Legal

Privacy policy

Last updated 3 September 2026

The short version: this website sets no cookies, runs no analytics, and has no forms. We do not build a profile of you for visiting it.

The only things that happen are the ones any web server does — and one webfont request to Google, described below.

Who this covers

This policy covers cullenandrose.com, operated by Cullen + Rose, based in Connecticut, United States. It describes what happens to data when you visit the site.

It does not cover work we do under a signed client agreement. Where we process data on behalf of a client, that processing is governed by the contract with that client, not by this page.

What we collect through this site

Nothing you type

There are no forms, no sign-ups, no search boxes and no comment fields anywhere on this site. There is nothing here to submit, so we collect nothing that way.

No cookies, no analytics

This site sets no cookies of its own and stores nothing in your browser. It runs no analytics, no tag manager, no advertising pixels and no session recording. There is nothing to consent to, which is why you are not asked.

Standard server logs

The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes the technical details of your request in order to deliver the page and to protect the site from attack and abuse. That typically includes:

We do not use this to identify you, and we do not combine it with anything else. Cloudflare acts as our hosting provider and processes it under their own terms.

Fonts served by Google

The main page loads three typefaces from Google Fonts. That request goes directly from your browser to Google's servers, which means Google receives your IP address and browser details when the fonts load. We do not receive anything from that exchange and we do not use it for any purpose. This page and our error page do not load the fonts at all.

We would rather serve the fonts ourselves, and intend to.

If you email us

Every contact route on this site is a plain mailto: link. If you write to us, your message arrives in our email like any other, and we keep it for as long as we need it to answer you and to keep a record of the conversation. We do not add you to a mailing list, and we do not have one.

What we do not do

Your rights

Depending on where you live, you may have the right to ask what personal information we hold about you, to have it corrected, to have it deleted, to object to how we use it, or to receive a copy of it. If you are in the EU or UK, those rights come from the GDPR; if you are in California, from the CCPA as amended; if you are in Connecticut, from the Connecticut Data Privacy Act.

Because this site collects so little, in most cases the honest answer to "what do you hold about me" is an email thread and nothing else. Either way, write to us and we will deal with it.

How long we keep things

Server logs are retained by our host for a limited period as part of normal operation and security monitoring. Email correspondence we keep for as long as the relationship or a legal obligation requires, and then we delete it.

Children

This site is aimed at businesses. It is not directed at children and we do not knowingly collect information from them.

Changes to this policy

If we add anything that changes the picture — analytics, a contact form, self-hosted fonts — we will update this page and change the date at the top.

Contact

Questions about this policy, or any request about your data, go to matt@cullenandrose.com.

Back to Cullen + Rose Terms of service matt@cullenandrose.com