No cookies, no pop-up.

Who is responsible

Blueprint is a one-person web studio run by Douglas Bridge in Kew. If you have any question about this page, or want anything removed, email douglas@blueprintwebsitedesign.co.uk and you will get a reply from the person who wrote it.

What is measured when you read this site

Blueprint uses its own visitor-counting tool. Each page you open records:

• the page address on this site
• the website that linked you here, if any — only the site's name, never the full address, so search terms are never stored
• your country
• whether you are on a phone, tablet or computer
• whether you opened one of the concept sites, tapped an email address, or sent the enquiry form

That is the whole list. No name, no email address, no page-by-page trail, and nothing that identifies you personally.

Nothing is stored on your device

There is no cookie, no local storage, and no identifier of any kind saved in your browser. Nothing about this visit stays behind when you close the tab. That is the reason there is no consent banner: consent is required for storing things on your device, and nothing is stored.

How visits are counted without identifying you

To tell two visits apart without recognising a person, your IP address and browser description are combined with a secret that is generated fresh every night, and turned into a fingerprint that cannot be reversed. Your IP address is never written down. It exists for the fraction of a second it takes to do that sum, and there is no field in the database to store one.

Because last night's secret is deleted, the fingerprint your browser produces today is completely different from the one it produced yesterday. Two days of records cannot be joined together, by anyone, including Blueprint.

The honest trade-off: this means Blueprint genuinely cannot tell whether you have been here before, and there is no returning-visitor figure anywhere. That is the price of not needing a pop-up.

If you send the enquiry form

The form asks for your name, business name, email address and your message, because a reply is impossible without them. It is delivered by Formspree, and the message goes to the email address above. Enquiries are kept for as long as there is a reason to keep them — an ongoing conversation, a live project, or a record of work done — and you can ask for yours to be deleted at any time.

If Blueprint wrote to you first

Blueprint contacts a small number of local businesses each week to offer a free homepage sketch. If that was you, here is exactly what was used and where it came from:

• your business name, address and trade, from your Google Maps listing or the public Companies House register
• your legal form and company number, from Companies House, to check whether email is allowed (it is only sent to limited companies and LLPs; everyone else gets a letter)
• your website, found from your business or company name, and a business email address only if it is published there
• a short note on your current website, written by Blueprint

The legal basis is legitimate interests: offering a relevant service to a local business, at low volume, with an easy way to say no. You will be contacted at most three times by email, or once by post, and never by phone.

To opt out, reply "no", or email the address above. Your business goes on a do-not-contact list and is never contacted again. Records of businesses that don't reply are deleted after 12 months; the do-not-contact entry is kept, because without it there is no way to make sure you aren't contacted again.

How long anything is kept

Visit records are deleted automatically after 13 months. Outreach records are covered in the section above.

Where it is processed, and by whom

The site is served by GitHub Pages. Visit counting runs on Vercel in their London region and the records are stored on Neon, also in London — so this stays in the UK rather than being sent abroad. Enquiry form messages are handled by Formspree. Nothing is sold, shared, or used for advertising, and there is no third-party tracking on this site at all.

The legal basis

Counting visits relies on legitimate interests: knowing which pages are read is necessary to run a small studio, and the way it is done here is about as unintrusive as measurement gets. Handling your enquiry is on the basis of taking steps at your request before entering into a contract.

If your browser sends a Global Privacy Control or Do Not Track signal, this site does not count your visit at all.

Your rights

You can ask what is held about you, ask for it to be corrected or deleted, and object to it being held at all. Email the address above.

One honest limitation: because visit records cannot be traced back to a person by design, there is usually no way to find "your" rows in order to show or delete them. Anything you sent through the enquiry form can always be found and deleted, because that has your name on it.

If you are not satisfied with how this was handled, you can complain to the Information Commissioner's Office at ico.org.uk.