Privacy, without the corporate fog.

This policy applies to information processed in connection with:

• The public website at https://bytheproject.com, including marketing, blog, Field Notes, contact, and legal pages
• Client Preview pages protected by a project-specific access code
• Existing private National Night Out photo-delivery links
• Communications and project materials you send directly to us

Third-party sites and services linked from our pages have their own privacy practices.

Contact and inquiry information

Our contact form collects your name, email address, optional subject, and message. The inquiry is saved in Studio by theProject. before transactional email notifications are attempted. Bot protection may send a verification token to Cloudflare Turnstile; Cloudflare does not receive the message body.

Client and project information

You may provide briefs, goals, content, brand assets, comments, or approvals during a project. Client Preview itself does not create a customer account; access is controlled by a project-specific code and a short-lived browser session.

Workshop or event information

If you contact us about a class, workshop, or event, we may collect attendance needs, scheduling details, and other information needed to respond. We do not currently operate an account-based booking product on this website.

When the site loads, hosting and analytics systems may process IP-derived location, device and browser details, referring page, requested URL, timestamps, performance data, and error information.

Client Preview may process a pseudonymous requester identifier, access attempts, and view events for security, rate limiting, and project analytics. Private National Night Out delivery may record views, downloads, expiry, and removal status without exposing the private token to analytics.

• Responding to inquiries and delivering requested services
• Providing and securing Client Preview and event-photo delivery
• Publishing approved public content through our Studio
• Sending transactional messages related to an inquiry or project
• Detecting abuse, troubleshooting failures, and improving site performance
• Meeting legal, accounting, safety, and recordkeeping obligations

Client Preview uses a secure, project-scoped session cookie after a valid access code is accepted. Theme preferences may be stored locally in your browser. Google Analytics and Vercel Analytics may measure public-site usage when enabled.

Private National Night Out token routes are excluded from Vercel Analytics, use no-store responses, and are marked not to be indexed. Sensitive query parameters are redacted before analytics events are sent.

Some public pages contain educational or interactive AI demonstrations. Do not enter confidential, regulated, or sensitive personal information into a public demo or general contact form. If a project uses an external AI provider, the applicable project agreement should identify the provider and permitted data.

Project information may be shared internally and with carefully selected service providers only as needed to perform the work. Client Preview is a presentation and approval surface; it is not a general customer portal, file manager, or user-account system.

Public editorial media, Client Preview artwork, and National Night Out photos are managed through current Studio media systems. Project Redefine does not provide general-purpose customer uploads, folders, account-to-account sharing, or reusable public download links.

National Night Out private delivery uses bearer-style QR links. Treat a private link as sensitive. Expired, invalid, removed, or unavailable links all return the same neutral unavailable experience. Removal requests stop public access while backend retention follows operational and legal requirements.

Our community programming may involve children and families. A parent, guardian, school, library, or authorized organization should manage registration and provide personal information for a minor. Children should not independently submit sensitive personal information through the website.

We may share limited information with service providers that help us operate the site and deliver work, including:

• Vercel for hosting, delivery, and analytics
• Studio by theProject. and its configured database or private media storage for content and submissions
• Resend for transactional email
• Google Analytics when measurement is enabled
• Professional advisers or authorities when legally required

We may also disclose information to protect people, investigate abuse, enforce agreements, or complete a business transaction subject to appropriate safeguards.

We do not sell personal information as a product and do not use third-party advertising pixels or cross-context behavioral advertising networks on the current site.

We retain inquiries, project records, access logs, analytics, and media only as long as reasonably needed for the purpose collected, security, contractual commitments, backups, accounting, dispute resolution, and legal obligations. Retention periods vary by record type and project agreement.

We use measures appropriate to the information involved, including HTTPS, server-only service credentials, scoped access codes and cookies, private storage, no-store controls for sensitive routes, and least-privilege administrative access. No transmission or storage method is completely secure.

We are based in the United States. Some service providers may process information in other locations under their own contractual and legal safeguards.

Depending on where you live, you may request access, correction, deletion, restriction, portability, or information about how personal data is handled. You may also object to or withdraw consent for certain processing where applicable.

Send requests to dpo@bytheproject.com. We may need to verify your identity or authority before acting.

Residents of states with applicable privacy laws may have additional rights. We do not discriminate for exercising a valid privacy right and do not sell personal information or share it for cross-context behavioral advertising.

Where these laws apply, processing may rely on performance of a contract, legitimate interests, consent, or legal obligations. You may complain to your local supervisory authority after contacting us.

The site does not currently respond differently to browser Do Not Track signals. Because we do not sell personal information or run targeted-advertising networks, Global Privacy Control does not change those practices.

Links and embedded experiences from other organizations are governed by those organizations. Review their terms before providing information.

We may update this policy as our services, vendors, or legal duties change. The date at the top identifies the current version. Material changes may receive additional notice where appropriate.

Email dpo@bytheproject.com or use the contact page.

Project Relentless Design Studio, LLC
Hellertown, Pennsylvania, United States