Privacy policy

Last updated September 6, 2026

This policy explains how Hall Pass Digital LLC (“Hallpass,” “we,” or “us”) handles information through hallpassdigital.com. It covers this website and related inquiries, not the separate privacy practices of our clients or social platforms.

Contact Ryan McNeill at ryan@hallpassdigital.com, or write to Hall Pass Digital LLC, 201 W Main St, Ardmore, OK 73401, United States.

Information you give us

Our inquiry form asks for your name, email address, organization, and community. You can also provide your role, priorities, and fiscal year end. Emailing us shares your email address, message, and any attachments you send. Please avoid sending sensitive personal information.

We use this information to respond, discuss your needs, prepare proposals, and manage a business relationship. Submitting an inquiry does not subscribe you to a marketing newsletter.

The form is hosted on Vercel. Resend delivers your inquiry to our business mailbox. Our website does not keep a separate inquiry database. Email delivery services and mailbox providers process and store messages to deliver and manage our correspondence.

Information used to operate the site

Hosting and security services can process technical information such as IP addresses, request URLs, browser information, timestamps, and error or security logs. This supports page delivery, troubleshooting, and abuse prevention. The form also uses a hidden spam field and short-lived rate limiting; the application’s rate-limit record uses a hashed IP address and a ten-minute window.

Cookies and your choices

Google Analytics and embedded social content are optional. We do not load them until you choose to allow them. You can reject both and still read the site, follow direct links, and contact us. Open in any page footer to change or withdraw your choices.

Privacy preferences — local browser storage: hallpass-privacy-v1 records your analytics and social-content choices, notice version, and expiry. We use the choice for up to 180 days, then ask again. This is local storage, not a tracking cookie. If browser storage is unavailable or cleared, your choice may not persist.
Google Analytics — optional cookies: When allowed, Google Analytics uses cookies such as _ga and _ga_2H3HTXQV23 to distinguish visits and measure site use. Our tag sets a 180-day cookie lifetime without extending it on each visit. Browser settings may shorten this period. We measure page visits and interactions such as inquiry submissions, email-link clicks, and PDF downloads.
Embedded social content — optional third-party storage: When allowed, Instagram and Facebook may use their own cookies and similar technologies. Names and lifetimes depend on the content, your platform account, and browser. Meta’s policy explains these technologies; Hallpass does not set their retention periods.

We configure Analytics without Google Signals or advertising personalization. Our own measurement code excludes form values and removes URL query strings and fragments from the page addresses it sends. Google processes technical and usage data, including approximate location derived from an IP address, under its policies. Read how Google uses information from sites that use its services and Google’s privacy policy.

Withdrawing analytics permission removes the Analytics cookies that our site can access and reloads the page to stop the tag. Withdrawing social-content permission removes the embeds. Withdrawal does not recall information already received by providers or delete cookies belonging to other domains; you can manage those through your browser and provider account settings.

When your browser sends Global Privacy Control, we keep optional analytics and social embeds off. Older “Do Not Track” signals do not have a separate response here; our default remains to block these optional services until permission is given. Choices apply to this browser, not automatically to your other devices.

Some work examples use Instagram or Facebook embeds. Loading them connects your browser to Meta, which may receive your IP address, browser details, and interactions and associate activity with an account where applicable. Read Meta’s privacy policy and cookie policy. You can use the direct links instead. Visiting an external link takes you to a service governed by its own policies.

Fonts and portfolio images are served from our website. They do not require a Google Fonts request.

Who receives information

We use service providers for hosting and security (Vercel), inquiry email delivery (Resend), business email, and optional measurement (Google Analytics). Meta receives information when you allow its embeds. We may also disclose information when required by law or reasonably necessary to protect rights, investigate misuse, or obtain professional advice.

We do not use this website to sell personal information, run behavioral advertising, or create advertising audiences. Third-party services have their own processing practices. See Vercel’s privacy policy and Resend’s privacy policy.

Retention and security

Our retention policy for unsuccessful inquiries is to delete them within 12 months after the last meaningful contact, unless we need the record for an active discussion, client relationship, legal obligation, or dispute. Client, contractual, and accounting records follow the applicable business and legal requirements. Mailbox retention requires periodic review; it is not an automatic deletion performed by this website.

Our Google Analytics property is configured to retain event-level data for two months and user-level data for 14 months, without restarting the user-retention period on new activity. These settings do not delete most aggregated standard reports. Provider logs and backups follow the relevant service settings and retention practices; cookie expiry is not the same as deletion of provider-held data. We restrict access to information needed for the work and use HTTPS and protected service credentials. No storage or transmission system can be guaranteed completely secure.

International processing and legal grounds

Hallpass is a United States business. Our providers may process information in the United States and other countries, where protections may differ from those where you live.

Where applicable data-protection law requires a legal basis, we rely on your consent for optional analytics and social embeds; steps requested before a contract or performance of a contract for relevant business discussions; legitimate interests in responding to inquiries and operating and securing the site; and legal obligations where they apply.

Requests and privacy rights

Email ryan@hallpassdigital.com with “Privacy request” in the subject to ask about your information, request access, correction, or deletion, or raise a concern. Depending on applicable law, you may also have rights to portability, restriction, objection, withdrawal of consent, or an appeal of a request decision. You may complain to your local data-protection authority where that right applies.

We may need to verify your identity before fulfilling a request. Please do not send identity documents unless we specifically arrange a necessary, appropriate verification method. We will respond within applicable legal time limits and explain any lawful reason a request cannot be fully fulfilled. Exercising privacy rights does not affect your ability to inquire about our services.

Children and policy updates

This is a business-services website intended for adults. It is not directed to children under 13. If you believe a child has sent us personal information, contact us so we can address it.

We will update this page when our practices change and show the revision date above. If we introduce a new optional purpose, we will request an appropriate new choice before enabling it.