Privacy Policy

Who we are

Zentered Studios LLC is a software company in Boulder, Colorado, United States. This policy covers zentered-studios.com only. Our products run on their own domains under their own policies.

Contact for anything in this policy: hello@zentered-studios.com.

What this site collects

Page views and clicks, described below, and whatever you (or an AI agent acting for you) send through one of the tools described below. The site has no visible forms, no accounts, no login, and no payment form. Paying for training or a one-day session happens on Stripe's checkout page, described below. It sets no cookies and stores nothing in your browser. It runs no tracking pixels and no advertising scripts. Every page runs four scripts: one that registers those tools for AI agents in your browser (via the WebMCP document.modelContext API), one that reports page views and clicks to this domain, the Cloudflare Web Analytics beacon described below, and a WebMCP bridge that Cloudflare adds to each page as it serves it (/.webmcp/bridge.js). The bridge gives AI agents in your browser tools to check the provenance (C2PA) of images on the page, and checks whether this domain runs an MCP server at /mcp. It does not. The bridge sets no cookies, and it can only contact this domain.

What is processed when you visit

The site is hosted on Cloudflare Workers. Serving a page requires Cloudflare to process your IP address, browser user agent, requested URL, and timestamp. Cloudflare uses this to deliver the page and to protect the site against attacks, and retains it in its own logs for a limited period set by Cloudflare. We have Cloudflare Workers Logs enabled for this site, which records the same request metadata for a short retention window. We do not use it to build profiles, and we do not link it to a person.

We use Cloudflare Web Analytics to count visits. Cloudflare adds a small script from static.cloudflareinsights.com to each page as it serves it. The script reports the page URL, referrer, browser, device type, country, and page-load timings back to this domain, at /cdn-cgi/rum, where Cloudflare collects them. It sets no cookies, uses no browser storage, and does not fingerprint visitors. From that beacon we see only aggregate counts.

We also record how visitors move through the site. A script from this domain sends each page view and each click on a link or button to /api/event on this domain: the page path, the text of the link or button and where it points (without any query string), the page section, the referring site, the utm_source, utm_medium, and utm_campaign tags in the address you arrived with, and your country. We store these events in Cloudflare Workers Analytics Engine. To group one visitor's events into a visit, our server computes an id from your IP address, browser user agent, and the date, with a secret key. The id changes every day, and we cannot turn it back into your IP address. We do not store the IP address or the user agent, we store nothing in your browser, and we do not link the id to a person. If you use one of the tools below, the tool name and whether the call succeeded are recorded with the same id, not the content you sent. Cloudflare keeps these events for the retention period it sets for Analytics Engine.

Apart from that beacon, loading a page here contacts no other host: every asset, including the fonts, is served from this domain, and the site's Content-Security-Policy header blocks the browser from requesting anything else. The exception is the tools below, which you (or your agent) have to actively use.

If you contact us, request a quote, or book a call

Every page on this site registers WebMCP tools (contact_us, request_quote, get_call_availability, book_call) that an AI agent can call on your behalf. Using one sends the name, email, and message, project details, or call time you provide from your browser to our server, which forwards it to Cloudflare Email Service (to email us your message or quote request) or Cal.com (to check availability and book a call). We record the tool name, the time, how long the call took, the request and response size, whether it succeeded, and a short error code if it failed - not the content you sent - for reliability monitoring. We keep the resulting email or booking only as long as the correspondence or engagement needs it.

If you pay for a session

The pay buttons on /services/, /training/ai-basics/, /services/mcp-workshop/, /services/claude-team-setup/ and the homepage take you to a checkout page hosted by Stripe. Stripe collects your payment and billing details there under its own privacy policy. We receive everything you enter except your full card or bank account number, plus the payment and invoice records. We keep these records as long as tax and accounting law requires.

If you book a call

The "Work with us" button and every "Book a call" button open a booking page hosted by Cal.com: a 15-minute call, or a 20-minute call on the training pages. Cal.com processes what you enter there under its own privacy policy and sends us the booking. We keep the booking only as long as the conversation or engagement needs it.

If you email us

Email sent to an @zentered-studios.com address reaches a mailbox hosted by Fastmail. We keep your message, your address, and anything you put in it for as long as the business relationship or the correspondence needs it. We use it to reply to you and to run the engagement, nothing else.

What we never do

We do not sell or share personal information. We do not disclose it for cross-context behavioral advertising. We run no advertising, no third-party trackers and no cross-site tracking on this site. Our own page view and click records, described above, are used only to see how visitors use this site.

Your rights

If you are in the EU or UK, the GDPR gives you the right to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. Our legal basis for serving the site is legitimate interest in delivering and securing it; for the page view and click records it is our legitimate interest in understanding how visitors use the site, and you can object by emailing us; for correspondence it is the contract or our legitimate interest in replying to you. You may complain to your supervisory authority.

If you are a California resident, the CCPA gives you the right to know what personal information we hold, to delete it, to correct it, and to not be discriminated against for exercising those rights.

Email hello@zentered-studios.com to exercise any of these. We reply within 30 days.

Children

This site is not directed at children under 13, and we do not knowingly collect their personal information.

Changes

We update this policy when the site changes. The date at the top is the version you are reading.