Skip to content
AI Implementation Playbook
MenuClose

publicationprivacy

Privacy Policy

Last updated

Here is how AI Implementation Playbook ("we", "us") handles information about visitors to aiimplementationplaybook.com (the "Site").

What we collect

  • Request data. Our hosting provider processes standard request data, including IP address, browser type, the page requested and the referring address, to deliver and secure the Site.
  • First-party analytics. We wrote the small script that runs on each page, and it reports to our own server alone. It records the pages you view and their address (campaign tags such as utm_source included), the page that sent you here, your screen and window size, how far you scroll and how long the page stays in view, whether a recommendation comes into view, and the links and buttons you click, with their text, their address and where you clicked. Nothing in it comes from another company; it sets no cookies of its own and keeps nothing in your browser.
  • Browser and device type. Our server works out the browser and its version, the operating system and whether you use a desktop, mobile or tablet from the user agent your browser sends, and records only those, not the user agent.
  • Approximate location. Our server learns from our hosting provider the country, region and city your connection appears to come from, and records only that approximate location, never your IP address.

Writing to us

The contact page asks for your email address and your message, and for your name only if you want to give it. Along with those, our server records the approximate country your connection appears to come from, as our hosting provider reports it. Your IP address and user agent are not stored with the message.

We use what you send only to read it and to reply to you. We store it with a database service provider in the United States, keep it for up to 12 months and then delete it. We never use it for marketing, and we share it with no one except the service providers that store and deliver it for us.

If you want a message removed earlier, send the request through the same contact page with the email address you wrote from.

Analytics provider

Our analytics processor is PostHog, Inc. Our server sends it the events described above along with the visitor ID, the device key and the approximate location, and PostHog stores and processes them for us in the United States. It never receives your IP address, your user agent, your name or your email address.

The company we recommend as our top pick uses the same analytics account for its own website: our analytics account is shared with it, and it can see the events described here.

Links to a company we recommend, which some articles name as our top pick, go first to an address on this Site. Our server notes the click (which page it was on, where the link sat and which of that company's pages it points to) and then passes you on to that company's website. The address you land on carries a one-time click ID, your visitor ID, the name of this Site, the page you came from and a signature proving the link came from this Site, so the company can tie your visit to its website to your visits here. No visitor ID is passed when the rules under Choices and rights apply to you. Money and recommendations identifies the company and our connection to it.

Cookies

There is one cookie, and it is first-party: our server sets it on aiimplementationplaybook.com. Inside are a random visitor ID, a count of your visits, the time of your last visit and a check code that proves our server issued it. We use it to count visits and to tell returning visitors from new ones. Scripts on the page cannot read it, it travels only to this Site and only over secure connections, and it lapses 400 days after your last visit. Your browser settings let you delete it at any time.

How we recognize a device

With each event our server computes a device key: a keyed one-way hash (HMAC-SHA256) of your IP address and user agent, shortened to 32 characters. The same browser on the same connection gives the same key, so it can link visits that probably come from one device, on this Site and on other websites that share our analytics. The key cannot be turned back into your IP address or user agent, and neither of those is stored or sent to our analytics provider. Many people can share one connection, for example in an office or on a mobile network, so the key is an approximate signal, not an identity.

Children's privacy

The Site is meant for adults, and we do not knowingly collect information from children under 13.

Who we share information with

We do not sell personal information. Our hosting provider processes request data and our analytics provider processes analytics events, both on our behalf as described above. We disclose information when the law requires it. Messages sent through the contact form are stored by our database provider, also on our behalf.

Choices and rights

  • Global Privacy Control. A Global Privacy Control signal from your browser is honored: we set no cookie and clear any earlier one, compute no device key, leave the visitor ID out of links to a company we recommend, and log your page views only under an anonymous ID that is new each day and different on each site, so no visit is linked to the next.
  • Visitors in Europe, the UK and Switzerland. The same rules apply automatically when your connection appears to come from the European Union, the European Economic Area, the United Kingdom or Switzerland, or when we cannot tell where it comes from.
  • Your rights. Laws such as the California Consumer Privacy Act and the GDPR may give you rights of access, correction and deletion, depending on where you live.

Contact

To ask about your privacy or to have a message you sent us deleted, write to us through the contact form.