Privacy Policy

Last updated 11 August 2026

Who we are

Cobblestone Labs is an experience-technology studio based in New York City. This policy covers www.cobblestonelabs.com and the capability decks and documents we share by link from that domain.

For anything in this policy, contact us at info@cobblestonelabs.com or 888.510.6875.

Information you give us

Contact form

When you use the contact form, we ask for:

• Name and email address — required, so we can reply.
• Company and phone number — optional.
• Your message.

Submissions are delivered to our team by email. The website itself does not keep a copy in its database — the message lives in our email system, the same as if you had written to us directly, and is retained as ordinary business correspondence.

Feedback form

The site has a feedback channel used during testing and quality checks. If you submit feedback, we record the category and description you write, and the page automatically attaches technical details to help us reproduce what you saw: the page address, your browser and operating system, device type, screen and window size, language setting, and time zone. Feedback entries are stored in the site's database.

Anti-spam checks

Both forms include automated spam protection: a hidden field that people don't see but bots tend to fill in, and a check on how quickly the form was submitted. When a submission is rejected by these checks, we write the IP address it came from to our server logs so we can spot abuse. Successful submissions do not have their IP address recorded this way.

Information collected automatically

Analytics and session measurement

We use two measurement tools, both of which can be turned off by us at any time:

Tool	What it does
Google Analytics 4	Aggregate usage statistics — pages viewed, roughly where visitors come from, which devices they use, and how they move through the site.
Microsoft Clarity	Records how pages are actually used, including clicks, scrolling and pointer movement, and builds heatmaps and session replays from it. This means your interaction with a page may be replayed by us later as we look for usability problems.

We use these to understand what's working on the site and what isn't. We do not use them to build advertising profiles or to identify you personally.

Server logs

Our hosting keeps standard web server logs — the request, the time, and technical details about the connection — which we use to keep the site running and to investigate errors.

Cookies and similar technology

The site uses a small number of cookies:

• Analytics cookies set by Google Analytics and Microsoft Clarity, used to tell repeat visits apart from new ones.
• A security cookie that protects our forms against cross-site request forgery. This one is necessary for the contact and feedback forms to work.
• Sign-in cookies, which apply only to our own staff signing in to the site's admin area. Visitors never receive these.

You can block or delete cookies in your browser settings. Google also publishes a browser opt-out add-on for Google Analytics. Blocking analytics cookies will not stop you using any part of this site.

Services we rely on

Running the site means a handful of other companies necessarily see some data — usually just your IP address and browser, because your browser fetches files from them:

• Microsoft Azure — hosting. The site and its database run on Azure servers in the United States.
• Google — Analytics, web fonts, and email delivery for contact form submissions through Google Workspace.
• Microsoft Clarity — session measurement, described above.
• Adobe Fonts and cdnjs (Cloudflare) — typefaces and animation libraries loaded by the page.

What we don't do

• We don't sell or rent your personal information to anyone.
• We don't run advertising on this site or share your data with ad networks.
• We don't require or offer visitor accounts, and we don't ask for payment details.
• We don't use your contact details for unrelated marketing. If you write to us about a project, we reply about that project.

How long we keep things

• Contact form messages are kept as email correspondence for as long as the enquiry or relationship is commercially relevant.
• Feedback entries are kept until the issue they describe is resolved and no longer useful for reference.
• Analytics data is kept according to the retention settings of Google Analytics and Microsoft Clarity.

Your rights

Depending on where you live — including in the EEA and UK under the GDPR, and in California under the CCPA/CPRA — you may have the right to ask us to:

• tell you what personal information we hold about you;
• correct it if it's wrong;
• delete it;
• stop using it for a particular purpose, or object to that use;
• provide it in a portable form.

Email info@cobblestonelabs.com and we'll action it. We won't treat you differently for exercising any of these rights. Because we don't sell personal information, there is nothing to opt out of on that front.

Security

The site is served over HTTPS, our forms are protected against cross-site request forgery, and access to the admin area is restricted to named accounts. No system is perfectly secure, so please don't send anything highly sensitive — contracts, credentials, personal identifiers — through the contact form.

International visitors

We're based in the United States and the site is hosted there, so if you contact us from outside the US your information will be transferred to and processed in the US.

Children

This site is aimed at businesses and isn't directed at children. We don't knowingly collect information from anyone under 13. If you believe a child has sent us information, email us and we'll delete it.

Changes to this policy

If we change what we collect or how we use it, we'll update this page and change the date at the top. Material changes will be described here rather than made quietly.

Contact

Cobblestone Labs
New York, NY
info@cobblestonelabs.com
888.510.6875