Privacy Policy

Effective date: August 16, 2026

Stone Dragon Media (“we”, “us”, or “our”) operates stonedragonmedia.com. This policy explains what information we collect, how we use it, and who we share it with.

Information We Collect

Information you provide — When you submit our contact form we collect:

• Your name and email address
• Company name and project timeline (optional)
• Project details you choose to share

Information collected automatically — When you visit our site we collect standard web analytics data through Google Analytics, including pages visited, time on site, approximate geographic location (country/region), browser type, device type, and whether a contact-form submission succeeded. Form contents are not sent to Google Analytics. Analytics data is associated with a randomly assigned identifier, not your name or email.

Client Portal Accounts

Active clients have an account on our client portal (stonedragonmedia.com/login) to view their projects, invoices, and support tickets. If we set up an account for you, we collect and store:

• Your email address and a securely hashed password (we never store your password in plain text)
• Your company name, contact name, and phone number
• Project details, invoice records, and support ticket messages related to work we do for you

This information is stored in our database (Cloudflare D1) and is only accessible to Stone Dragon Media staff administering your account and, when you’re signed in, to you. We use it solely to deliver and communicate about the services we provide you — it is never sold or used for marketing to third parties.

Cookies

Our site uses cookies set by Google Analytics to distinguish visitors and aggregate usage statistics, and by hCaptcha to verify that contact form submissions are not automated. These cookies are set by third parties under their own privacy policies (see below). If you have a client portal account, signing in sets a first-party session cookie (sdm_session) that keeps you logged in — this cookie is required for the portal to function and is not used for tracking or analytics. No cookies are used for advertising or cross-site tracking by Stone Dragon Media.

Third-Party Services

We use the following services to operate this site. Each processes data under its own privacy policy:

• Google Analytics (Google LLC) — measures site usage and performance. Google Signals, ads personalization, and user-provided data collection are disabled. Data is processed under Google’s privacy terms at policies.google.com/privacy. You can opt out via Google’s opt-out browser add-on.
• Web3Forms — receives and routes contact form submissions to us by email. Form data is transmitted securely and is not retained by Web3Forms beyond delivery. See web3forms.com/privacy.
• hCaptcha (Intuition Machines, Inc.) — protects our contact form from automated submissions. hCaptcha may collect interaction data for CAPTCHA verification. See hcaptcha.com/privacy.
• Cloudflare — provides CDN, DDoS protection, DNS services, and hosts our application infrastructure and database (Cloudflare Workers and Cloudflare D1), including client portal account and project data. Cloudflare may process request metadata (IP address, headers) in transit and data at rest in our database. See cloudflare.com/privacypolicy.

How We Use Your Information

• Responding to your inquiry and discussing your project
• Delivering agreed services and communicating project updates
• Providing client portal access so you can view your projects, invoices, and support tickets, and reply to us
• Understanding how our site is used so we can improve it

We do not sell your personal information. We do not share it with third parties except the service providers listed above, or as required by law.

Data Retention

Contact form submissions are retained in email for as long as the client relationship is active and for a reasonable period afterward for business records. Google Analytics data is retained for 14 months under our account settings, after which it is automatically deleted. Client portal account data (login, company/contact details, projects, invoices, and tickets) is retained for as long as your account is active, and is permanently deleted from our database if we delete your account at your request or upon the end of our business relationship.

Your Choices

• You may request access to, correction of, or deletion of personal information you have provided by contacting us.
• If you have a client portal account, you may request that we delete it and all associated data at any time — this permanently removes your login and all projects, invoices, and tickets tied to your account.
• You may opt out of Google Analytics data collection using the Google Analytics Opt-out Browser Add-on.
• Most browsers allow you to block or delete cookies through their settings — note that blocking the sdm_session cookie will prevent you from staying signed in to the client portal.

Changes to This Policy

We may update this policy as our site evolves. The effective date at the top of this page will reflect the most recent revision.

Contact

Privacy questions or data requests can be submitted through our contact form.