Privacy.
This page describes what clarion.studio collects, what happens to it, and who else is involved. It covers the website and the read-only endpoint for AI assistants at https://clarion.studio/mcp.
Who is responsible.
Clarion Studio is a single-principal studio in Lynden, Washington. I am Mark Nelson, the founder, and I am the person who answers privacy questions.
Mark Nelson, Clarion Studio, Lynden, Washington
mark@clarion.studio
(360) 223-6989
What the website collects.
Analytics
Most pages on clarion.studio load two measurement scripts:
- Google Analytics 4 (measurement ID
G-CNEDPH3WPE), run by Google. - Microsoft Clarity (project ID
w7mszu6vs3), run by Microsoft.
Google Analytics reports which pages are visited, roughly where visitors are, and what kind of device and browser they use. Clarity records how a visit unfolds on the page, such as clicks, scrolling and pointer movement, so a visit can be replayed. Both services receive your IP address as part of the request your browser makes to them, and both set cookies in your browser.
The site does not show a cookie banner and does not ask for consent before these scripts load. I use the reports to see which pages are read and where the site is hard to use. I do not use them for advertising.
Before the analytics scripts load, the page asks this site whether the visit comes from a cloud data center rather than a home or office network, so that automated traffic is not counted. The answer comes from Cloudflare’s routing information about the connection, nothing is stored, and the page loads either way.
Google Analytics keeps this data for the retention period set in the property, which Google limits to fourteen months at most. Clarity keeps recordings under Microsoft’s own retention rules. I use Clarity to see where a page is confusing, not to identify anyone.
The contact form
The form on the contact page asks for four things:
- your name (required)
- your practice or firm
- a message about what you are building or rebuilding
- the best way to reach you, which is whatever email address or phone number you choose to type
When you press Send, the form posts those four fields to /api/contact, a function that runs on Cloudflare as part of this site. That function forwards the message to a Google Apps Script handler, which delivers it to me. I use what you send to reply to you and, if we go on to work together, to run the engagement.
If you arrive at the contact page from the self-assessment in the research report, the message box is filled in with your score. You can edit or delete that text before you send.
The handler adds each message to a private Google Sheet and sends me an email notice of it. I keep messages for as long as I need them to answer you and, if we work together, to keep a record of the engagement. Ask and I will delete yours.
The email sign-up
Some pages carry a short form with one field, your email address, and a button marked "Notify me". It posts the address to the same /api/contact function, marked as a sign-up. I use the address to tell you when new research or writing is published.
Sign-up addresses are kept in the same private Google Sheet and used for nothing else. To stop the notices, write to mark@clarion.studio and I will remove your address.
Email and phone
If you write to mark@clarion.studio or call, I have whatever you tell me, and I use it to answer you.
What the agent endpoint collects.
Clarion Studio's agent endpoint at https://clarion.studio/mcp lets AI assistants such as Claude and ChatGPT read facts already published on this site. It needs no account and no sign-in, and it sets no cookies.
What it receives
Your assistant sends a short request naming one of eight tools. Five tools take no input. Three take one short piece of text: a topic word (up to 80 characters), search words (up to 200 characters), or a document ID (up to 200 characters). The endpoint uses that text to find the matching published item, sends it back, and does not save it.
The endpoint does not ask for your name, email address, phone number or location, and it does not receive your conversation with the assistant. Your assistant decides what to send. Please do not put personal details in a request to it.
What it logs
Each request writes one line to the Cloudflare function log. The line contains:
- the time of the request
- the HTTP method and the MCP method names in the request (for example
tools/call) - the name of the tool called, if any
- the HTTP status of the response
- how long the response took, in milliseconds
- the first 120 characters of the user agent, which is the name the calling software gives itself
- the Cloudflare ray ID, a reference number Cloudflare gives each request
- if the server fails internally, the text of the server's own error message
The line does not contain your IP address, the words you searched for, the tool arguments, or anything else from the body of the request.
Your IP address
Every request on the internet carries the IP address it came from. To stop one source from flooding the endpoint, the code counts requests per IP address and refuses more than 300 in one minute. That count lives only in the working memory of the running function. It is not written to the log or to any storage, and it is lost when Cloudflare restarts the function.
How long the log is kept
I read the log as a live stream while I am watching it. Clarion Studio does not save copies. Cloudflare may keep its own short-lived operational logs under its privacy policy.
Who else receives data.
- Cloudflare hosts the site, the contact function and the agent endpoint. It receives every request, including the IP address, in order to deliver and protect the site. Cloudflare's privacy policy.
- Google runs Google Analytics and the Apps Script handler that carries contact form messages. Google's privacy policy.
- Microsoft runs Clarity. Microsoft's privacy statement.
- Your AI assistant's provider, for example Anthropic or OpenAI, handles your conversation under its own policy. The endpoint sees only the tool requests the assistant sends to it.
I do not sell or rent personal information, and I do not share it with anyone else for their own use.
Your choices.
- You can block the analytics scripts with your browser's privacy settings or a content blocker, and the site will still work. Google also offers a browser add-on that opts out of Google Analytics.
- You can skip the form and write or call instead.
- You can ask me what I hold about you, ask me to correct it, or ask me to delete it. Write to mark@clarion.studio and I will answer personally.
The agent endpoint stores nothing that identifies you, so there is nothing from it to look up or delete.
Children.
This site is written for professionals and their firms. It is not directed at children, and I do not knowingly collect information from them.
Changes.
If what the site or the endpoint collects changes, I will update this page and its effective date before the change goes live.