Privacy Policy

Effective date: October 29, 2026

The short version: we collect what we need to answer you and to see how the site gets used. We don’t sell it, and we don’t use it for advertising.

Who we are

The Path Collective runs this website, thepathcollective.com. If you have a question about this policy or about your information, email us at hello@thepathcollective.com.

When you contact us

Our contact form asks for your first name, your email address, and your message. If you like, you can also tell us your company, your phone number, and how you heard about us.

When you send it, we also record your IP address and your browser’s user agent (a line of text that names your browser and device). We use those only to spot and stop spam and abuse, like a flood of messages from one connection.

If analytics is on for your visit (see below), the form also passes along how you found the site: the first page you landed on, the name of the website that sent you (like google.com) and any campaign tags in the link you followed. That goes in the email to our team so we know what’s working. We don’t save it in our database.

Your message is saved in our database, which runs on Supabase. We use Resend to email it to our team and to send you a note saying we got it. We use what you send to reply to you and to talk about your project.

Analytics and cookies

We use Google Analytics 4 to see which pages people visit, how they found the site, and which buttons they use. It’s how we learn what’s useful and what isn’t.

Google Analytics sets two cookies, _ga and _ga_<id> (the second ends in our site’s ID), so it can tell when the same browser comes back. It doesn’t tell us who you are. We never send it your name, email address, phone number, or message, and it never runs on our client portal.

We’ve switched off Google’s advertising features, including Google Signals and ad personalization. Google Analytics keeps the details of each visit for 14 months.

Visitors from the EU and the rest of the European Economic Area, the UK, Switzerland, the Channel Islands, the Isle of Man, and Gibraltar see a banner first, and so does anyone whose location we can’t tell. For them, Google Analytics loads only if they choose Accept. Everywhere else it loads unless you turn it off. If your browser sends a Global Privacy Control signal, we take that as a no, wherever you are, and don’t load it, unless you choose Accept yourself in Cookie settings.

You can change your mind any time with Cookie settings at the bottom of every page. Choose Decline and we stop Google Analytics and delete its cookies from this site.

Google explains what it does with this information at policies.google.com/technologies/partner-sites.

A few small notes also stay in your browser:

your analytics choice, so we don’t ask again;
in the client portal, the emoji you’ve used recently;
for the current visit only: whether you’ve seen the animation on our home page, whether your region needs the banner, whether we’ve already counted your newsletter confirmation, and, if analytics is on, how you arrived (which leaves your browser only if you send us a message);
if you enter a passcode to see our additional work, a cookie that keeps that section open for up to an hour and goes away when you close your browser.

If you sign up for our newsletter, your email address goes to Kit, the service we use to send it. Kit also notes the page you signed up on, any campaign tags in its address, and when you signed up and confirmed. First you’ll get an email asking you to confirm, and nothing else arrives until you do. Every newsletter has an unsubscribe link, and you can leave whenever you like.

To stop people abusing the signup form, we keep a scrambled (hashed) copy of the email address and IP address behind each signup attempt, and delete them after 30 days.

Our client portal

If we invite you to our client portal, we keep your name, your email address, and your password (stored scrambled, so nobody can read it, us included), along with the messages, files, and updates shared there and a record of activity, such as approvals and file downloads. Only people in your organization and our team can see your projects. Cookies keep you signed in, and we use Resend to email you invitations, password reset links and notifications.

Hosting

The site is hosted by Vercel. Like any web host, it handles the technical details of each visit, such as your IP address, your browser, and the page you asked for, to deliver the site and protect it from attacks. It keeps those logs for a short time.

Pictures in our articles load from Supabase, which receives your IP address and browser details when a picture loads.

We don’t sell your information

We don’t sell your personal information, and we don’t share it for advertising. The companies named here (Supabase, Resend, Google, Kit, and Vercel) handle it to run their services for us. We’d also share it if the law required us to.

Your choices

Analytics: use Cookie settings at the bottom of any page, or turn on Global Privacy Control in your browser.
Newsletter: use the unsubscribe link in any newsletter.
Your information: email hello@thepathcollective.com to ask for a copy of what we hold about you, to correct it, or to have it deleted.

If you’re in the EU, the UK, or Switzerland, you can also object to how we use your information, and you can complain to your local data protection authority.

How long we keep it

Contact form messages: until we no longer need them for the conversation or the work that follows, or until you ask us to delete them.
The IP address and user agent saved with a message: 90 days, then they’re deleted automatically.
Google Analytics visit details: 14 months.
Newsletter: while you’re subscribed. If you unsubscribe, Kit keeps your address marked as unsubscribed so you aren’t emailed again, until you ask us to delete it.

Children

This site is for businesses, not children. We don’t knowingly collect information from anyone under 16. If you think a child has sent us something, email us and we’ll delete it.

Changes to this policy

If we change this policy, we’ll post the new version on this page and update the effective date at the top.

Contact us

Questions about any of this? Email us at hello@thepathcollective.com.