Plain language. No tricks.

Application data you submit voluntarily: name, email, company, project type, budget range, timeline, the brief, and anything else you write into the notes field.

Attribution metadata when you arrive: UTM parameters from the URL, the referring site, and the page you landed on. Stored in your browser localStorage and attached to your application if you submit one.

Aggregate analytics: page paths, anonymized session events, browser type, and Core Web Vitals. Collected by Google Analytics 4, Microsoft Clarity (if enabled), Vercel Analytics, and Vercel Speed Insights.

Email delivery metadata: when I email you back, Resend logs basic deliverability data (delivered, opened, bounced) so I can fix problems if your inbox eats my reply.

I do not run third-party advertising pixels. No Facebook Pixel. No TikTok Pixel. No remarketing lists.

I do not sell, rent, or trade your data with anyone. Ever.

I do not collect payment information. Project invoicing happens off-site through standard tools (Stripe, Wise, etc.) once a project is booked.

Lead applications are retained for 24 months. After that, they are soft-deleted and excluded from any new processing.

Aggregate analytics are retained per the provider default (GA4: 14 months. Clarity: 30 days. Vercel Analytics: 90 days for raw events).

Email correspondence is retained as long as the project relationship is active, plus three years for tax and contract records.

Email mario@thenotoriousllama.com from the address on file and I will delete your data inside seven days.

You can also request a full export of everything I have on you in the same message.

If you are in the EU, UK, or California, you have additional statutory rights (access, rectification, erasure, portability). The same email handles them.

This site is not directed at children under 13. I do not knowingly collect data from anyone under 13.