Privacy.

The short version.

This site sets no cookies of its own, stores nothing in your browser, and runs no advertising or cross-site tracking. One small script from Cloudflare counts visits, and the Analytics section below says exactly what it reports. The only personal data that reaches me is what you choose to send: the contact form, or an email to erik@hehrmann.com. I use it to answer you, and for nothing else.

The contact form.

The form on /contact/ asks for four things: name, email, agency (optional), and your message. Submissions are delivered by Formspree, the form processor this site uses, and land in my inbox and my client records. I use them to reply, usually within one business day, and to prepare if we book a call. They’re never sold, never shared for marketing, and never added to a mailing list.

The form is protected by Google reCAPTCHA v3, which runs invisibly to keep bots out. reCAPTCHA sends technical signals about your visit, such as your IP address and interaction patterns, to Google, and may set a Google cookie to do its job. That happens under the Google Privacy Policy and Terms of Service. reCAPTCHA loads on the contact page only, and apart from the Cloudflare analytics script below, it’s the only code on this site that doesn’t come from hehrmann.com.

Analytics.

I count visits with Cloudflare Web Analytics. Each page loads one small script from Cloudflare (static.cloudflareinsights.com) that reports the address of the page, the site you came from, your browser and type of device, and how quickly the page loaded, and Cloudflare adds the country the visit came from. The report is sent back to hehrmann.com itself and processed by Cloudflare, which keeps the full detail for seven days and a sampled summary after that.

The script sets no cookies, stores nothing in your browser, and doesn’t follow you from one site to another. What I see are totals, such as how many visits a page had and where they came from. I can’t see who you are, and I don’t want to.

Hosting.

hehrmann.com is served by Cloudflare. Like any host, Cloudflare processes technical request data, your IP address and browser type, in short-lived server logs for security and performance; the Cloudflare Privacy Policy covers it. Fonts are self-hosted, so no font request leaves this domain.

Email.

If you write to erik@hehrmann.com, the thread is kept as ordinary business correspondence. Same rules as the form: used to work with you, never sold, never fed to a list.

If you’re in the EU or UK.

The GDPR requires a legal basis for each use of your data, so here they are. What you send through the form or by email, I use to answer you and, if it’s about working together, to prepare for that conversation (Art. 6(1)(b) GDPR, steps taken at your request before a contract; Art. 6(1)(f) for anything else you write about). Hosting, the server records, the visit statistics, and reCAPTCHA rest on my legitimate interest in running a secure site, keeping spam off the form, and knowing which pages people read (Art. 6(1)(f) GDPR).

I’m based in the United States, so that’s where your data ends up. Cloudflare and Google are certified under the EU-U.S. Data Privacy Framework, which the European Commission recognizes as providing adequate protection. Formspree processes form submissions in the United States as well.

Your data, your call.

If you want to know what I hold about you, have it corrected, or have it deleted, email erik@hehrmann.com and I’ll take care of it, usually within the week. You can also object to any use that rests on my legitimate interest, and if you’re in the EU or UK and think I’ve handled your data wrongly, you can complain to your local data protection authority. But if anything on this page is unclear, ask. You’ll get an answer from me, not a policy bot.

Who’s behind this.

Erik Hehrmann LLC, Evanston, Illinois.

Last reviewed September 2026.