Privacy, plainly.

1. Who runs this site

This site is run by Wilkin Hanaway, a filmmaker working from Asheville, North Carolina. It holds the studio’s work: the films, the writing, the tools, and The Circadian Lens. When this page says “we,” that’s the studio: Wilkin, and the few services he uses to keep the site running (section 5).

Questions, requests or complaints about your information go to admin@impactcontent.co.

2. What we collect, and why

Only what we need to do the thing you asked for.

• If you apply or send a brief (the Apply, waitlist and project-brief forms): your email, your name if you give it, whatever you write in the boxes, and the page you came from, so we know which offer you were looking at. We use it to read what you sent and reply. It’s kept in our database and passed to our automation tool, which brings it to us.
• If you sign up for The Circadian Lens: your email, a name if you give one, the time of day you want your film, and your time zone. If you sign in, we also hold your account: a one-time sign-in link, or a password if you choose to set one. We use it to send the daily reminder and keep your space.
• If you use your account: your check-ins, which are a mood number before and after, and a reflection if you write one. These are private to you unless you tick the box to share the words anonymously.
• If you write to us from The Circadian Lens: your message, plus a name and an email if you add them.
• If you give support to Visual Grammar: you pay on Stripe’s own page, and we never see your card number. The Visual Grammar tool itself runs in your browser. What you type into it isn’t uploaded or stored.
• On every visit, the usual technical bits. Like any website, our host sees your IP address, your browser and the page you asked for each time a page loads. Our spam protection also counts how often a form is sent from the same place. Those counters include your IP address and are cleared out within about a day.

Google Analytics runs only on your say-so (section 4). Everything else we collect because you asked us to do something: answer an application, send a reminder, keep an account.

3. Cookies and similar things

A cookie is a small file your browser keeps for a site. This is every cookie this site can set. The two from Google appear only if you accept analytics; the rest are needed for the thing you’re doing.

A few other things happen in your browser that aren’t cookies we set:

• A security check. The forms and the sign-in page use Cloudflare Turnstile to tell people from bots. It loads from Cloudflare when a form appears, and Cloudflare may keep short-lived technical data in your browser so the check can work. We don’t read it or use it for anything else.
• Films. Film thumbnails come from YouTube, so YouTube’s servers see your IP address when a page with films loads. The films themselves play in YouTube’s privacy-enhanced mode and only load once you press play; after that YouTube may set its own cookies. A film hosted on Vimeo works the same way, with Vimeo’s cookies.
• Fonts come from this site, not from Google Fonts.

We set no other cookies of our own, and we use no advertising, social-media or retargeting cookies or pixels.

4. Counting visits

Google Analytics 4, only if you say yes

We’d like to know which pages get read, roughly where in the world readers are, what kind of device they use, and how they arrived: a search, a link, a message. Google Analytics 4 records page views and simple actions such as scrolling and clicking a link out of the site. It sets the two Google cookies in the table, and it does not run until you press Accept. Until then, nothing is requested from Google at all.

Google Analytics 4 doesn’t log or store IP addresses. It uses the connection to guess a rough location, such as a city, and discards the address. We don’t send Google your name or email, and we’ve switched off its advertising features: no ad personalization, no Google signals. The site runs no ads, so the advertising settings stay off even after you accept analytics.

Google processes this data for us under its own terms and may handle it outside your country, including in the United States. Reports are kept for the retention period set in our Analytics account; Google’s standard options are two or fourteen months.

Changing your mind. Change your cookie choice at any time. Choosing Reject stops the tag and deletes the two Google cookies. If your browser sends a Global Privacy Control signal, we treat it as a Reject unless you press Accept yourself. You can also use Google’s opt-out add-on for your browser.

Vercel Analytics, always on, no cookies

We also use Vercel Web Analytics to count page views. It uses no cookies and builds no profile of you, so it runs whatever you choose above. Alongside page views we count a few plain steps in the application: which offer was chosen, whether an application was started, sent or failed, and, if you choose to tell us, how you found us. Those counts never include your name, your email or anything you typed.

The Circadian Lens’s own tally

Inside The Circadian Lens we keep a simple tally in our own database: a film page opened, a film played or finished, a check-in sent, a reminder signup. Each count notes the film and when it happened. It carries no name or email and sets no cookie.

5. Who helps us run the site

These services handle information on our behalf, one job each. We don’t sell your information to any of them, or to anyone.

• Vercel hosts the site and does the cookieless visit counts.
• Supabase is our database and sign-in. Your applications, account, check-ins and messages live there.
• Resend sends our email: the welcome note, the daily reminders, and the notice that tells us you wrote.
• Cloudflare runs the Turnstile security check on forms and sign-in.
• n8n, our automation tool, carries a new application from the form to us.
• Stripe takes the payment if you give support to Visual Grammar.
• Google provides Analytics, if you accept it, and YouTube for thumbnails and films. Vimeo does the same for any film hosted there.

Some of these services are based in, or process data in, the United States, so your information may travel outside your country. Pages here also link to other sites, such as Wilky’s World, the Sandbox apps and YouTube. Once you click through, you’re on their site and their rules apply.

6. What we never do

We don’t sell your data, and we don’t share it for advertising. We don’t run ads or build profiles of you. Your reflections are kept privately for you. If you explicitly tick “share these words on the page,” we may display that reflection anonymously, never with your name or email, and you can ask us to remove it at any time. You keep ownership of your words.

7. Your rights and your choices

Wherever you live, you can ask us to show you what we hold about you, give you a copy, correct it, delete it, or stop using it. Email admin@impactcontent.co and we’ll answer within the time the law gives us. We may ask you to confirm it’s you first.

In The Circadian Lens you don’t need to ask. From your account page you can download a copy of your data at any time, and you can permanently delete your account and everything tied to it: your check-ins, your words and your sign-in. To opt out of analytics, or to say yes later, use Cookie settings in the footer of any page.

• If you’re in the EU, the UK or the EEA, the GDPR also gives you the right to object to how we use your information, to ask us to restrict it, to take it with you, and to withdraw consent whenever you like (that doesn’t undo what came before). You can complain to your local data protection authority.
• If you’re in California, the CCPA gives you the right to know what we collect, to have it deleted or corrected, and to opt out of the sale or sharing of your personal information. We don’t sell or share it, and we won’t treat you differently for asking.

8. Changes and contact

When this page changes in a way that matters, the date at the top changes with it. If we ever add something that needs your consent, we’ll ask before it starts. Questions about your information? Write to admin@impactcontent.co. For the rest of the ground rules, see the Terms of Service.