Ironwood Labs

Privacy

A straightforward explanation of how this website handles information.

Updated October 27, 2026

Browsing this website

We use self-hosted Umami analytics at analytics.researchps.com to understand which pages people visit and how they find this website. The tracker sends page addresses and titles, referring page addresses, browser language, and screen size. URL fragments and general query parameters are excluded from page and referrer addresses. A small set of approved campaign labels can identify links shared through a newsletter, directory, or business profile. These labels describe the link, not the person clicking it. The tracker respects Do Not Track and Global Privacy Control browser settings.

We also count when the services, pricing, and contact headings come into view, when someone opens a service FAQ, and when someone clicks a contact link. These events use fixed labels only, including the location of a contact link, such as the header or pricing area. They do not record what you type or show whether you sent an email or made a call.

We also measure page loading speed, responsiveness, layout movement, and the time until a performance measurement is sent. These measurements help us find technical problems; they do not tell us whether someone read a page or how they felt about it.

This setup does not use analytics cookies, advertising pixels, or form-content tracking. On Ironwood's public marketing pages, Umami stores a random identifier in your browser's local storage so visits from that browser can be viewed together. We do not derive that identifier from your name or email address, and we do not send names, email addresses, or customer account identifiers to Umami. We do not record visitor sessions or form contents. Client-resource pages are excluded from identification. The analytics server receives technical connection information, including an IP address, when your browser makes a request, and uses it to estimate country, region, and city. Server logging and analytics storage are separate from the information sent by the page.

On the public client-resource entry page, we count visits and clicks on the sign-in link. On protected client resources, we count template views, template-link clicks, and openings of source notes using fixed document labels. We do not send login email addresses or access codes to Umami. These counts do not prove that a document was read. Cloudflare Access verifies approved email addresses and records sign-in attempts separately to protect these resources.

The website’s fonts are served with the website.

Cloudflare hosts the site and processes technical request information, such as IP addresses, request times, and browser information, to deliver and protect it. A static website still involves this technical processing.

Ironwood’s detailed analytics are kept for up to 13 months. Daily database backups are kept for 28 days and may temporarily contain data removed from the live database. Server logs rotate daily with 14 rotated logs retained. Aggregate business reports may be kept longer to compare website performance over time.

Ironwood Portal accounts and website requests

Ironwood Portal lets approved clients request website changes, review previews, and record approvals. Clerk manages portal accounts and sign-in. Some protected Ironwood resources use Cloudflare Access to verify approved email addresses.

When you create an account, Clerk stores account information such as your email address, username, and any name or profile image supplied during sign-in. If you choose Google or Apple, that provider shares an account identifier and the email and profile information you authorize. Apple may supply a relay email address if you choose Hide My Email.

We use these account details to verify your identity, match you to approved practice access, manage your session, and investigate sign-in problems. Clerk and Cloudflare process technical information, including IP addresses, browser information, and sign-in events, to operate and protect the service. Sign-in and private previews use cookies to maintain access. We do not use Google or Apple account information for advertising or sell it.

Cloudflare hosts the portal and stores change requests, uploaded files, preview and approval records, and activity history. We use these records to prepare, review, and document website work. Access is limited by practice and role. Closing or archiving a request keeps its history; it does not delete the account or all records of the work.

We keep account and project records while needed to provide the service, protect accounts, meet recordkeeping obligations, or resolve questions. To ask about your information, request a correction, or request deletion, email ps@ironwoodlabs.net. We will explain if some records need to be retained.

Requests and uploads should contain business and website information only. Do not include patient names, treatment details, private clinical records, passwords, or access codes.

When you contact us

The email and phone links open your chosen email or calling application. If you get in touch, we use the contact details and information you share to respond, discuss your project, and administer our work together. Email and phone providers process those communications as part of delivering their services.

Please share business and website information only. Do not send patient names, treatment details, or private clinical records.

How information is used and kept

We do not sell inquiry information or use it for advertising audiences. Access is limited to what is needed to respond and provide the service. We keep correspondence and project records while they are needed for the relationship, accounting, or resolving questions, and review them for deletion when no longer needed.

You can ask what contact information we hold about you, request a correction, or request deletion by emailing ps@ironwoodlabs.net. We’ll explain if any records need to be retained.

Analytics for practice websites

Privacy-conscious analytics are available as part of client website care. The chosen provider, collected information, access, and retention are agreed for each practice. We do not install advertising trackers or session recordings, or collect form contents through analytics. A practice’s own privacy notice describes its specific setup.

Previous forms

The earlier Ironwood site offered business inquiry and planning forms. This version no longer accepts those submissions. Previously submitted records may still be retained in the existing restricted planning system for administering those inquiries or projects. Contact us to ask about a prior submission or request deletion.

Talk with us about your practice