Privacy Policy

This policy explains what personal data coderband collects through coder.band and through our business contacts, why we collect it, and what your rights are.

In short:

We use Google Analytics, plus cookieless Cloudflare Web Analytics.
Payments go through Stripe, and we never see your full card number.
Bookings go through Cal.com.
Google Analytics and our Reddit, OpenAI and LinkedIn advertising tags need your agreement first in the EU, EEA, UK and Switzerland. Everywhere else you can turn them off (Section 4).
We don’t sell your data.

1. Who we are

The controller of your personal data is coderband LLC, a Wyoming limited liability company (Wyoming filing ID 2025-001816694), of 75 E 3rd St, Ste 7, Sheridan, WY 82801, USA, trading as “coderband” (“we”, “us”).

Contact: hello@coder.band

What this policy covers. This policy covers visitors to coder.band, people who email us or book a call, buyers, and contacts at our clients and partners. When we work on a client’s systems, we process the client’s data as their processor under our Data Processing Addendum. In that case, the client’s own privacy policy applies to that data.

2. What we collect and why

When	What data	Why	Legal basis (GDPR)
You visit the site	IP address, requested URL, browser and device information, date and time	To deliver the site and keep it secure. The site is hosted on Cloudflare, which processes this data for us.	Legitimate interests (running a secure website)
Analytics	Page views, referring site, browser, operating system, device type and country, all counted in aggregate	To understand which pages are useful. We use Cloudflare Web Analytics, which is cookieless: it doesn’t set cookies or use local storage, and it isn’t used to identify you.	Legitimate interests (improving our site)
Google Analytics (see Section 4)	Pages you view, how you arrived (including campaign details), approximate location, device and browser, and events such as sending a question, booking a call or buying, linked by a cookie identifier	To understand how people find and use the site, and which campaigns work	Consent (EU, EEA, UK, CH); legitimate interests, with an opt-out, elsewhere
You email us at hello@coder.band	Your name, email address, the content of your message, and anything you attach	To reply to you and handle your request	Steps before a contract, or legitimate interests (answering business enquiries)
You ask a question on coder.band/ask	Your email address, your question, and anything you add: the tools you use, a link, whether you lead a team. Also your country (from Cloudflare), a one-way hash of your IP address for 7 days to stop abuse, and, if you allowed ad measurement, the campaign that brought you	To answer your question by email. We may reuse questions and answers in anonymised form (no names, emails, companies or identifying details) in our articles and emails	Legitimate interests (answering the question you asked us); for anonymised reuse, legitimate interests (publishing useful material)
You ask for our weekly email by ticking the box on coder.band/ask	Your email address and when you subscribed	To send the weekly email	Consent, which you can withdraw with the unsubscribe link in every email or by writing to us
You book a call through Cal.com	Name, email address, time zone, chosen time, your answers to booking questions, and video-call details	To schedule and hold the call	Steps before a contract, or legitimate interests
You buy through Stripe Checkout, a Stripe Payment Link or a Stripe invoice	Name, email address, company name, billing address, tax ID (if you give it), what you bought, and payment status. Stripe handles your card or bank details. We see only limited details, such as card brand and last four digits.	To take payment, deliver what you bought, issue invoices and refunds, and prevent fraud	Performance of a contract; legal obligation (tax and accounting records)
We work together	Business contact details of your team, project communications and contract records	To run the engagement and keep business records	Performance of a contract; legitimate interests; legal obligation
Advertising tags (only if enabled, see Section 4)	See Section 4	To measure which ads lead to visits, booked calls and purchases	Consent (EU, EEA, UK, CH); legitimate interests, with an opt-out, elsewhere

We don’t ask for special categories of data, such as health or religious beliefs, and we don’t make decisions about you by automated means alone.

3. Cookies and similar technologies

Analytics and advertising cookies are set only as described in Section 4. In the EU, EEA, UK and Switzerland, that means only if you agree. Cloudflare Web Analytics is cookieless.

Other providers’ cookies. When you pay on a Stripe-hosted page or book on Cal.com, those providers may set their own cookies on their own sites. Their privacy policies explain them.

Analytics and advertising cookies. These are set only as described in Section 4.

4. Google Analytics and advertising tags (Reddit, OpenAI and LinkedIn)

We use Google Analytics to understand how people find and use coder.band. We use the Reddit Pixel and the OpenAI Ads Pixel (for our ads in ChatGPT), and may also use the LinkedIn Insight Tag, to measure which of our ads bring people to coder.band, and whether those visits lead to a question, a booked call or a purchase. Below, “the tags” means all of these.

If you’re in the EU, the EEA, the UK or Switzerland, nothing loads until you agree. We check your country when the page loads, through our hosting provider Cloudflare. If you’re in one of these places, the tags load only after you click “Accept” in our banner. If you click “Decline”, or ignore the banner, they never load. If we can’t tell where you are, we ask.

Everywhere else, the tags load by default, and you can turn them off. Use “Privacy choices” in the site footer. This is an opt-out of the “sharing” of data for advertising, as US state privacy laws describe it.

Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as “Decline”, wherever you are.

What the tags collect when they run:

the pages you visit on coder.band;
events such as booking a call or completing a purchase, including the purchase amount;
the ad click identifier in the link you arrived from;
cookie identifiers;
your IP address; and
browser and device information.

If you’re logged in to Reddit, ChatGPT or LinkedIn, the platform may link this data to your account. We don’t send your name, email address or other contact details to these platforms.

What we keep ourselves. With your agreement, or where no agreement is needed, your browser stores two items on coder.band:

the campaign details and ad click identifier from your first visit; and
your privacy choice.

When you pay through Stripe, we attach the campaign details to the payment as a reference, so we know which ad led to it. When you book a call, we attach them to the booking.

Google Analytics. Google processes Google Analytics data for us, as our processor, under its data processing terms (https://business.safety.google/adsprocessorterms/). Google Analytics doesn’t log or store full IP addresses. Our Google Analytics data is kept for no more than 14 months.

Who is responsible for the ad tags. We and each ad platform are jointly responsible for collecting this data on our site and sending it to the platform. This follows the EU Court of Justice’s ruling in Fashion ID (C-40/17). After that, each platform decides independently how it uses the data, under its own policy:

Reddit: https://www.reddit.com/policies/privacy-policy
OpenAI: https://openai.com/policies/privacy-policy/
LinkedIn: https://www.linkedin.com/legal/privacy-policy

Changing your mind. Use “Privacy choices” in the footer at any time. Withdrawing stops future collection. It doesn’t affect anything collected before.

Cookies. Google Analytics sets first-party cookies named _ga and _ga_<ID>, which last up to 2 years. Reddit sets first-party cookies such as _rdt_uuid, OpenAI sets a first-party cookie named __oppref that lasts 30 days, and LinkedIn sets cookies such as li_fat_id, lidc, bcookie, li_sugr, UserMatchHistory and AnalyticsSyncHistory. Each ad platform sets how long its cookies last; see Reddit’s cookie notice and LinkedIn’s cookie policy. Our own site stores no cookies; it keeps your privacy choice and first-visit campaign details in your browser’s local storage until you clear them.

We share personal data only with:

Service providers that act for us. They process your data only on our instructions. Our main providers are:
- Cloudflare (hosting, CDN, security and analytics, the database behind coder.band/ask, and sending its emails);
- Stripe (payments, invoicing and fraud prevention). For some purposes, such as fraud prevention and its legal obligations, Stripe acts as an independent controller;
- Cal.com (booking calls);
- Google (Google Calendar and Google Meet, for scheduled video calls, and Google Analytics, as described in Section 4);
- GitHub (code hosting);
- Apple (iCloud+ Custom Email Domain, our hello@coder.band mailbox);
- Anthropic (Claude Code), OpenAI (Codex) and Anysphere (Cursor, always in Privacy Mode), the AI coding tools we use, under terms that don’t allow them to train on customer code; and
- Wise (receiving payments; billing data only).
When our main providers change, we update this list. Our clients also get advance notice of new sub-processors under our Data Processing Addendum.
Our contractors. We work with vetted individual contractors, some of whom are located outside the United States. They help us respond to you and deliver our work. They act only under our instructions and are bound in writing to confidentiality.
Advertising platforms (Reddit, OpenAI and LinkedIn), as described in Section 4.
Professional advisers, such as accountants and lawyers, under duties of confidentiality.
Authorities, where the law requires it.
A buyer or successor, if our business is sold or reorganized. They would have to protect your data as this policy describes.

We don’t sell your personal data.

6. International transfers

We are based in the United States. Several of our providers are also in the US, and some of our contractors are located outside the United States. When we transfer personal data from the EU, UK or Switzerland to these countries, we use a lawful transfer mechanism. For US providers, that is either the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions), where the recipient is certified, or the European Commission’s Standard Contractual Clauses. For our contractors located in a country that has no EU adequacy decision, we use the Standard Contractual Clauses. Where needed, we add the UK Addendum or the Swiss adjustments. Contact us for a copy of the relevant safeguards.

7. How long we keep data

Data	How long
Emails and enquiries that don’t lead to work	2 years after our last contact
Booking records	2 years after the call
Questions sent through coder.band/ask, and our answers	2 years after the question (the IP address hash goes after 7 days)
Weekly email list	Until you unsubscribe
Purchase, invoice and contract records	10 years after the end of the tax year, as tax and accounting law requires
Client contact details and project communications	For the engagement and 6 years after it ends
Hosting and security logs	As set by Cloudflare’s retention periods, which are short
Analytics	Cloudflare Web Analytics: aggregated only, under Cloudflare’s retention periods. Google Analytics: no more than 14 months
Advertising tag data (if enabled)	For the lifetime of the cookie (see Section 4), and on the platform under its own policy

When a retention period ends, we delete the data or make it anonymous.

8. Your rights

If GDPR, the UK GDPR or Swiss law applies to you, you have the right to:

access your personal data and get a copy of it;
correct data that is inaccurate;
delete your data in certain cases;
restrict our use of your data in certain cases;
data portability, meaning you can receive data you gave us in a machine-readable format;
object to processing based on legitimate interests. You can always object to direct marketing;
withdraw consent at any time, where we rely on consent. Withdrawing doesn’t affect earlier processing; and
complain to a data protection authority, in particular in the country where you live or work. EU authorities are listed at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en. In the UK, the authority is the ICO (https://ico.org.uk).

How to use your rights. Email hello@coder.band. We’ll reply within one month. We may ask you to confirm your identity first. If you live in a US state that gives you privacy rights, you can contact us in the same way.

9. Security

We protect personal data with access controls, multi-factor authentication, encrypted devices, and by keeping data with established providers instead of on our own servers. No system is perfectly secure, but we take reasonable care, and we’ll tell you if a breach affects you where the law requires it.

10. Children

Our site and services are for businesses. They are not directed at children under 16, and we don’t knowingly collect children’s data.

11. Changes

If we update this policy, we’ll change the “Last updated” date. If a change is significant, for example adding a new kind of tracking, we’ll make it clear on the site and, where the law requires it, ask for your consent again.

12. Contact

hello@coder.band

coderband LLC · 75 E 3rd St, Ste 7, Sheridan, WY 82801, USA