Privacy Policy

Last updated November 12, 2026.

This policy explains what information Psycray Corp ("Psycray," "we," "us") collects when you visit psycray.com, contact us, or use the tools on our site, how we use it, and the choices you have. Questions: [email protected].

The short version

We collect what you send us (for example, through our contact and site-evaluation forms) and use it to reply and to work with you.
With your consent, or for US visitors until you turn it off, we use Google Analytics and Microsoft Clarity to understand how the site is used. We never send them what you type into our forms or our site search.
We don’t sell your personal information, we don’t share it for advertising, and our site has no advertising tracking.
You can change your analytics choice at any time with Cookie settings in the footer. We honor the Global Privacy Control browser signal.
You can ask us to see, correct, or delete your information by emailing [email protected].

1. Information you give us

Contact form: your name, company, work email, phone (optional), what you’d like help with, and your message.
Free site evaluation form: your website address, name, email, phone (optional), job title (optional), and any keywords and competitor websites you list.
Email: anything you send to us directly, including internship applications sent to [email protected].
Chat assistant (when available on the site): the messages you type to it. See section 4.

If you tick “Send me a copy” on a form, we email a copy of your submission to the address you entered. Please don’t send us sensitive information (such as health, financial account, or government ID details) through our forms, email, or chat.

2. Information collected automatically

Server and security logs. Like any website, our hosting provider records technical details of each request, such as IP address, browser type, the page requested, and the time. We use these to run and secure the site.

Approximate location. When you first visit, our site reads the country your connection comes from (provided by our hosting network) only to decide which analytics default applies to you. We don’t store it. We don’t collect precise location.

Spam and abuse protection. Cloudflare, which delivers our site, screens requests for attacks and abuse, and our forms use Cloudflare Turnstile to tell people apart from automated spam. To do this, Cloudflare processes your IP address and technical details about your browser and device. It doesn’t use them for advertising.

Analytics (only with your consent, or for US visitors until you turn it off). We use Google Analytics and Microsoft Clarity, loaded through Google Tag Manager, to understand which pages are useful and where the site is confusing. They may collect pages viewed, links and buttons clicked, scrolling and mouse movement, time on page, referring website, device and browser details, and approximate location derived from your IP address. Microsoft Clarity also creates session recordings and heatmaps of how pages are used; it masks text you type. We also record a few site events, such as “contact button clicked,” “form started,” “form submitted,” and “search opened.” These events never include the contents of form fields, email addresses, phone numbers, messages, or search terms.

Site search runs in your browser. What you type into it isn’t sent to us or to anyone else.

3. Cookies and your analytics choice

When you first visit, a banner asks about analytics. Visitors in the United States start with analytics on and can turn it off; everyone else starts with analytics off until they allow it. If your browser sends a Global Privacy Control signal, you start with analytics off wherever you are. You can change your choice at any time with Cookie settings in the site footer. Advertising storage is always off.

What we store in your browser

psycray_consent (necessary): remembers your analytics choice for 182 days, after which we ask again. Some browsers, including Safari, may delete it sooner.
_ga, _ga_* (analytics, Google Analytics): distinguish visits and visitors; kept up to 2 years. Set only when analytics is on.
_clck, _clsk (analytics, Microsoft Clarity): connect page views within a visit and across visits; kept up to 1 year and 1 day respectively. Set only when analytics is on.
cf_clearance and similar Cloudflare cookies (necessary): show that your browser passed a Cloudflare security check, so you aren’t checked again right away; short-lived (about 30 minutes by default).
A session-only flag (necessary): remembers that an animation on our homepage has already played during this visit. It’s deleted when you close your browser.

If you sign in to our content management system (Psycray staff only), we also use sign-in and two-factor authentication cookies.

4. Chat assistant

When our chat assistant is available, the messages you send it are processed by OpenAI, acting as our service provider, to generate replies. We keep chat transcripts for 3 months, then delete them. Under OpenAI’s API terms, data sent through its API isn’t used to train its models by default and may be kept by OpenAI for up to 30 days to monitor for abuse. Please don’t share sensitive personal information in the chat.

5. How we use your information

To reply to your inquiry and provide the information, evaluation, or services you asked for.
To send you a copy of your form submission, if you asked for one.
To understand and improve our site and content (analytics, with your consent or until you opt out).
To keep the site and our systems secure, and to prevent fraud and abuse.
To comply with the law and enforce our terms.

If you ever receive marketing email from us, every message includes an unsubscribe link, or you can email [email protected].

We share personal information only with service providers that help us run the site and our business, under contracts that limit how they use it:

Website hosting and database: RackNerd (our servers) and Cloudflare (content delivery, security, and spam protection on our forms).
Email delivery: Resend, which sends form notifications to our team and any copy you requested.
Analytics: Google (Google Analytics and Google Tag Manager) and Microsoft (Clarity), only when analytics is on.
Chat assistant: OpenAI, when the chat assistant is available.

We may also disclose information if required by law or to protect our rights, and in connection with a merger, acquisition, or sale of all or part of our business. We have not sold or “shared” (as California law defines it, for cross-context behavioral advertising) personal information in the past 12 months, and we don’t intend to.

7. How long we keep it

Form submissions and email: kept as business records for as long as they’re useful to our relationship with you, unless you ask us to delete them (see section 10).
Chat assistant transcripts: 3 months.
Your analytics choice: 182 days.
Analytics data: Google Analytics keeps event data for 14 months; Microsoft Clarity keeps session recordings for 30 days and heatmap data for up to 13 months.
Security logs for our content management system: 12 months.

8. How we protect it

The site is served only over encrypted connections (HTTPS). Access to our content management system is limited by role, requires two-factor authentication, and is logged. No method of transmission or storage is completely secure, so we can’t guarantee absolute security.

9. Children

Our site is for businesses and isn’t directed to anyone under 18. We don’t knowingly collect information from children. If you believe a child has sent us information, contact [email protected] and we’ll delete it.

10. Your rights and choices

Depending on where you live, you may have the right to know what personal information we hold about you and get a copy, to correct it, to delete it, to object to or restrict certain uses, and to withdraw consent. You also have the right not to be treated differently for using these rights.

How to ask: email [email protected] or use our contact page at psycray.com/contact. We’ll confirm your identity before acting on a request, using only the information needed to do so. You can use an authorized agent; we’ll ask for proof of their authority. If we decline a request, you can appeal by replying to our decision or emailing [email protected], and we’ll respond in writing. If your appeal is denied, you may contact your state attorney general.

US state residents (including California, Colorado, Connecticut, Virginia, Texas, Oregon, and other states with privacy laws): in the past 12 months we have collected identifiers (such as name, email, phone, and IP address), professional information (such as company and job title), and, with consent or until you opt out, internet activity on our site (such as pages viewed and session recordings). We have not collected sensitive personal information, and we don’t sell or share personal information for targeted advertising.

Visitors in the EU, UK, and Switzerland: we rely on your consent for analytics, on taking steps at your request before a contract for replying to inquiries, and on our legitimate interests in running and securing our site. You can withdraw consent at any time without affecting earlier processing, and you may complain to your local data protection authority. We’re based in the United States, so your information is processed there.

Canada: you may access and correct your personal information and withdraw consent as described above.

11. Do Not Track and Global Privacy Control

We honor the Global Privacy Control (GPC) signal: if your browser sends it, analytics starts off for you. Because there’s no common standard for the older “Do Not Track” signal, we don’t respond to it separately.

12. Changes to this policy

We’ll update this page when our practices change and revise the date at the top. If a change is significant, we’ll make that clear on the site.

13. Contact us

Psycray Corp, 307 N Michigan Ave, Suite 409, Chicago, IL 60601, United States. Email: [email protected].