Skip to content

Legal

Privacy Policy

Effective November 3, 2026

This policy covers mdostal.com and book.mdostal.com. The site is run by Mathew Dostal through Dostal Technology LLC (“we”, “us”). It explains what information the site collects, why, who processes it, and what you can do about it.

The short version

  • We use analytics (PostHog) and the Meta Pixel to see how people find and use the site and whether our ads work.
  • If you fill in a form, book a call, subscribe, or buy a report, we keep what you entered so we can reply and do the work.
  • We don't sell your personal information for money.
  • Email me@mdostal.com to see, correct, or delete your data.

Information collected automatically

Analytics (PostHog)

When you browse the site, PostHog records the pages you view (including any UTM campaign parameters in the URL), the referring site, clicks on links and buttons, when you leave a page, page-load performance, and basic device and browser details. Some pages send extra events, such as how far you read a blog post or which step of the ROI estimator you completed. PostHog assigns your browser a random ID stored in a cookie and local storage. Session recording and surveys are turned off. Analytics requests go through mdostal.com (the /t path) and on to PostHog's US servers.

Meta Pixel

The site loads the Meta Pixel, which tells Meta that your browser viewed a page on mdostal.com. Meta uses this to measure our Facebook and Instagram ads and may use it to show ads to people who visited. Meta can link the visit to your Meta account if you're logged in. It sets the _fbp cookie. See Meta's cookie policy.

Hosting and performance

Vercel hosts the site and keeps standard request logs (IP address, browser user agent, page requested, time). Vercel Speed Insights records anonymous page-speed measurements. Our forms and the blog chat count requests per IP address for a short window (one hour) to stop spam. Those counters are kept in Upstash.

Information you give us

  • Contact form: your name, email, company, subject, message, and optional budget and timeline. This goes to us by email (via Resend), and you get a confirmation email.
  • Booking a call (book.mdostal.com): Cal.com collects the name, email, and any notes you enter, plus the time you pick. Cal.com notifies us of the booking, and we record it in PostHog with your name and email.
  • Newsletter (including the email field in the ROI estimator): your email address, stored in our Resend subscriber list. Every email has an unsubscribe link.
  • Audit packet: your company name, your name, and your email. We store that with your IP address, browser user agent, order status, and Stripe payment reference. Stripe handles card details directly; we never see or store your card number. To build the report, we send your company name and its public website information to an AI model provider (Google Gemini or Anthropic Claude). The finished report goes to you by email.
  • Testimonials: your name, title, company, email, quote, attribution choice, photo consent, and any images you upload. These are stored as a draft in Sanity and emailed to us. Nothing is published until we review it, and it's published only with the attribution you chose.
  • Blog chat: the questions you type are sent, with the blog post, to an AI model provider (Google Gemini or Anthropic Claude) to produce an answer. We don't store the conversation.
  • Blog comments: comments are powered by Giscus and stored as GitHub Discussions. Commenting requires a GitHub account, and your comment and GitHub username are public.

When you submit the contact, newsletter, testimonial, or audit-packet forms, we also record that event in PostHog, keyed to your email address, so we can see which pages lead to inquiries.

How we use it

  • To reply to you, run the calls you book, and deliver reports you buy.
  • To send the newsletter you signed up for.
  • To understand which pages, posts, and ads bring people to the site and lead to inquiries.
  • To keep the site running and block spam and abuse.

Who processes it

We share data only with the services below, which run parts of the site for us. Each handles data under its own privacy policy.

  • Vercel: Hosts the site; records standard request logs and anonymous page-performance metrics (Speed Insights). Privacy policy
  • PostHog: Site analytics (page views, clicks on links and buttons, form-submission events). US data region. Privacy policy
  • Meta (Facebook): Meta Pixel: records page views so Meta can measure and target our ads. Privacy policy
  • Cal.com: Call booking on book.mdostal.com. Privacy policy
  • Resend: Sends contact-form, newsletter, and report emails; stores the newsletter subscriber list. Privacy policy
  • Stripe: Takes payment for paid audit-packet reports. Privacy policy
  • Upstash: Stores audit-packet orders and short-lived rate-limit counters keyed by IP address. Privacy policy
  • Sanity: Content management; stores submitted testimonials as drafts for review. Privacy policy
  • Google (Gemini API) / Anthropic (Claude API): AI models that answer blog-chat questions and generate audit-packet reports. Privacy policy · Anthropic privacy policy
  • GitHub (via Giscus): Blog comments, if you choose to sign in with GitHub and comment. Privacy policy

Cookies and how to opt out

The site and the services it loads use these cookies and browser storage:

  • PostHog (ph_*_posthog cookie and local storage): analytics ID.
  • Meta (_fbp): ad measurement and targeting.
  • Theme (local storage): remembers light or dark mode.
  • Cal.com: the booking widget on book.mdostal.com may set its own cookies.

The site doesn't have its own cookie settings panel. To opt out:

  • Block or clear cookies for mdostal.com in your browser settings, or use a content or tracker blocker. The site works without them.
  • Control how Meta uses your activity for ads in your Facebook or Instagram ad preferences (Settings → Ad preferences).
  • Unsubscribe from the newsletter with the link at the bottom of any email.

How long we keep it

  • Audit-packet orders: deleted automatically after 7 days if you don't confirm your company. Confirmed or paid orders are kept for 1 year.
  • Rate-limit counters: expire within about an hour.
  • Newsletter list: until you unsubscribe or ask us to delete you.
  • Contact messages, bookings, and testimonials: kept as business correspondence until you ask us to delete them.
  • Analytics, hosting logs, and payment records: kept by PostHog, Vercel, Meta, and Stripe under their own retention policies.

Your rights

You can ask us to tell you what personal information we hold about you, correct it, or delete it. Email me@mdostal.com. We'll confirm the request comes from you (usually by replying to the email address involved), then act on it and tell you what we did. Some records, like payment records Stripe must keep, may not be deletable.

California residents: under the CCPA/CPRA you have the right to know, access, correct, and delete your personal information, and to opt out of its “sale” or “sharing”. We don't sell personal information for money. The Meta Pixel lets Meta use your visits for ad targeting, which California law may treat as “sharing”. To opt out, block cookies as described above or email us. We won't treat you differently for using any of these rights.

Children

This site is for businesses and professionals. It isn't aimed at children under 13, and we don't knowingly collect their information.

Changes

If the site starts collecting something new or stops using a service, we'll update this page and the effective date above.

Contact

Mathew Dostal, Dostal Technology LLC
me@mdostal.com
Or use the contact form.