Privacy policy  ·  Effective 27 August 2026

Privacy policy

How Quiet Overrun collects, uses, stores and deletes information, and the rights you have over it. Written to be read rather than skimmed past.

Summary

The short version

  • This website sets no cookies, runs no analytics, and loads no third-party scripts or fonts.
  • We collect information only when you send it to us — through the contact form or by email to hello@quietoverrun.com.
  • Client engagement material is kept in one folder per engagement on an encrypted volume created for that engagement before any client file is accepted, used only for that engagement, never committed to source control, and deleted within thirty days of delivery with written confirmation.
  • We do not sell, rent or share personal information for advertising, and we never use client data to train models.
  • You can ask us what we hold, ask for a copy, ask for corrections, or ask us to delete it.

Quiet Overrun is the operating name of Local Good Work LLC, a Pennsylvania limited liability company, which is the data controller for the purposes of this policy.

Collection

What we collect

CategoryWhat it includesWhy we have it
Contact detailsName, work email, company, phone number if you provide itTo reply to you and to manage the engagement
Message contentWhatever you write to usTo understand and answer your enquiry
Engagement materialConfiguration exports, billing summaries, redacted request samplesTo perform the analysis you asked for
Business recordsContracts, invoices, correspondenceLegal, tax and accounting obligations
Server logsIP address and request metadata, held by our hosting providerSecurity and availability of the site

What we do not collect

No cookies, no analytics or tracking pixels, no advertising identifiers, no session recording, no behavioural profiling, and no third-party fonts or scripts. We do not ask for credentials or access to your systems at any point, and we decline them if offered.

Our contact form is processed by Formspree, a US service, which receives the name, email address and message you submit. Nothing else on this site collects anything.

The site is hosted on Cloudflare Pages, which — like any host — records the requests it serves. We add nothing on top of that.

Use

How we use information

We use what you send us to reply to you, to carry out the work you engaged us for, to issue invoices and keep the records the law requires, and to keep the site secure and available.

We do not use client data to train machine learning models, and we do not use one client's material in work for another. Published methodology and reference studies are built from public research datasets. No client is named and no client's data appears in any published material without explicit written permission.

Legal bases

Where a legal basis is required, we rely on performance of a contract for engagement work, legitimate interests for replying to enquiries and securing the site, and legal obligation for tax and accounting records.

Handling

Storage, retention and deletion

Where it lives
Engagement material is kept in one folder per engagement, on an encrypted volume created for that engagement before any client file is accepted, separated from any other work. It is never committed to source control: our own tree-integrity check lists engagement files as excluded every time it runs.
Who can see it
Only those working on your engagement. We do not subcontract analysis without telling you first.
Engagement material
Deleted within thirty days of delivery, unless you ask us in writing to hold it longer. Deletion will be logged and confirmed to you in writing.
Enquiries that go nowhere
Deleted within twelve months.
Contracts and invoices
Retained for seven years to meet tax and accounting obligations.
Server logs
Retained by our hosting provider under their standard schedule, typically a matter of days.
Third parties

Who else is involved

We keep the list short deliberately. Each of these processes information on our behalf under its own terms:

ProviderRole
CloudflareHosting and content delivery for this website
Form providerDelivers contact form submissions to our inbox
Email providerBusiness email and correspondence
Accounting and paymentsInvoicing and financial records

We do not sell, rent or trade personal information, and we do not share it for advertising or cross-context behavioural purposes. Information may be disclosed where the law requires it, or to professional advisers under confidentiality.

International transfers

We operate from the United States and information is processed there. Where material originates outside the US, transfers are made under appropriate safeguards and the same retention and deletion commitments apply.

Your rights

What you can ask for

Wherever you are, you can ask us to:

  • Tell you what information we hold about you and why
  • Provide a copy of it
  • Correct anything inaccurate
  • Delete it, subject to records we are legally required to keep
  • Stop using it for a particular purpose

Ask through the contact form. We respond within thirty days, usually much sooner, and we will not treat you differently for asking.

California residents

We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act, and we have not done so in the preceding twelve months. You have rights to know, delete, correct, and to be free from discrimination for exercising them.

Children

This is a business-to-business service. We do not knowingly collect information from anyone under sixteen.

Admin

Security, changes and contact

We use encryption in transit, an encrypted volume created for each engagement before any client file is accepted, and a policy of asking for the minimum information needed to do the work. Details are on the security page. No system is perfect, but the smaller the surface, the fewer ways it fails — which is why we ask for exports rather than access.

Changes to this policy

If we change it we update the effective date at the top of this page. Material changes affecting an active engagement are communicated directly rather than left to be discovered.

Contact

Questions about this policy, or about anything we hold, go through the contact form and reach a person.