4th Octet
Start a Conversation Client portal

Legal

Privacy Policy

Last updated: 2026-05-23

This is an operating draft. We collect only what we need to respond to inquiries and run the site, we don't sell data, and we name the third parties we share data with.

What we collect

Visitors. Standard server access logs (IP, user agent, referrer, requested URL) and analytics cookies. We use Cloudflare for traffic delivery and Turnstile for spam protection; both set cookies as part of normal operation.

Form submitters. Name, email, company (optional), message, plus the page URL where you submitted from and any UTM-tagged source (e.g., if you arrived from an ad). These go to our CRM (HubSpot) so a person can reply.

Clients. Whatever the engagement requires, governed by the per-client master services agreement. Client data is never used for marketing.

How we use it

  • Respond to inquiries (form submissions and email).
  • Send marketing email only to people who explicitly opt in (no implied consent).
  • Site analytics and security (spam blocking, abuse detection).
  • Improve the site based on aggregate traffic patterns.

Who we share it with

We use the following processors. Each is named here because pretending you can trust us without trusting our vendors is dishonest.

  • Cloudflare — site delivery (CDN, WAF, Workers).
  • HubSpot — CRM, contact form submissions, marketing email.
  • Microsoft Azure — secret storage, identity (Entra ID).
  • GitLab self-hosted — content management.
  • PostHog — product analytics (when live).
  • Sentry — error tracking (when live).

We do not sell, rent, or otherwise share personal data with anyone outside this list except where required by law.

Cookies we set

  • hubspotutk, __hstc, __hssc, __hssrc — HubSpot visitor analytics (6 months).
  • 4o_first_touch, 4o_last_touch — first-time and most-recent UTM source (1 year).
  • cf_* — Cloudflare delivery + Turnstile spam protection (session to 6 months).

If your browser sends a Do Not Track header, the HubSpot tracker stops setting cookies on your visit.

Your rights

You can ask us to access, correct, or delete your personal data. Email privacy@4thoctet.com — we'll respond within seven business days.

If you signed up for marketing email, every email has an unsubscribe link. You can also email us to unsubscribe.

Children

This site is not directed at children under 13, and we do not knowingly collect personal data from children.

Changes

If we materially change how we handle your data, we'll update this page and post a banner at the top of the site for at least 30 days.

Contact

4th Octet LLC
info@4thoctet.com