Draft pending legal review. This document describes how the site actually behaves today and is accurate to that. It has not yet been reviewed by counsel, and the registered entity, jurisdiction and governing law are still to be confirmed. Questions in the meantime: hello@withpotter.com.
The short version
This website does not track you. There is no analytics, no advertising, no third-party scripts and no cookies. The only personal information we hold is what you type into the contact form and send us deliberately.
The rest of this page explains that in detail, because a claim like the one above should be checkable.
What we do not collect
To be specific about the things a site like this often does and this one does not:
- No analytics of any kind. There is no Google Analytics, no Plausible, no Fathom and no self-hosted equivalent.
- No advertising or remarketing pixels, and no social media trackers.
- No third-party scripts. Fonts are served from this site rather than from a font CDN, so no third party is told which pages you visit.
- No cookies. The site sets none.
- No profiling, no automated decision-making, and no sale or sharing of personal data.
Your browser will still request pages, and our hosting provider will record standard server logs in the ordinary course of serving them. We do not use those logs to build a profile of you.
What is stored in your browser
The site keeps two values in your browser's local storage. These stay on your device, are never transmitted to us, and are readable only by this site:
box-theme— whether you chose the light, dark or system appearance.box-cookie-choice— a legacy key from an earlier version of this site. It is no longer written and can be cleared.
Clearing your browser's site data removes both. Nothing breaks if you do.
The contact form
If you use a contact or newsletter form, the site sends what you enter to a small server-side form endpoint. The endpoint validates the submission and passes it to our email delivery provider; it does not write the submission to a site database.
For a contact enquiry we hold what you chose to tell us: your name, your email address, your organisation and role, what you are interested in, the market you operate in, and any note you added. A newsletter form sends only the email address you enter.
We use it to reply to you and to prepare for that conversation. We do not add you to a marketing list from a contact enquiry. Newsletter addresses are used for the updates requested on the form. Submissions sit in our email system and are kept while the conversation or subscription is active and for as long afterwards as we need them for our records.
Who else sees it
Vercel hosts the form endpoint and Resend delivers its email. They process submission data on our behalf in order to provide those services. We do not otherwise share it, and we do not sell it.
We may disclose information where the law requires it.
Your rights
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Write to hello@withpotter.com and we will act on it.
Because we hold so little, most requests are quick to answer.
Children
This site is aimed at institutions and the people who work in them. It is not directed at children and we do not knowingly collect their data.
Merchant and customer data
This is worth separating clearly, because it is the question institutions actually ask. A Box deployment is self-hosted: the engine and console run in the licensing institution's own environment, against its own database. Catalogues, orders, customers and transactions live there.
Potter does not hold that data and has no standing access to it. This privacy page covers this website only. How a deployment handles merchant and shopper data is governed by that institution and its licence agreement. The security page describes where each record sits.
Changes
If this page changes, the date at the top changes with it. If we ever add analytics, we will say so here and on the page itself before we turn it on.
Contact
Privacy questions: hello@withpotter.com.
