Website Privacy Notice

This notice explains how Bartlett Software LLC handles information in connection with this website — the public web pages that describe the Callout Android app. The short version: the site is a set of static files. It has no accounts, no forms, no cookies and no analytics, and we do not collect anything from you when you read it.

1. Scope of this notice

This notice covers your visit to these web pages, and nothing else. The Callout app is a separate thing with a separate document: what the app stores on your phone is described in the App Privacy Policy, which is the policy that ships inside the app and the one you agree to when you install it.

Use this table to find the document that governs the situation you care about.

Where this notice and the App Privacy Policy appear to overlap, the App Privacy Policy governs anything that happens inside the app, and this notice governs anything that happens in your browser on these pages.

2. Who is responsible

The operator of this website, and the data controller for the limited processing described below, is Bartlett Software LLC, a limited liability company in the State of North Carolina, United States. You can reach us using the details on our contact page. We are a small independent publisher and have not appointed a data protection officer; email reaches us directly.

3. What this website collects

Directly, nothing. There is no mechanism on these pages for you to give us information, and no mechanism for us to watch what you do with them. Specifically, this website has:

• no accounts, no sign-up and no sign-in;
• no forms, input fields, comment threads, search boxes or newsletter subscriptions;
• no analytics, page-view counters, heatmaps or session recording of any kind;
• no advertising, ad networks, retargeting pixels or conversion tracking;
• no cookies, and no use of browser storage such as localStorage to identify or follow you;
• no device or browser fingerprinting;
• no social media buttons, embedded videos, maps, iframes, hosted fonts or scripts loaded from a content delivery network.

Every page is plain HTML and CSS, and every image, stylesheet and script is served from this site itself. That last point matters: a single web font or analytics tag loaded from another company's server would hand your IP address to that company on every page you opened. We load none, which is why this site needs no consent banner.

The site includes one small JavaScript file. It runs entirely in your browser, only to mark the current page in the navigation and to keep the Google Play link inert until the app is published. It sends nothing anywhere and stores nothing, and every page works fully with JavaScript turned off.

4. Server logs

One thing is unavoidable. To send you a web page, a server has to receive a request from your device, and servers keep a record of the requests they answer. This website is delivered by Cloudflare, through its Cloudflare Pages hosting product, and Cloudflare's infrastructure may log, for each request:

• your IP address;
• your browser's user agent string;
• the referring URL, if your browser sends one;
• the path you requested;
• the date and time of the request.

These records exist so that pages can be delivered, so that faults can be diagnosed, and so that abuse — denial-of-service traffic, scraping, intrusion attempts — can be detected and blocked. To the extent this logging involves personal data for which we are a controller, we rely on legitimate interests, GDPR Article 6(1)(f): our interest in operating and securing a website that stays available to the people who want to read it. It is the minimum a web server needs in order to answer a request, and we put it to no other use.

We do not use these logs to build profiles. We do not analyse them for marketing, we do not measure audiences with them, we do not combine them with data from anywhere else, we do not try to identify individual visitors from them, and we do not sell or share them. In ordinary operation we do not inspect them at all.

Cloudflare carries out this logging under its own terms, and is responsible for what it records, where it is stored, and how long it is kept. We do not receive a copy of these logs, and we can neither extend nor shorten their retention. Cloudflare's Privacy Policy and Data Processing Addendum — which in turn links its current sub-processor list — describe this logging, and everything else Cloudflare does as a processor, in more detail than we can from outside the company.

5. Cookies and similar technologies

This website sets no cookies of its own, and there is no third party on it that could set one. It uses no local storage, session storage, IndexedDB or cache-based technique to recognise you on a later visit. There is therefore no cookie banner, no consent to give and no preference to manage. The Cookie Policy says the same thing at greater length, for anyone who needs the detail in writing.

Your browser may keep its own cache of pages and images you have already downloaded, as it does for any website. That is your browser's storage, under your control, and nothing about it is reported back to us.

6. Links to other websites

The page at the root of this domain links to lonestarbids.com, our other app's website. It is a separate site with its own privacy notice, and following the link tells us nothing: it is a plain link with no tracking parameters, and nothing is sent anywhere unless you click it.

Some pages on this site link out to Callout's listing on Google Play. Following such a link takes you to Google, and from that point Google's own privacy policy and terms govern what happens — including any logging, cookies or account activity on Google's side. We have no control over and no visibility into that. Nothing is sent to Google unless you choose to follow the link.

Apart from those store links and that one link to Lone Star Bids, the pages on this site link only to other pages on this site. There is no mailto: link anywhere on it: the address you would write to is published as a picture on the contact page, so that address-harvesting crawlers find nothing to lift, and following it sends nothing anywhere.

7. If you email us

If you write to us at the address shown on our contact page, we necessarily receive your email address, whatever you put in the message, and any attachment you send. We use that solely to read and answer you, and we keep the exchange only for as long as it remains useful — for instance to follow up on a problem you reported. Our lawful basis is again legitimate interests, Article 6(1)(f): responding to someone who has deliberately contacted us.

We do not add your address to a mailing list, we do not use it for marketing, and we never sell or rent it. Email to us is received and stored by Google (Gmail) under Google's own terms and retention practices. We delete correspondence from our mailbox when it is no longer needed, but copies may persist in Google's systems for a period we do not control. Please do not send us sensitive personal information; there is no reason for us to have any. Email in transit is never fully private either — worth bearing in mind when deciding what to write.

8. Your rights under the GDPR

If you are in the European Economic Area or the United Kingdom, data protection law gives you rights over personal data relating to you. They include:

• Access — to be told whether we hold personal data about you, and to receive a copy of it.
• Rectification — to have inaccurate data corrected and incomplete data completed.
• Erasure — to have data deleted where the law requires it.
• Restriction — to have processing limited while a dispute about it is resolved.
• Objection — to object to processing carried out on the basis of legitimate interests, including the logging described in section 4.
• Portability — to receive data you provided in a structured, commonly used, machine-readable format.
• Complaint — to lodge a complaint with your national supervisory authority, whatever we say in reply to you.

The practical answer will usually be a short one. Because this website holds no accounts, no profiles and no records of visitors, and because the only personal data a visit involves is the transient log data held by Cloudflare, we will in most cases respond by confirming that we hold nothing relating to you. We also cannot pick you out of a log: identifying which line belongs to you would require information we do not have and are not going to ask you for, and the GDPR does not oblige us to collect extra data purely to make identification possible. If you have emailed us, that correspondence we can find, and delete from our mailbox on request.

To exercise any right, write to us at the address on the contact page. There is no charge, and we aim to answer within one month.

9. California residents

Under the California Consumer Privacy Act as amended by the CPRA: this website does not sell personal information, and does not share it for cross-context behavioural advertising. It never has, and there is no mechanism on the site by which it could — no ad network, no analytics vendor, no third-party tag of any kind. There is consequently no "Do Not Sell or Share My Personal Information" link for us to provide.

We collect no personal information through the site beyond the internet activity information logged by Cloudflare as described in section 4, and we draw no inferences from it. California residents have rights to know, delete, correct, and limit the use of sensitive personal information; you may exercise them by writing to us at that same address, and we will not discriminate against you for doing so. As with GDPR requests, the answer will usually be that we hold nothing about you.

10. Children

This website is not directed at children. It is an information site about an app intended for people aged 13 and over, and it knowingly collects no personal information from anyone at all, children included. There is nothing here for a child to sign up for, submit or disclose. If you believe we somehow hold information about a child, contact us and we will delete it.

11. International transfers

We are based in the United States, and this website is served by Cloudflare, which operates a global network and may deliver a page to you from a server outside your country, including in the United States. A page you request may therefore be delivered — and the corresponding request logged — by a server in a country other than your own. That is a consequence of how static content is served, not a transfer of any profile or account: the only data involved is the request information described in section 4, and any international transfer of it is carried out by Cloudflare, under the safeguards described in its Data Processing Addendum, rather than by us.

12. Changes to this notice

If we change how this website works — by moving to a different host, for example, or by adding something the current version does not have — we will update this notice and change the "Last updated" date at the top. We keep no mailing list, so there is no notification to send; the date on this page is the record. Substantive changes will be written into the text rather than slipped in silently.

A change here does not change the app. The App Privacy Policy is versioned separately, ships inside the app, and the app asks you to agree again whenever it changes.

---

13. Contact

Questions about this notice, or about anything on this site, go to the same place — the address is on the contact page:

Bartlett Software LLC
North Carolina, United States
bartlettsoftwarellc.com/contact