Privacy

Who we are

jonathanarvay.com is Jonathan Arvay's website business. Write to jonathan@jonathanarvay.com about anything on this page.

Visit counts, and Google Analytics with your consent

When a page loads, your browser sends a short note to AXIS Launch's first-party analytics, the same system AXIS Launch uses for its own pages. It records the page, the site that sent you, campaign tags in the link, the country Cloudflare reports, whether you are on a phone, tablet or computer, and a visitor value that changes every day, so a visitor can be counted once a day but not followed from one day to the next. It never stores your IP address or anything you type.

• Under the same switches, Cloudflare's own cookieless Web Analytics script measures how fast the page loaded for you and records the page's address and the site that sent you; Cloudflare processes your IP address to do it and does not give it to us. Nothing identifies you, and no cookie is set.
• Nothing is counted, and that script never loads, from a browser that sends Global Privacy Control or Do Not Track.
• You can turn counting off in this browser with Privacy choices.
• How long the counts are kept is set out in AXIS Launch's privacy policy.

Google Analytics, only with your yes (from 11 October 2026). When a page opens, and your browser sends no privacy signal and counting is on under Privacy choices, the page loads Cloudflare Zaraz from this site's own address. It sets one cookie, cf_zaraz_client, so one browser's visits can be told from another's, and asks you once, in a box, whether Google Analytics 4 may count your visit; your answer is kept in a second cookie, cf_consent. If you allow it, Google Analytics keeps two cookies of its own (cfz_google-analytics_v4, an identifier for your browser, for a year; cfzs_google-analytics_v4, a session marker until you close the browser), and Zaraz runs the measurement on Cloudflare's servers and passes it to Google: the page's address and title, the site that sent you, the kind of device and browser, an identifier that tells your browser's visits apart from others', your IP address (which Google uses to estimate your region and does not store), and the one result we count, a project form sent. No Google script loads in your browser. Say no and none of it is measured; the loader and its box never appear in a browser that sends Global Privacy Control or Do Not Track, or when counting is off under Privacy choices. Google keeps what it holds about your visits for 14 months. The Manage consent button under Privacy choices opens the box again, and turning counting off there answers it "no". All four cookies last a year at most and are sent only to this site.

The AXIS Launch newsletter

The newsletter forms on this site send your address straight to AXIS Launch, labelled as coming from jonathanarvay.com. AXIS Launch emails you a confirmation link and sends nothing else until you click it, and every email has a one-click unsubscribe. AXIS Launch's privacy policy covers the list, and you can ask AXIS Launch to show or delete your data.

The project forms

The forms on Get listed and Build for equity, and the builder waitlist on Services, send what you enter (your name, email address, what you want built and your message, or for the waitlist just your address) and the country Cloudflare reports to jonathan@jonathanarvay.com, through the email service Resend. This site does not store what you send. It stays in that inbox as correspondence; email us to have it deleted.

So the forms cannot be sent over and over, each send is counted against your network address for an hour. The address itself is not kept: only a one-way code made from it with a secret key, stored in AXIS Launch's database and deleted within two days.

The forms also run Cloudflare Turnstile (from 11 October 2026), a check that the sender is a browser and not a script. It loads from Cloudflare's challenge domain, runs small puzzles in your browser, and sends Cloudflare technical signals about the browser and your IP address to decide; it never reads what you typed, and it sets no cookie on this site. A form sent without passing it is refused, which is why the forms need JavaScript.

Rating a project with us

When we hand over a project, we may send the client one email, or one link, that asks "How was your experience?". Only people we built for get it, once per project, and nothing is offered for a rating. Tapping a star, in the email or on the page it opens, stores the rating (1 to 5 stars), which project it is for, whether it was tapped in the email or on the page, and when, in AXIS Launch's database. Tapping another star replaces it. The link is signed so no one else can rate your project, and it stops working after 60 days.

• Every rating is offered the same link to write a public review on Google or Trustpilot. What you write there is published by them, under their terms and privacy policies; we never see your account.
• A rating of 1 to 3 stars is also offered a private note. What you write goes to jonathan@jonathanarvay.com through Resend and is stored with the rating. The note runs the same Cloudflare Turnstile check as the project forms, and the same hourly limit on sends, counted the same way.
• The ratings carry no one's name or address and are kept. The notes are deleted after two years; email us to have yours deleted sooner.
• The rating pages count no visits and load no analytics, Google Analytics included. Once a rating page is open, the signed link sits in the part of its address that your browser never sends anywhere.

Stored in your browser

Your browser remembers, on your own device, when you closed or used the newsletter box and whether you turned visit counting off, so the site does not keep asking. Neither is sent to us. The only cookies are the measurement loader's and, after you allow Google Analytics, its two, all named above.

Ads and other companies

The ads on this site are for sites we built, and they are plain links: no advertising network runs here, and the one measurement tag, Google Analytics, runs through Cloudflare only with your consent (above). The links carry campaign tags so the site at the other end can see the visit came from here. Fonts load from Google Fonts, so your browser contacts Google for them. Cloudflare hosts the site and handles every request.