Privacy Policy

Last updated and effective: October 27, 2026

This policy explains what personal information Daylight Studio, LLC collects through our website and when you contact us or do business with us, how we use it, who we share it with, and the choices you have. It applies to everyone who visits our website or gets in touch with us.

It does not cover personal information we handle for clients as part of a project (for example, data on a website we build or manage for a client). That information is governed by our agreement with the client and the client’s own privacy policy.

If you have a question, email us at or write to us at the address under “Contact Us.” If you need this policy in another format, email us and we’ll provide it.

Privacy at a Glance

  • What you type into our forms or send by email (such as your name, work email, company, and message): used to reply to you, handle your inquiry, support request, or job application, and work with you as a client. Shared with our hosting, email, and inquiry-tracking providers.
  • How you use our website (pages, clicks, device, IP address, session recordings), only if you click Accept: used to understand and improve the website. Shared with Google, FullStory, and ActiveCampaign.
  • Advertising identifiers from pixels, only if you click Accept: used to measure and target advertising. Shared with Meta and LinkedIn.

We do not sell your information for money. You can ask us to see, correct, or delete your information. Analytics, session recording, and marketing tools only run if you click “Accept” on our cookie banner. See “Your cookie choice.”

Definitions

  • “Daylight,” “we,” “us,” “our” means Daylight Studio, LLC, PO Box 4577, Sunriver, Oregon 97707, United States.
  • “Website” means https://thedaylightstudio.com and its pages.
  • “Personal information” means information that identifies you or can reasonably be linked to you, such as your name, email address, or a device identifier.
  • “Cookies” are small files a website stores in your browser. Similar tools include pixels, tags, and scripts that collect information when a page loads.

Information We Collect

Where we get it

We collect information directly from you when you fill in a form, comment, email us, or work with us, and, if you click Accept, automatically from your browser through the tools listed under “Cookies and Similar Tools.”

Information you give us

  • Contact form: your work email, the kind of help you’re looking for, your full name, company name, timeframe, and any project details you choose to share.
  • Support request form: name, email, urgency, type of request, request details, the website or page URL, and your timeline.
  • Newsletter sign-up (on blog posts): your email address.
  • Blog comments: your name, email address, website (optional), and comment. To show a profile picture next to a comment, WordPress checks Gravatar (a service of Automattic) using a coded version of your email address.
  • Job applications: if you email , we receive what you send, such as your résumé, contact details, work history, and portfolio.
  • Emails and business dealings: what you include when you email us, and the business contact and billing details we need if you become a client.

When you submit a form or comment, our website also records your IP address, browser type, the page you were on, and the date and time.

We don’t ask for sensitive information, such as government ID numbers, financial account details, or health information, through our website. Please don’t include it in forms or emails.

Usage information (only if you click Accept)

If you accept cookies, we and the companies listed below automatically collect: your IP address and approximate location based on it; browser and device type, operating system, and screen size; pages you view, the page that sent you here, time on page, links and buttons you click, and scrolling; identifiers stored in cookies; and, through FullStory, a recording of how you move through and interact with our pages.

Cookies and Similar Tools

  • Site delivery and security: WP Engine (hosting), Cloudflare. Always on, because the site needs them to work. They run the website and protect it from bots and attacks.
  • Cookie banner: Cookie Notice (on our site). Always on. Remembers your Accept or Decline choice for 30 days.
  • Spam protection: Google reCAPTCHA. On our forms. Checks that form submissions come from a person.
  • Tag management: Google Tag Manager. Only after you click Accept. Loads the analytics and marketing tools below.
  • Analytics: Google Analytics. Only after you click Accept. Measures visits, pages viewed, and clicks. Google signals is on, which lets Google associate visits with people signed in to a Google account, for reporting across devices.
  • Session recording: FullStory. Only after you click Accept. Records how visitors use our pages (clicks, scrolling, mouse movement, pages viewed, page content). It is set to mask what you type into form fields, so your entries are not recorded.
  • Marketing analytics: ActiveCampaign site tracking. Only after you click Accept. Records which pages are visited, and can link visits to people who clicked one of our emails.
  • Advertising: Meta (Facebook) Pixel, LinkedIn Insight Tag. Only after you click Accept. They tell Meta and LinkedIn about visits so ads can be measured and shown to people who visited, or to similar audiences.
  • Embedded content: YouTube, Vimeo, Spotify, X (Twitter), Instagram. On pages that include them. Some posts contain videos or posts from these services. When those pages load, the service can collect information about your visit and set its own cookies.

Your cookie choice

The first time you visit, our banner asks you to Accept or Decline. Until you click Accept, Google Tag Manager, Google Analytics, FullStory, ActiveCampaign, and the Meta and LinkedIn pixels do not load. If you click Decline, they stay off. If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as Decline, and these tools do not load.

You can change your choice at any time:

How We Use Personal Information

  • Reply to you when you contact us or ask for support.
  • Prepare proposals and perform our agreements with clients, including project communication, support, and billing.
  • Track and manage inquiries in our internal project management tool.
  • Consider you for a job if you apply or introduce yourself.
  • Send our newsletter or marketing emails from time to time to people who sign up or are business contacts. Every marketing email includes an unsubscribe link, and you can email us to be removed.
  • Understand and improve the website, using analytics and session recordings, if you accept cookies.
  • Measure and show advertising on Meta and LinkedIn, if you accept cookies.
  • Keep the website and forms secure and filter spam.
  • Meet legal obligations and protect our rights.

How Long We Keep Information

  • Form submissions (contact, support, newsletter) are stored in our website database, in our inquiry-tracking tool, and in our email. We don’t have a fixed deletion schedule; we keep them while they are useful for our business relationship with you, and you can ask us to delete them at any time.
  • Copies of emails our website sends, such as form notifications, are kept in the website’s email log, which holds the most recent 250 messages.
  • Job applications are kept while we consider you and for possible future openings, unless you ask us to delete them.
  • Client records are kept for as long as we work together and afterwards as needed for our agreements, accounting, and legal obligations.
  • Analytics, session recording, and advertising data are kept by those providers according to their settings and policies.
  • We may keep information longer when the law requires it or to resolve disputes.

Where Information Is Processed

We are based in the United States, and our website is hosted in the United States. The service providers named in this policy may store and process information in the United States and in other countries where they operate. Data protection laws there may differ from the laws where you live.

If you visit from outside the United States, your information will be processed in the United States. You can use the rights described below wherever you live. If you are in the European Union or the United Kingdom, we use your information to answer you and run our business (our legitimate interests), to take steps before or under a contract with you, and, for cookies and similar tools, with your consent, which you can withdraw at any time. You can also complain to your local data protection authority.

Who We Share Information With

Service providers

  • Website hosting and security: WP Engine, Cloudflare
  • Form spam protection: Google (reCAPTCHA)
  • Email: Google Workspace (our email), SMTP2GO (sending form notifications)
  • Inquiry tracking: Asana (contact form submissions become tasks for our team)
  • Analytics and session recording: Google (Analytics, Tag Manager), FullStory
  • Email marketing and site tracking: ActiveCampaign
  • Comment profile pictures: Automattic (Gravatar)

Each of these companies has its own privacy policy, including Google, FullStory, ActiveCampaign, Asana, WP Engine, Cloudflare, SMTP2GO, Meta, and LinkedIn. Google explains how it uses information from sites like ours at policies.google.com/technologies/partner-sites.

Tracking across websites

If you accept cookies, Google (through Google Analytics with Google signals) and Meta and LinkedIn (through their pixels) can collect information about your activity on our site and on other websites over time.

Sale and sharing

We do not sell personal information for money. If you accept cookies, letting Meta and LinkedIn collect information through their pixels for advertising may count as “sharing” for cross-context behavioral advertising, or as “targeted advertising,” under some state privacy laws. You can opt out at any time by changing your cookie choice above, by turning on Global Privacy Control in your browser, or by emailing us.

Business transfers, law enforcement, and legal requirements

If Daylight is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that deal; we will post a notice on the website before your information becomes subject to a different privacy policy. We may also disclose personal information if required by law or in response to valid requests by public authorities, or when we believe in good faith it is necessary to comply with a legal obligation, protect the rights or property of Daylight, prevent or investigate possible wrongdoing in connection with the website, protect the safety of visitors or the public, or protect against legal liability.

Your Privacy Choices and Rights

Privacy laws in some states, including Oregon and California, give residents rights over their personal information. Those laws may not apply to a business of our size, but we offer the same rights to everyone. You can ask us to:

  • Access: confirm whether we have your personal information and give you a copy;
  • Correct inaccurate information;
  • Delete your information;
  • Opt out of targeted advertising and “sale” or “sharing” of your information;
  • Tell you which third parties we have disclosed your information to.

How to make a request: email with “Privacy request” in the subject line. Tell us what you’d like us to do and the email address you used with us. We may ask for information to confirm the request is from you. You can also have someone you authorize make the request for you. We will respond within 45 days; if we need more time, we will tell you why and may take up to 45 more days. We won’t treat you differently for using these rights.

Appeals: if we decline your request, you can appeal by replying to our decision with “Appeal” in the subject line. We will respond within 45 days and explain our decision.

Other ways to limit tracking:

  • Change your cookie choice above.
  • Turn on Global Privacy Control or Do Not Track in your browser.
  • Block or delete cookies in your browser settings.
  • Install Google’s opt-out add-on: tools.google.com/dlpage/gaoptout.
  • Manage ad settings in your Facebook, Instagram, or LinkedIn account. LinkedIn visitors who aren’t signed in can use LinkedIn guest controls.
  • Use the Network Advertising Initiative opt-out: optout.networkadvertising.org.
  • Unsubscribe from any marketing email using the link in the email.

Global Privacy Control and Do Not Track: our website treats both signals as Decline: analytics, session recording, and marketing tools do not load. Learn about GPC at globalprivacycontrol.org.

Security

Our website uses HTTPS encryption, and our hosting and security providers protect the site from common attacks. No method of sending or storing information over the internet is 100% secure, so we cannot guarantee absolute security.

Children’s Privacy

Our website is for businesses and is not directed to anyone under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

Links to Other Websites

Our website links to other websites, such as our social media pages and client sites. We don’t control those sites and are not responsible for their content or privacy practices. Please read their privacy policies.

Changes to This Policy

We may update this policy from time to time. When we do, we will post the new version on this page and change the “Last updated” date at the top.

Contact Us

  • Email:
  • Mail: Daylight Studio, LLC, PO Box 4577, Sunriver, Oregon 97707, United States