Privacy notice

Effective 2026-10-01. This notice covers mttn.io, run by Mitten Digital Solutions LLC ("mttn") in Livonia, Michigan.

The short version

• We collect what you type into the contact form, and the request details every website sees.
• We set one technical cookie to stop spam. No analytics cookies, no advertising, no third-party scripts, and no JavaScript at all.
• We do not sell or share your information.

What we collect

• Contact form: your name, work email and message, and, if you fill them in, your company and how you heard about us.
• Request logs: like any website, our hosting provider records each request: IP address and the approximate location Google derives from it (country and city), browser user agent and language setting, the page that linked to it, the address requested (including anything after the "?") and the time.
• Section reach: as you scroll the home page, a few invisible images load from our own server (/px.gif?s=services and similar). Each is an ordinary request in the logs above and tells us how far down the page visits get. They set no cookie, their addresses carry no identifier, and our logs do not record cookies.
• Link counts: our LinkedIn link goes through mttn.io/go/linkedin first, so the click appears in the same logs.
• Site statistics: from the day we switch them on, we copy the request logs above, and the form logs described below, into a Google BigQuery dataset as they are written, so we can count page views, referring sites, countries, device types, how far down the home page visits get, link clicks and form submissions by source. That copy holds the same details as the logs and is deleted after 30 days. From it we keep only daily totals: numbers with no IP address, no browser details and nothing else that could single out a visitor; the only location they keep is the country, never the city. To credit a form submission to the link that brought the visitor, we match its time against that visitor's earlier requests while the copy still exists; the total keeps only "one submission from this source".
• One technical cookie: every page loads a tiny image from mttn.io/api/token that sets a cookie named __session. It holds only the time it was issued and a signature, expires after 24 hours, cannot be read by scripts, and is used only to check that a form submission came from someone who actually loaded the page.
• Abuse protection: when you send the form we keep a one-way, keyed hash of your IP address for about two days to limit repeated submissions, and a fingerprint of your message for about a day to catch duplicates. Our form logs record whether a submission was accepted, the first 12 characters of that hash, your answer to "How did you hear about us?" and the length of each field. They do not contain your name, email or message.

Why we collect it

To answer your inquiry, to keep the contact form free of spam and abuse, to keep the site running securely, and to see in aggregate how people find the site, which pages and sections they reach, and whether they get in touch.

Who processes it

The site, the contact form and its storage run on Google Cloud. Firebase Hosting serves the pages from Google's global network; the form's Cloud Function and its Firestore database run in Google Cloud's US regions; Cloud Logging keeps the logs in Google Cloud's global location. Once site statistics are switched on, a copy of those logs is kept in Google BigQuery (its US multi-region), and Looker Studio, also Google's, shows us the daily totals and emails a weekly summary of them to two people at mttn. Your message is emailed from a Gmail account that sends our form messages, so Google also keeps a copy in that account's Sent folder. It is addressed to info@mttn.io, and our domain provider, Porkbun, forwards mail for mttn.io addresses to the mailbox we read. We do not sell or share personal information and do not use it for advertising.

How long we keep it

• Contact-form submissions: the copy used to deliver your message and the copy in the sending account's Sent folder are deleted automatically about 30 days after it is sent. The email in our inbox stays until we delete it, and we delete it on request.
• Request logs and form logs: 30 days, including the copy in BigQuery once site statistics are switched on.
• Daily totals (numbers only, no personal information): up to 24 months, once site statistics are switched on.
• Abuse-protection hashes: about two days for the address and about a day for the message fingerprint.
• The __session cookie: 24 hours, in your browser.

Automatic deletion runs on Google's schedule and can finish a few days after these dates.

Your choices

To ask what we hold about you, or to have it corrected or deleted, email privacy@mttn.io. We answer within 30 days. You can block cookies in your browser; the form may then fail, and email always works. We do not track you across other websites, so Do Not Track and Global Privacy Control signals change nothing here.

Children

This site is for businesses and is not directed at children under 16.

Changes

We update this page when our practices change and revise the effective date above.

Contact

Mitten Digital Solutions LLC, Livonia, Michigan · privacy@mttn.io