Trust
Privacy
Barone Media Group collects the information needed to operate this site, respond to inquiries, operate the Monday email, assess Founding City applications, protect the public endpoints, and perform authorized engagements. This notice describes those distinct uses.
Effective August 24, 2026
Who is responsible
Bruce Barone Jr. is responsible for site inquiries.
Bruce Barone Jr. operates baronehouse.com under the Barone Media Group brand from Naples, Florida and is responsible for personal information submitted through this site. A written engagement identifies its contracting party and any additional privacy obligations. Privacy questions and requests can be sent through the site's contact form.
What we collect
Information you send and limited service data.
An inquiry contains the information you choose to provide: name, email address, optional organization, inquiry type, message, acknowledgment, and the page from which the inquiry was sent. If an engagement begins, we also process the records, instructions, contacts, work product, and administrative information required for that authorized scope.
A Monday subscription contains one email address, the consent submitted with it, and provider records required to maintain the dedicated Monday segment and respect an unsubscribe or suppression. The contact properties record the consent time, source, and notice version; they do not reset an existing global unsubscribe.
A Founding City application contains organization, applicant name and receipt email, title, geography, project, decision, executive decision owner, deadline, stakes, existing plans or source-material note, consultants, requested outcome, budget path, data-access level, confidentiality level, case-study response, why a static plan is not enough, and selected engagement class. The server adds received status, source host, a content-derived record identifier, affirmative privacy acknowledgment, and notice version. Do not send protected material in the first note.
Hosting and security systems may process request metadata such as IP address, browser and device information, requested URL, timestamp, and diagnostic or security events. The contact endpoint uses a keyed, one-way token derived from the platform-provided apparent network address for a short-lived, per-server abuse limit; the token is not used to identify or profile a visitor. Generic proxy headers are ignored unless the deployment topology explicitly marks them trusted.
Do not submit passwords, financial account numbers, health information, privileged material, or other sensitive or protected records through the public form.
Browser signals
No analytics, advertising pixels, or cross-site profiles.
Barone Media Group does not install analytics tags, advertising pixels, or behavioral-advertising cookies on this site, and does not authorize cross-site behavioral profiling from site activity. Because that tracking is not performed, a browser's Do Not Track signal does not change site behavior. Hosting and delivery providers may process the limited service data described above under their own service terms; this statement does not override those disclosed provider functions.
How we use it
Respond, subscribe, assess, protect, and deliver.
We use inquiry information to deliver the message, respond, assess fit, define a possible scope, maintain an accurate record of communications, prevent abuse, and comply with applicable obligations. Engagement information is used only for the authorized work, administration of that work, security, and required recordkeeping.
Monday consent is used only to maintain and send the Monday operator cut. A project inquiry or Founding City application is not Monday consent. We do not sell personal information, rent inquiry lists, or use these submissions for third-party targeted advertising.
Resend sends the complete normalized Founding application to Bruce Barone Jr. and the exact receipt to the applicant in one content-idempotent batch. The application is used to assess qualification, prevent duplicate delivery, document disposition, and, only under a later written scope, administer an engagement.
Service providers
Hosting, records, contact segments, and message delivery.
Vercel hosts and delivers the site and may process operational and security logs. Resend delivers project inquiries, stores Monday addresses in the configured Monday-only contact segment, maintains unsubscribe or suppression state, and sends the Founding application and applicant receipt. These providers process data on our behalf under their own service and privacy terms.
Founding City fails closed unless verified email delivery is configured, and reports success only after Resend accepts both the complete application and applicant receipt. An optional connected private Vercel Blob store may add a first-write-wins archive before delivery; Production and Preview never share applicant storage. There is no public record, list, read, upload, or deletion route, and application content is never published.
We may disclose information when required by law, to protect rights or security, or with your direction.
Retention & security
Keep what is needed, then remove it.
Monday contact-segment membership is retained until the subscriber unsubscribes or asks for deletion. Provider suppression data may be retained as needed to honor an unsubscribe and prevent an unwanted resend. Use the unsubscribe control in an issue or submit a request through the contact form.
A one-off inquiry that does not become an engagement is retained for no more than 12 months after the last substantive response. A Founding application is retained while it is received or under review and for no more than 24 months after it is declined or closed, unless a longer period is required for security, dispute, legal, or accounting records. If an engagement begins, its written scope and applicable recordkeeping duties control.
Rate-limit tokens carry a short abuse-control window. Expired entries may remain in a bounded in-memory map until periodic pruning or server recycle, but they are not counted after expiry. Hosting and delivery providers retain service logs according to configured terms.
We use administrative and technical safeguards appropriate to the information and the service. No internet transmission or storage system is guaranteed to be completely secure, which is why the public form should contain only what is necessary for an initial conversation.
Public records
A public record can include named people.
Barone Media Group's public-record work may identify people, companies, property owners, applicants, officials, and other parties when they appear in an official record and the identity is material to the public subject being examined. That work uses attributable sources, distinguishes record from inference, and does not assert motive without evidence. It is separate from private inquiry data and is not covert personal tracking.
A person named in published material may request a factual correction through the contact form or the site's corrections process.
Your requests
Access, correction, or deletion.
Use the contact form to ask what inquiry information we hold about you, correct it, or request deletion. We may need to verify your identity, and a request may be limited where retention is required for security, legal, contractual, or record-integrity reasons. We will not publish the request or the email address used to make it.
Changes to this notice
The effective date identifies the current policy.
A material change will be posted on this page with an updated effective date. Where law requires additional notice for information already submitted, Barone Media Group will provide that notice through an appropriate direct or prominent site channel before the change takes effect.