This policy covers pixelworkers.org: the site, the chat, the audit request form, and Dangerous Things, the book. Pixelworkers is operated by The Commonwealth Creative LLC, a Virginia company (“Pixelworkers,” “we,” “us”). If something here is unclear, write to support@pixelworkers.org and a person will answer.
The short version
- We collect what you type to us, and what we need to sell you the book. If you accept cookies, Google Analytics also counts how the site is used.
- Analytics and advertising cookies are set only if you accept them. Before you choose, and if you reject, none load.
- Nothing from Meta loads here today. When our Facebook and Instagram ads go live, accepting means Meta is told that a browser visited pages here.
- We never sell your information for money.
- Chat conversations are deleted after 90 days.
- You can change your cookie choice at any time with the Cookie settings link in the footer of every page.
What we collect, and why
The site chat
When you use the chat, we store your messages, the page you were on, and any name or email you give us, so that we can answer you and pick the conversation back up. A person on our team can read the conversation and reply to you in it. Replies written by the assistant are generated with Anthropic’s API, which receives the conversation to write them. Conversations are deleted automatically 90 days after the last message.
The audit request form
When you request an audit, we receive your name, work email, website, the traffic range and analytics you tell us about, and your message. It goes to our team in Slack so a person can reply. It is not added to a mailing list or a sales sequence, and no one follows up unless you reply.
Free scans
When you ask for a free website audit or security scan, we receive the website address, your name, work email, company and any note, and a record that you confirmed you own the site or are authorized to have it checked, with the time. We then make a limited number of ordinary, read-only requests to that one website, the kind any visitor makes; we never log in, submit forms or change anything, and if we find a file that should not be public we record that it is there without opening it. A person reads every finding before the result is sent. The result goes only to the email you gave us, at a private link that is not indexed. We add your email to a list in Brevo for free-scan requests, and we do not send you a sequence: one email with your result, and nothing more unless you reply. The result page carries no analytics or advertising tags.
Quotes
If you ask for a quote in the chat, we use what you describe and the email you give us to prepare the quote and send it to you.
The book
To open Dangerous Things you give us your email before you read it, and that email goes onto our book list in Brevo, our email provider. That list is how we tell people about the book and about what we are doing, so giving us your email here is what puts you on a marketing list. If you buy the book, Stripe processes the payment and we never see or store your card number. Buying it, sharing it to unlock it, or opening it from a link we emailed you also puts you on our book readers list, which is what lets you restore your copy later. Every marketing email we send has an unsubscribe link. One-off emails that answer something you just asked for, like the reading code we send when you restore access, do not.
Analytics
If you accept cookies, the site loads Google Analytics, which tells us how many people visit, which pages they read, roughly where they came from, and when someone sends us a form, opens the chat or the calendar, or buys something. Google sets its own cookies (_ga and _ga_ followed by an ID) for up to two years to tell a returning browser from a new one, and receives your IP address, which it does not store in full. We do not send Google your name, your email, your chat messages or anything you type into a form. If you reject, or have not chosen yet, Google Analytics does not load and nothing is sent.
Advertising
We are setting up advertising on Facebook and Instagram. Nothing from Meta loads here yet, and when it is live the Meta pixel runs on this site only if you accept cookies. The pixel tells Meta that a browser visited this site and which pages it saw, so that we can tell which ads bring people here, show our ads again to people who have been here, and ask Meta to find more people like them. We do not send Meta your chat messages, or anything you type into the audit form or a quote. If you reject, or have not chosen yet, no Meta script loads and nothing is sent.
Client audits
If you go ahead with an audit, you give our service account read-only access to the website, analytics, or operations systems you choose. We never change anything in them. In analytics we read aggregate reports only. We don’t request personal data about your visitors, session recordings or event-level exports, and you can revoke our access in your own account at any time.
Cookies and your choice
On your first visit we ask whether to accept cookies, unless your browser has already answered for you with a Global Privacy Control signal. The answer is kept in a first-party cookie called pxw_consent for 180 days, and nothing optional runs until you answer. To change it later, use the Cookie settings link in the footer of any page.
What runs either way. The cookie that records the choice above. A cookie that keeps your copy of the book unlocked on that device for up to a year, set once you have access to the book. Cloudflare Turnstile, which keeps bots out of the chat and the forms and receives your IP address and browser details to do it. The fonts the site is set in are requested from Google on every page, which tells Google your IP address and browser details. The book reader also remembers your theme, font size and reading position in your browser’s local storage, which never leaves your device. If you press the microphone in the chat, your browser’s own speech service (Google’s in Chrome and Edge, Apple’s in Safari) turns what you say into text; we receive only the text you choose to send.
What runs only if you accept. Google Analytics, described above, and Meta’s advertising cookies, once our ads are running. Meta sets them for about 90 days. Nothing else. Anything we add later goes behind this same choice, and this page is updated before it does.
If you reject, no analytics or advertising cookie is set and no analytics or advertising script loads. If you had accepted before, rejecting also deletes the analytics and advertising cookies this site put on your browser: Google’s _ga cookies and Meta’s _fbp and _fbc. Nothing about how the site works for you changes.
Who else handles your information
We use a small number of providers to run the site. Each receives only what it needs for its part:
- Stripe: book payments and, when you buy work from us, payments for that work.
- Brevo: the book emails and the two book lists described above.
- Anthropic: writing the chat assistant’s replies.
- Slack: where our team reads chat conversations and audit requests.
- Meta: advertising on Facebook and Instagram, and measuring it, once our ads are running and only if you accept cookies. What Meta does with what it collects is covered by Meta’s own privacy policy.
- Google: site analytics (Google Analytics), only if you accept cookies; and the web fonts the site is set in. Your browser fetches them from Google on every page, which tells Google your IP address and browser details. This happens whatever you choose about cookies, because the fonts are part of how the page renders.
- Cloudflare: bot protection (Turnstile) and DNS.
- Our hosting providers: the servers this site runs on, in the United States.
We may also disclose information if the law requires it, or to protect our rights or someone’s safety.
How long we keep it
- Chat conversations: 90 days after the last message.
- Free scans: the findings and our request log for 90 days after the result is sent; your request and the authorization record for 12 months, or until you ask us to delete them.
- Audit requests: as long as the conversation with you is open, and in our records after that.
- Book purchases: as long as you own the book, and as long as tax and accounting records require.
- Email lists: until you unsubscribe.
- Your cookie choice: 180 days, then we ask again.
- Advertising cookies: the life Meta sets on them, about 90 days from your last visit.
Your choices and rights
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Write to support@pixelworkers.org. You can unsubscribe from any marketing email with the link at the bottom of it.
For cookies and advertising: use the Cookie settings link in the footer to accept or reject at any time. You can also block or delete cookies in your browser, and you can limit what Meta does with what it has in your Facebook ad settings. If your browser sends a Global Privacy Control signal, we read it as a rejection: we record it, we don’t ask you, and no advertising cookie is set. Turning advertising cookies on means switching that signal off in your browser first.
We never sell your information for money. California and several other states treat using advertising cookies like Meta’s as “sharing” for cross-context behavioral advertising, or as “targeted advertising.” Rejecting cookies here is how you opt out of that, and it takes effect immediately. If you would rather we did it for you, write to us and we will. Depending on where you live, you may have further rights under your state’s or country’s law; we will honor them, and we will not treat you differently for using them.
Security
The site is served over HTTPS. Payment details are handled entirely by Stripe. Access to the information described here is limited to the people and services that need it to do the work. No system is perfectly secure, and if we learn of a breach that affects you, we will tell you. For how we handle your credentials, your data and your live systems when we do work for you, see our security page.
Children
This site is for businesses and adults. We don’t knowingly collect information from anyone under 13.
Changes to this policy
If we change what we collect or who we share it with, we’ll update this page and the date at the top. Material changes are announced on the site before they take effect.
Contact
Pixelworkers, operated by The Commonwealth Creative LLC
support@pixelworkers.org · (804) 424-1348