Privacy and cookies
What this site records, and why.
This page explains what this website records about visits, why, who helps us do it, and the choices you have. In short: we count visits without cookies and without keeping your internet address. Anything more happens only if you say yes, and you can change your mind at any time.
Who we are
This website is run by 8Levers Inc., a Canadian company based in Toronto, which is responsible for the data described here (in European terms, its controller). 8Levers is run by Lori Niles-Hofmann and Josh Squires. For anything on this page, write to lori@8levers.com or josh@8levers.com.
We follow Canada's privacy law for everyone, and the European Union's and the United Kingdom's data protection rules for visitors there.
What we count for every visit, without cookies
To see which pages help people and which do not, we count visits. We do not place anything on your device to do this, and we do not read anything from it beyond how you use this page. For each page you open, we record:
- the page, and the website or campaign link that sent you here (the website's address only, not the page);
- your country, and whether you are on a phone, tablet or computer, with its browser and operating system, which we take from the request your browser sends;
- the name of the network the visit comes from, as worked out from your internet address at the moment of the visit. For many people at work this is their employer's name; at home or on a phone it is usually the internet provider's. We use it to see which organisations read the site, not to identify anyone;
- how far you scroll, which parts of the page you reach, how long you stay, and whether you use the menu, the motion switch, links to other sites, or the button to book a time with us;
- how quickly the page showed its main picture, how much it moved while you read, and how quickly it answered a tap, as your browser measured it. These carry no identifier at all.
If you open the booking page, we also record which step of booking you reach and the topic you chose. We never record your name, your email address or the times you pick.
We do not keep your internet address. To count a visitor once a day, we keep a scrambled form of it, made with a random key that exists for that day only. Every night the old key is destroyed, after which nobody, us included, can turn the scrambled form back into an address or link it to another day. The same daily key scrambles the name of your browser and device type, which we use together with the scrambled address to group one visit's page views into a single visit.
We do this on the basis of our legitimate interest in knowing how our own website is used, so we can improve it. We have kept it to what that needs: no cookies, no tracking across other websites, no advertising, no profiles of individuals, and nothing shared with anyone for their own use. You can object at any time, and stop the counting on this device straight away, with the button below. If your browser sends a Global Privacy Control signal, we do not count your visits at all.
What we add if you accept
If you choose Accept in the banner, we also:
- keep a random visitor number on your device for thirteen months, so we can tell a return visit from a new one and see which pages you read across your visits;
- keep the full address of the page that sent you, and the city you are in, as worked out from your internet address at the moment of the visit;
- use HubSpot, our contact system, which places its own cookies so that if you later book a time or write to us through our contact page, we can see which pages you read before. To do that, when you book or write, we also tell HubSpot your email address.
We do this only with your consent. You can withdraw it at any time with Privacy choices at the foot of every page, and doing so is as easy as giving it. Choosing Decline changes nothing about how the site works. We ask again after thirteen months, or sooner if this page changes in a way that matters.
If you book a time or write to us
To book a call you give us your name, your organisation, your email address and what you would like to cover. When you press Book, a check from Cloudflare (Turnstile) makes sure a person, not a program, is booking. If it passes, we put the meeting straight into Lori's or Josh's calendar and the invitation goes to your email address; if it cannot run, we email you a link to confirm the time instead. We also use your details to prepare for the call, and the day before it we email you a reminder with the Teams link and a link to move or cancel the booking (anyone holding that link can use it, so keep it to yourself). If you ask for a time but do not confirm it within 30 minutes, the time is released and we email your name, organisation, email address, the topic and what you wrote to Lori and Josh, so they can follow up with you. A note you send through the contact page goes to both of them by email. We do this on the basis of our legitimate interest in replying to people who contact us. If you would rather not hear from us, say so in a reply and we will not write again.
Cookies and storage on your device
| Name | Set by | What for | How long |
|---|---|---|---|
| cf_clearance | Cloudflare | Security: tells our firewall your browser is not a malicious bot. Strictly necessary, so it does not need your consent. | 15 minutes, renewed while you browse |
| l8-consent | This site | Remembers your choice in the banner, so we do not ask on every page. Strictly necessary. | 13 months |
| l8-nocount | This site | Only if you press Stop counting my visits: remembers that you asked. | Until you clear it |
| l8-vid | This site | Only if you accept: the random visitor number. | 13 months |
| HubSpot cookies | HubSpot | Only if you accept: link your visits to your contact record if you get in touch. HubSpot lists its cookies and how long each lasts in its own cookie policy. | As set by HubSpot |
Who helps us
| Provider | What for | When |
|---|---|---|
| Cloudflare | Delivering the site, keeping out malicious traffic, storing our visit counts, and checking that bookings come from people | Every visit |
| Railway | Hosting the site's files | Every visit |
| HubSpot | Linking the pages you read to your contact record, if you get in touch | Only if you accept |
| Microsoft (Outlook) | Booking a time with us, and the emails about it | Only if you book a time or write to us |
Each acts on our instructions under a data processing agreement. Some of them handle data outside the European Economic Area, including in the United States. Where a provider is certified under the EU-US Data Privacy Framework, we rely on that; otherwise we rely on the European Commission's standard contractual clauses in its terms.
Bots and security
To keep the site safe, every request passes through a firewall. Requests from automated tools, scanners and crawlers are recorded, with the tool's name, the network it came from and the page it asked for, and may be blocked. This also shows us which search engines and AI assistants read the site. We do this on the basis of our legitimate interest in keeping the site secure.
How long we keep it
Our visit counts and security records are deleted after thirteen months. The daily scrambling key is destroyed after one day. HubSpot and Microsoft keep data for the periods in their own policies. Contact records, and the emails about a booking or a note, are kept for as long as we are in touch with you.
What we do not do
We do not sell data, use it for advertising, or make automated decisions about you. This site is not aimed at children.
Your rights
You can ask us for a copy of the data we hold about you, and ask us to correct it, delete it, restrict how we use it, or give it to you in a form you can take elsewhere. You can object to the counting described above and withdraw your consent at any time. Because we do not keep internet addresses, we usually cannot find a visit that belongs to you unless you have accepted and can give us your visitor number. Write to us at the addresses above. You also have the right to complain to a data protection authority: in Canada, the Office of the Privacy Commissioner of Canada; in the European Union, the authority where you live or work (in Spain, the Agencia Española de Protección de Datos); in the United Kingdom, the Information Commissioner's Office.
Changes
If this page changes in a way that matters, the banner will ask for your choice again. Last updated 19 October 2026.