Privacy & cookie policy.

This page describes our current practices in plain language. It is written to be accurate and useful, not to be legal advice; if you operate under a specific regulatory regime, confirm it against your own counsel.

01Who we are

The Internet Ninja (“TIN”, “we”) operates theinternetninja.com, a verified-proof platform for process-automation and AI-led-ops case studies. For any privacy question, reach us at dojo@theinternetninja.com.

02What we collect

• Usage analytics, if you consent, we use Google Tag Manager (and the analytics/marketing tags configured within it) to understand how the site is used. These may set cookies and process identifiers such as your IP address and device/browser information. Nothing analytics-related runs before you allow it.
• Form submissions, if you use the “Work with us” form or the “Submit a project” form, we collect what you enter. Section 03 below sets out exactly what, why, where it is kept and for how long.
• Necessary technical data, basic information your browser sends on every request (and cookies strictly needed for security and core function). This is always active and does not require consent.

03Contact and work-with-us forms

The “Work with us” form (on the about page and under every study) and the “Submit a project” form on the agencies page work the same way.

• What we collect: your name, work email and company, what you want from us, your message if you write one, and, for a project submission, the provider, client and outcome details you enter. We also record the page the form was on and any campaign tags in its address (the utm_ parameters, for example that you arrived from a LinkedIn post), so we know which work brought you.
• Why: to reply to you and, if you ask, to scope a study or begin verification. We do not sell or share it, and it never appears on the site, in a study, in a case file or in a report.
• Follow-up emails, only if you tick the box: the “Work with us” form has an unticked box, “Send me a few follow-up emails with our research”. If you tick it, our receipt first asks you to confirm with one click; nothing more is sent unless you do, and the link lapses after 7 days. Once you confirm, we send at most five short emails over about six weeks, on weekdays, from our own mailbox, and we record what you confirmed and when. The receipt itself never repeats what was typed into the form. The sequence stops for good the moment you reply, the moment we start talking to you directly, or when you click the one-click unsubscribe link in any of them. If you do not tick it, you get our reply and nothing else. Project submissions on the agencies page never receive follow-ups.
• Where it is stored: in our private lead database (hosted by Supabase, EU region), readable only by us. A copy goes to our dojo inbox by email (sent from our own mailbox, hosted by Hostinger), you get a receipt, and we get a short notification in our private Slack.
• How long: 24 months from the day you send it, then deleted, unless you became a client, in which case it is kept as part of that client record. You can ask us to delete it sooner at any time.
• Spam protection: the forms carry a hidden field that only automated bots fill in, and limit how often one address can submit. Submissions caught this way are stored, marked as spam, and deleted on the same 24-month schedule.

04Cookies & consent

On your first visit we ask for consent across three categories: Necessary (always on), Analytics, and Marketing. Until you choose, non-essential cookies and tags stay switched off (we use Google Consent Mode, so tags default to “denied”). You can change or withdraw your choice at any time via the Cookie preferences link in the footer.

05Why we’re allowed to (legal basis)

• Consent, for analytics and marketing cookies/tags, and for follow-up emails if you tick that box on the form. You give it freely and can withdraw it just as easily.
• Legitimate interest / taking steps at your request, for handling a project submission you send us and replying to it.

06Who we share it with

We don’t sell your data. Analytics data is processed by Google as our provider under your consent. Form submissions are processed by the providers named in section 03 (Supabase for storage, Hostinger for our mailbox, Slack for our own notification), each acting only on our instructions. We disclose data only where legally required.

07How long we keep it

Form submissions are kept for 24 months, then deleted unless you became a client (section 03). Analytics retention follows the configured provider settings. You can ask us to delete your data sooner.

08Your rights

Depending on where you live (including the EU/EEA under GDPR), you can request access to your data, correction, deletion, restriction, or portability, and you can object to processing or withdraw consent. To exercise any of these, email dojo@theinternetninja.com. You also have the right to complain to your local data-protection authority.

09Changes

If we change how we handle data, we’ll update this page and its “last updated” date. Material changes affecting consent will re-prompt the banner.