Privacy

Bruce Barone Jr. operates baronehouse.com under the Barone House brand from Naples, Florida and is responsible for personal information submitted through this site. A written engagement identifies its contracting party and any additional privacy obligations. Privacy questions and requests can be sent through the site's contact form.

An inquiry contains the information you choose to provide: name, email address, optional organization, inquiry type, message, acknowledgment, and the page from which the inquiry was sent. A random submission identifier prevents an unchanged retry from being delivered twice; it is not used to identify a visitor. Inquiry forms may also include the campaign attribution described below. If an engagement begins, we also process the records, instructions, contacts, work product, and administrative information required for that authorized scope.

A Desk Brief subscription contains one email address, the consent submitted with it, and provider records required to maintain the dedicated Desk Brief segment and respect an unsubscribe or suppression. The contact properties record the consent time, source, notice version, and minimized attribution submitted with the form. Only a subscription from a verified Intelligence Desk origin can retain a campaign tuple, and then only when its five UTM values and landing path exactly match a governed launch row. Other supplied UTM groups are removed. For a returning address, first-touch values remain unchanged while current-touch values may be updated. A versioned provider-side origin marker prevents a stored current UTM tuple from being reused without exact Intelligence Desk provenance; missing or non-Desk provenance clears those UTM values while retaining safe non-UTM context. The process does not reset an existing global unsubscribe.

A Founding City application contains organization, applicant name and receipt email, title, geography, project, decision, executive decision owner, deadline, stakes, existing plans or source-material note, consultants, requested outcome, budget path, data-access level, confidentiality level, case-study response, why a static plan is not enough, and selected engagement class. The server adds received status, source host, a content-derived record identifier, affirmative privacy acknowledgment, notice version, and any campaign attribution submitted with the form. Do not send protected material in the first note.

Hosting and security systems may process request metadata such as IP address, browser and device information, requested URL, timestamp, and diagnostic or security events. The contact endpoint uses a keyed, one-way token derived from the platform-provided apparent network address for a short-lived, per-server abuse limit; the token is not used to identify or profile a visitor. Generic proxy headers are ignored unless the deployment topology explicitly marks them trusted.

Do not submit passwords, financial account numbers, health information, privileged material, or other sensitive or protected records through the public form.

This site uses a versioned local-storage record for up to 90 days to retain the initial site entry and, when one occurs, the most recent external-referral touch across visits. No governed campaign asset currently lands on Barone, so this browser record does not retain URL UTM values. It is limited to the landing page path, the referring site's origin, separate first- and most-recent-touch capture times, and a record expiry time. The applicable form version is added only when a form is submitted. Full referring URLs, referring paths, referring queries, and landing-page query strings are not stored in the submitted record. Referrals among baronehouse.com, www.baronehouse.com, baronemediagroup.ai, and www.baronemediagroup.ai are treated as internal navigation and are not stored as external referrer origins. The browser record expires 90 days after first capture; invalid or expired values are discarded. Form delivery continues if local storage is unavailable.

This site includes the Vercel Web Analytics client integration. When Web Analytics is enabled for the Vercel project, it provides aggregate page-view measurement using bounded page, referrer, device, and coarse-location context. Custom measurement is restricted to a fixed list of event names for outbound navigation to Intelligence Desk or Civic Bitcoin and for start, submit, accepted, or failed states of the parent-practice inquiry, Desk Brief, and legacy Founding application forms. Those custom events carry no properties: Barone House does not pass form contents, email addresses, names, organizations, inquiry choices, messages, request or submission identifiers, destination paths, query strings, campaign terms, full destination URLs, or error text into that integration. A submit handler with a populated honeypot emits no custom event, and an ignored server receipt emits no success or failure event. The integration does not use advertising cookies or build a cross-site behavioral profile. Production measurement is considered active only after the project setting is enabled and deployed loader and event delivery are observed.

This site also includes Vercel Speed Insights for aggregate field performance signals such as loading, responsiveness, and layout stability. Barone House does not attach form contents or custom identity properties to those measurements. Field measurement is considered active only after the deployed Speed Insights client and production intake are observed.

We use inquiry information to deliver the message, respond, assess fit, define a possible scope, maintain an accurate record of communications, prevent abuse, and comply with applicable obligations. Minimized attribution is used to understand which referring site or landing route preceded a Barone submission and, for a verified Intelligence Desk subscription, which exact governed campaign row preceded it. It maintains first- and current-touch provenance and supports campaign evaluation without building a cross-site profile. Engagement information is used only for the authorized work, administration of that work, security, and required recordkeeping.

Desk Brief consent is used only to maintain the Desk Brief audience and send future issues. A project inquiry or Founding City application is not Desk Brief consent. We do not sell personal information, rent inquiry lists, or use these submissions for third-party targeted advertising.

Resend sends the complete normalized Founding application to Bruce Barone Jr. and the exact receipt to the applicant in one content-idempotent batch. The application is used to assess qualification, prevent duplicate delivery, document disposition, and, only under a later written scope, administer an engagement.

Vercel hosts and delivers the site, may process operational and security logs, and, when Web Analytics is enabled, processes the bounded aggregate measurement described above. Resend delivers project inquiries, stores Desk Brief addresses in the configured Desk Brief-only contact segment, maintains unsubscribe or suppression state, and sends the Founding application and applicant receipt. These providers process data on our behalf under their own service and privacy terms.

Founding City fails closed unless verified email delivery is configured, and reports success only after Resend accepts both the complete application and applicant receipt. An optional connected private Vercel Blob store may add a first-write-wins archive before delivery; Production and Preview never share applicant storage. There is no public record, list, read, upload, or deletion route, and application content is never published.

We may disclose information when required by law, to protect rights or security, or with your direction.

Desk Brief contact-segment membership is retained until the subscriber unsubscribes or asks for deletion. Provider suppression data may be retained as needed to honor an unsubscribe and prevent an unwanted resend. Use the unsubscribe control in an issue or submit a request through the contact form.

A one-off inquiry that does not become an engagement is retained for no more than 12 months after the last substantive response. A Founding application is retained while it is received or under review and for no more than 24 months after it is declined or closed, unless a longer period is required for security, dispute, legal, or accounting records. If an engagement begins, its written scope and applicable recordkeeping duties control.

Rate-limit tokens carry a short abuse-control window. Expired entries may remain in a bounded in-memory map until periodic pruning or server recycle, but they are not counted after expiry. Hosting and delivery providers retain service logs according to configured terms.

We use administrative and technical safeguards appropriate to the information and the service. No internet transmission or storage system is guaranteed to be completely secure, which is why the public form should contain only what is necessary for an initial conversation.

Barone House's public-record work may identify people, companies, property owners, applicants, officials, and other parties when they appear in an official record and the identity is material to the public subject being examined. That work uses attributable sources, distinguishes record from inference, and does not assert motive without evidence. It is separate from private inquiry data and is not covert personal tracking.

A person named in published material may request a factual correction through the contact form or the site's corrections process.

Use the contact form to ask what inquiry information we hold about you, correct it, or request deletion. We may need to verify your identity, and a request may be limited where retention is required for security, legal, contractual, or record-integrity reasons. We will not publish the request or the email address used to make it.

A material change will be posted on this page with an updated effective date. Where law requires additional notice for information already submitted, Barone House will provide that notice through an appropriate direct or prominent site channel before the change takes effect.