of a list. We do not set that cookie and this site does not create one — but if HubSpot has already recognised you somewhere else, passing it on lets them join this submission to that. It is the only thing described on this page that reaches beyond this site.

All of which describes the form when it is on. Until then it is a description of code that does not run, and you can confirm that the same way you confirm the rest.

No cookies, no analytics, nobody else

No analytics. No tag manager, no pixel, no session recorder, no heat map, no experiment tool, no chat widget. No cookies — not one, not even a functional one. No third-party scripts of any kind: the fonts are served from this domain, the images are served from this domain, and there is nothing else to serve. No service worker.

You do not have to take that on trust, and we would rather you did not. Open your browser’s developer tools, go to the network tab, and reload this page: every request goes to this domain and there are no others. The storage tab will show you the four keys above and an empty cookie jar. It takes a minute, and it is a better privacy notice than this page is.

Asking us about any of it

If you want to know something this page does not cover, or want something you have sent us taken out of our records, say so and we will deal with it.

The address is assembled in your browser rather than written into this page, which is what keeps it away from the machines that scrape addresses off websites. It does mean the link below only appears once scripts have run — with scripts off, the address is spelled out underneath it instead.