Privacy notice

Who we are

This site is run by Skycloak Inc., the team behind Acciew and Skycloak. To ask us anything about this notice, write to hello@acciew.com.

What we collect

If you send the design-partner form, we keep what you type into it:

• your work email address, as you typed it, and your company;
• the system where your access lives (Keycloak, GitHub, AWS IAM, Entra ID or something else);
• the month of your next audit, and a note if you wrote one;
• which page of this site you sent it from, and the time you sent it, which is also the time you agreed to this notice;
• where you came from: the ad or site named in the link you followed, any ad click ID from Google, LinkedIn or Microsoft in that link, the first page of this site you landed on, and the name of the site that sent you, like google.com. We keep the name of that site, never its full address;
• the first 200 characters of the name your browser gives itself, and the country Cloudflare says your request came from;
• a plain form of your email address (lower case, without any +tag, and for Gmail without dots), which we use only to see that two applications come from one mailbox;
• the times we first and last got an application from your mailbox, and the time we last emailed ourselves about it or, if the email service refused to send that email, the time and a short note saying why.

Our script on the page holds the details of where you came from in your browser until you close the tab, and sends them to us only with the form.

We do not keep your IP address with your application. If you send the form again from the same mailbox, we update that entry with your newest answers instead of adding a second one. A note or a page left blank the second time does not erase the first.

To stop spam, the form has a field people never see, and Cloudflare counts how often one network address sends the form in a minute. We do not write that address down.

Like every web site, our host sees the details that come with each request, such as your IP address and your browser. We use them to run and protect the site. This site sets no cookies today. Once we turn on the tags under “Ads and analytics”, those tags can set some.

The log of our sign-up code keeps a row number and a short reason when something goes wrong, such as an email that did not go. It does not keep your IP address, your browser or your answers. We turned off the log of every request.

Counting visits

We count visits with Cloudflare Web Analytics. It sets no cookies. Cloudflare runs it, so your browser loads a small script from Cloudflare and sends Cloudflare these details about the visit: the address of the page, the page you came from, your browser and device type, your country (worked out from your IP address, which Cloudflare says it does not use to identify you) and how fast the page loaded. We see counts and breakdowns, not who you are.

Ads and analytics

We record which ad or site sent a visitor, and which page they landed on, so we know which of our ads and links bring teams to the design-partner program.

When we run ads, we also use analytics and advertising tags from Google (Google Analytics and Google Ads), LinkedIn (the Insight Tag) and Microsoft (Clarity). We load them through Google Tag Manager. They can set cookies, and they see which pages you visit, which buttons you press, how far you scroll, your device and browser, and roughly where you are. We do not give them what you type into the form.

Microsoft Clarity records a replay of your visit, so we can see how a page is used. What you type into form fields is masked and is not in the replay.

If your browser sends the Global Privacy Control signal, we turn the advertising tags off for your visit.

Why

To read your application, decide whether the program fits, and write back to you about it. The details of where you came from, such as an ad click ID, are used to see which ad or page brought you. We do not sell your application, and we do not use your answers to show you ads.

We do not report sign-ups back to an ad network today. If we do later, to count a sign-up as a conversion for an ad, we will say so here first.

Where it is kept, and who reads it

Your answers are kept with Cloudflare, which hosts this site and stores the applications for us. Resend sends each application to us by email, and keeps a copy of each email it sent in its own logs until its retention period ends. The email goes to hello@acciew.com, which Cloudflare Email Routing forwards to a Google Workspace mailbox, so Google stores the email too. Cloudflare, Resend and Google are our processors: they handle your answers only to do that work for us.

The people at Skycloak Inc. who run the program read your application. We do not sell it, and we do not hand it to anyone to use for their own purposes.

How long

We keep your answers for as long as we may still talk to you about the program, or until you ask us to delete them. When you ask, we delete your entry and the emails we hold. Resend removes its copy when its retention period ends.

Your choices

Write to hello@acciew.com to ask what we hold about you, to have it corrected, or to have it deleted.