Plateau Strategy Solution Lab
Plateau Strategy Solution Lab
What this site collects, why, who else sees it, and how to make us stop. Last updated 12 September 2026.
We do not sell your personal information. Not to anyone, not in any form, not de-identified and not "shared for analytics".
There are no third-party analytics on this site and no advertising trackers. Visitor numbers are counted by our own server as daily totals.
We do not track your location. The visitor features that use your position, the "Use my location" button on the booking form and the walking-guide prototype, never send it to our server. In both, your browser asks OpenStreetMap directly: once to turn your position into an address, once to ask what is near you (see "Who else sees any of it"). The walking guide's trail of where you have been lives and dies on your phone. You can always type an address instead.
This is a small business, not a data business. The short version: we keep what is needed to drive you somewhere, to run driver and agent accounts, and to know roughly how many people visited. Everything below is detail on that.
| Booking a ride | Your name, email, phone, pickup and drop-off address, the date and time, how many passengers, and anything you write in the notes. We need these to send a car to the right place. |
|---|---|
| A customer account | Name, email, phone, and your password stored as a hash. An account is optional, you can book without one. |
| A driver account | Name, email, phone, your vehicle's details including the VIN, and your date of birth, which is what you sign in with. |
| An agent account | Name, email, phone, organization if you have one, and the agent code we issue you. |
| Signing a driver agreement | Your typed name, the signature you draw, the date and time, your IP address and your browser's user-agent string. The last two are kept for one reason: they are the evidence that a particular person signed a particular version, which is what makes the signature worth anything. |
| Comments and ratings on places | Whatever you type. No account is needed, so these are not connected to a name unless you put one in the text. |
| Simply visiting | A daily count of page views per page, and a one-word label for where the visit came from, "google", "direct", "reddit". Never the full address of the page you came from. |
Our server keeps one record per day: how many page views, which pages, the coarse source labels above, and how many bookings resulted. To count unique visitors it holds a random id for your browser for that day only. When the day closes, the ids are deleted and all that survives is a number.
That is a deliberate trade and it has a cost worth stating: because the ids are thrown away, we cannot go back and remove your device from a past day's number. Only today can be corrected. We think a system that cannot reconstruct who visited when is worth more than one that can be edited.
You can switch counting off for your device entirely, at /not-a-traveler. It sets a preference that stops both the visit count and the booking count for that browser.
Photo identification is optional. When the service is available, we send a photograph and the details you enter to Anthropic only after you agree. We remove embedded photo metadata before sending. The identification step does not save the photograph to our archive.
Before opening the photo picker, one permission prompt explains both identification and public sharing. Choose “Yes, continue” only if you agree to both; “Not now” cancels without sending a photograph. After you open the matching artifact, we retain a resized, metadata-free copy with that artifact, labeled as a visitor photograph. We record the permission version and publication time, not your original filename or an identity credit. Only share photographs and pictured artwork you have permission to publish, with no people or private information.
If no object matches, we keep its name, label clues or a brief description of visible details for private research. This does not publish the photograph or present an uncertain identity as a verified artifact. Artifact searches and completed stories help build the gallery. Photo and research submission limits use short-lived salted address hashes, not raw addresses.
Only these, and only for the job named:
We may also disclose information if the law requires it, or to establish or defend a legal claim, for example, producing a signed driver agreement in a dispute.
Our own hosting provider (Render) necessarily handles the traffic to this site, as any host does.
Washington's My Health My Data Act requires a separate notice about consumer health data. Ours is short:
We collect no consumer health data. We do not ask about your health, we do not infer anything about it, and we do not collect precise location information, which the Act treats as health data when it could indicate that someone sought health services.
A pickup or drop-off address you type into a booking is used to drive you and for nothing else: it is not analysed, not categorised by what is at that address, and not used to infer anything about you. We do not collect, share or sell consumer health data, and there is accordingly no list of categories to disclose, no third parties to name, and nothing for which we would need your authorization.
If that ever changes, this section changes first, and we will ask for your consent before collecting anything of the kind, not after.
Ask by writing to the address below. We will not charge you, and we will not make you create an account to ask.
Depending on where you live you may have further rights under your local law, and nothing here is meant to reduce them.
This site is not directed at children under 13 and we do not knowingly collect their information. A child can of course be a passenger on a booking made by an adult; the booking is the adult's.
If this policy changes, the date at the top changes with it. If a change means we would collect something new about you, we will ask first.
Plateau Strategy Solution Lab, Seattle, Washington.