Privacy notice

This notice covers this site: the sample material behind the sign-in page, and the sign-in page itself. It is deliberately specific rather than generic — the list below is everything this deployment collects, and there is nothing else.

What we collect

Your email address	Either the address you type at the gate, or the verified address Google returns if you sign in. It records who opened the material.
An access label	Which recipient list or access code let you in. An organisation label, not a personal one.
A visitor identifier	A random value in a __Host-ps_vid cookie, kept for two years. It is meaningless on its own and carries no name or address. It is what lets the analytics below show one reader's visits as one reader's visits rather than as strangers.
Usage analytics	Google Analytics 4 and Microsoft Clarity, on the gated pages. Clarity records how a page was used — scrolling, clicks, which sections were opened — so we can tell which evidence was actually read.
Server logs	Ordinary request logs from our host, including IP address, kept short-term for security and debugging.

What we do not collect

• Nothing from your Google account beyond your email address. The sign-in asks for the openid and email scopes and nothing more: no name, no profile picture, no contacts, no calendar, no files. We request no ongoing access, so ours ends the moment you sign in.
• No password. There is no account here to have one.
• No payment details, and no special-category data.
• Your email address never goes into an analytics tag or a cookie. The visitor identifier is random precisely so that it need not.

Why we collect it

Two reasons, both about the material rather than about you. Access control: it is confidential and prepared for named recipients, so we check that a reader is one. And feedback on our own work: knowing which findings were read, and which were skipped, is how the next set gets written better.

We do not sell this data, we do not use it for advertising, we do not build marketing profiles from it, and we do not combine it with data bought from anyone else.

Who else sees it

• Google — sign-in, the form that records access, and Analytics.
• Microsoft — Clarity, for the usage recordings.
• Vercel — hosting and request logs.

Each of them processes it on our behalf and for these purposes only. Nobody outside Pareto and the organisation that commissioned the material is told who read it.

How long we keep it

The access record — address, access label, visitor identifier — is kept while the engagement it belongs to is live, and deleted when the site is retired. Analytics recordings expire on our providers' own schedules, which are months rather than years. The session cookie lasts a day; the visitor cookie lasts two years, or until you clear it.

Your choices

• You never have to sign in with Google. The access code from your invitation does the same job.
• Clearing this site's cookies discards the visitor identifier, and the next visit starts fresh.
• Write to us and we will tell you what we hold about you, correct it, or delete it.

Contact

Pareto, Inc. — sales@pareto.ai, which reaches the people who run this site. Pareto's company-wide policy is at pareto.ai/privacy-policy; where the two differ about this site, this notice is the specific one.