Legal
Privacy policy
What we collect, why we collect it, and how to get rid of it. Written to be read rather than to be defensible.
Last updated September 2026
The short version
We collect three things from this website: the email addresses people give us on purpose, the website addresses people ask us to audit, and ordinary anonymous analytics about which pages get visited. We do not sell any of it, we do not share it with advertisers, and we do not run a drip sequence at you because you filled in a form once.
If you want your details deleted, email hello@cadabra.marketing and we will do it. You do not have to explain why.
What we collect
When you run the free audit
The audit form asks for two things: the website you want audited and your email address. We use the website address to run the audit, and the email address to reach you about it if you write back. The report itself opens in your browser straight away, and the link keeps working, so keep it if you want to come back to it.
We also record the IP address the request came from. That is there to stop one person running thousands of audits, since each one costs us money, and it is not used for anything else.
When you use the contact form
Your name, email address, phone number if you give one, your company name, which service you are asking about, and whatever you write in the message box. All of it goes to our CRM so that a person can read it and answer you.
When you join the mailing list
Just your email address. Every email we send has an unsubscribe link.
What we never ask for
This site has no login, no payment form, and no account to create. It never asks for a password, a card number, or any government identifier. If a page claiming to be ours asks you for one of those, it is not ours.
The website audit
The audit is automated, and it works by looking at your website from the outside, in the same way a search engine would. When you run one, we:
- Fetch and read the public HTML of your homepage.
- Send the address to Google PageSpeed Insights, which loads the page and measures how fast it is on a phone.
- Look your business up in Google Places to find your public Google Business Profile rating and review count.
- Send what we found to Anthropic's Claude, which writes the findings and the recommendation.
Only public information about the website goes to those services. Your email address is not sent to any of them. We never ask for, and never have, access to your analytics, your hosting, or anything behind a login.
Reports are stored so that the link keeps working and so that running the same domain again returns the report we already made rather than charging us to make a second one. A report page is unlisted rather than secret: anyone with the link can open it, so treat the link as the key.
Analytics and cookies
We use Google Analytics, loaded through Google Tag Manager, to see which pages people read and where they arrived from. It is switched off entirely when the site is running on a developer's machine, so local testing does not end up in the numbers.
That is the only tracking on this site. There are no advertising pixels, no retargeting tags, no session recorders, and no chat widget listening in the corner. Analytics sets cookies in your browser; if you would rather it did not, browser settings, an ad blocker, or Google's own opt-out add-on will all stop it.
Who else sees it
We do not sell, rent, or trade personal information, and we never will. A small number of companies process it on our behalf because they run the software we use:
- Vercel hosts this website and our dashboard.
- Neon runs the database that audit reports are stored in.
- Attio is our CRM, where inquiries and mailing list signups go.
- Google provides the analytics, and the PageSpeed and Places data the audit uses.
- Anthropic provides Claude, which writes the audit findings.
We would also hand information over if the law actually required it, which has not happened.
How long we keep it
Audit reports are kept indefinitely so their links keep working, unless you ask us to delete yours. Inquiries stay in the CRM while there is any chance of us working together, and mailing list addresses stay until you unsubscribe. Analytics data expires on Google's own schedule.
Your choices
Whatever your local law entitles you to, our answer is the same: email hello@cadabra.marketing and ask. You can ask us to
- tell you what we hold about you,
- correct anything that is wrong,
- delete it, including an audit report and its link,
- or stop emailing you, which the unsubscribe link also does.
We are not going to make you prove a legal basis for any of that. We will just do it, and we will confirm when it is done.
If you are a client
Clients have accounts in our dashboard, which holds the data you connect to it: your Google Analytics and Search Console figures, the tasks we are doing for you, your approvals, your hours and your invoices. Those connections are made from accounts in your name and you can disconnect any of them yourself at any time.
That data is yours. If we stop working together, it stays in your own Google and advertising accounts regardless of what happens to your dashboard, and we will delete our copy on request.
Contacting us
Cadabra is based in Des Moines, IA. For anything on this page, including deletion requests, email hello@cadabra.marketing or use the contact form.
If we change how any of this works, we will change this page and update the date at the top. We are not going to quietly broaden it and hope nobody rereads it.