Agency / Privacy

What we collect, and what we deliberately do not

We measure other people's websites for a living, so we know exactly how much a visitor gives away without meaning to. This page is the short, honest account of what this website takes from you, what it refuses to take, and what that choice costs us.

Last updated 6 September 2026 roasdept hello@roasdept.com

Two things happen on this site. You read pages, and you may send us a message. That is the whole surface, so this is a short page.

  • No cookies. Not one, not for analytics, not for preferences. Nothing is written to your browser and nothing is read back out of it.
  • We do not store your IP address. It is used for a fraction of a second to produce a scrambled label, and then it is gone.
  • No advertising pixels. No Meta pixel, no Google Analytics, no tag manager, no session recorder, no heatmap. We run those tools for clients on their own stores. We do not run them here.
  • Nothing is sold or shared with advertisers, data brokers or anyone else, ever, under any commercial arrangement.

When you read this website

Every page loads one small script from our own server. It records that a page was viewed and, when you leave, roughly how long you stayed. It sends that to desk.roasdept.com, which is ours, on our own infrastructure. Nothing goes to a third party analytics company, because there is not one involved.

To count a person rather than a page load, most analytics tools drop a cookie or keep your IP address. We do neither. Instead your IP address, browser signature and language setting are combined with a secret that only we hold, run through a one way hash, and reduced to a twenty character label like a94edc2ef0854b989e59. The original values are never written down. The label cannot be reversed back into an address, a device or a name, by us or by anyone who obtained the database.

That secret is replaced at the start of every calendar month. The same person visiting in September and in October produces two labels with no mathematical relationship to each other. Older records stop being linkable to anybody at all, including by us, on the first of the month.

Everything the site keeps about a visit

What is recordedWhat it looks likeWhy
Scrambled visitor labela94edc2ef0854b989e59So four pages read in one sitting count as one reader, not four
Page and time/meta, 6 Sep, 37 secondsTo learn which pages get read and which get abandoned
Where you arrived fromgoogle, linkedin, directTo know which of our own efforts brought anyone here
Country and cityBelgium, GhentGiven to us by the network, accurate to roughly the city
Network operatorTelenet, or a company nameRead below, this one is weaker than it sounds
Desktop or mobiledesktopDerived from the window width, nothing more
There is no other field. No name, no email, no IP address, no device identifier, no cross site history.

The part most sites do not admit

The network operator field deserves a straight answer, because plenty of tools sell it as "see which companies visit your site". Every connection announces which network it came from. If somebody reads this page from an office, that can be the employer's name. If somebody reads it at home, which is most people, it is the name of a broadband provider and tells us nothing about who they are.

So we can sometimes see that a company looked at a page. We cannot see who, we cannot see their name, their role or their email, and we do not try to work it out. There is no enrichment service attached to any of this.

Designed this way, our own analytics cannot recognise a returning reader across a month boundary. We think that is the right trade, and we would rather write it down than quietly reverse it later.

When you fill in the contact form

You choose what goes in it. The form asks for a name, an email address, your store address, roughly what you spend and a message. It arrives in our inbox, and a copy is kept in our internal desk so an enquiry cannot be lost in a mailbox. We use it to reply to you and, if we end up working together, to run the account. That is the entire purpose.

We do not add you to a mailing list. There is no newsletter on this site, no automated sequence and no drip campaign. If we send you an email, a person wrote it to you.

How long any of it is kept

Page views and visitor labels
400 days, then deleted automatically
Linkability of those labels
Broken at the start of every month
Contact form messages
Kept while the conversation is live, then on request
Anything else
There is nothing else

The deletion of page records is a scheduled job that runs on our own server, not a promise we hope to remember. Messages are correspondence, so we keep them the way you would expect a business to keep an email thread, and we delete them the day you ask.

The four companies involved

We are a small team and we run on other people's infrastructure. These are all of them, and each one sees what its job requires and no more.

  • Vercel serves the pages you are reading.
  • Cloudflare provides the domain, the network in front of it, and the small servers that run our form and our analytics. Our data sits in their database, in their European region.
  • Google Fonts supplies the three typefaces this site is set in. Loading a font from Google means Google's server sees the request, which is the one piece of this page we do not fully control. It is a fair thing to hold against us.
  • Google Workspace hosts the mailbox that receives what you send.

When we run your accounts

Everything above is about this website. If you become a client, we work inside your Meta, Google, Shopify and Klaviyo accounts, under your ownership and your agreements with those platforms. Your customer data stays in your systems. We do not copy it out, we do not pool it with another client's, and we do not keep a copy when the work ends. The accounts, the pixels, the audiences and every document we wrote stay with you.

What you can ask for

Write to hello@roasdept.com and we will answer within thirty days, usually the same week. You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. If you want your website records gone, say roughly when and where you visited from and we will find and remove them, though after a month has passed the labels are no longer linkable to you by anyone, which is rather the point.

You can also opt out of the page counting entirely. Any content blocker, or a browser set to block scripts, stops it dead, and the site works exactly the same without it. It is one script from one domain, and nothing on this site depends on it.

If this page changes

The date at the top moves and the change is real. We will not add a tracker and leave this text describing a site that no longer exists. If we ever start using cookies or a third party analytics tool, this page says so before it happens, in the same plain language.

roasdept is operated from Belgium and serves ecommerce brands worldwide. Questions about any of the above go to hello@roasdept.com.