Privacy policy

Who we are

Corren Studio (“Corren,” “we,” or “us”) is a founder-run marketing studio in the United States. We run Google Ads, Meta ads, conversion rate optimization, website design and SEO for small businesses.

This policy covers www.corren.studio, the forms on it, and the emails we exchange with you about an inquiry. If you have a question about it, email [email protected].

What we collect

When you request the free audit

The audit form asks for:

your website address
the main problem you want us to look at
whether you run ads, and on which platforms
a range for your monthly ad spend, if you run ads
when you’d like changes live (optional)
your first name and email address
anything you’d like us to look at specifically (optional)
how you heard about us (optional)

The form also contains a hidden field that people never see and spam bots tend to fill in. We use it only to filter spam.

When you send a question through the contact form

We collect your name, your email address, your message and, if you add it, your website.

When you introduce a business through the referral form

We collect your first name, your email address and, if you add it, your Instagram or TikTok handle. About the business, we collect its name, its website or Instagram (optional), the name of the person to contact, their email address or phone number, how you know them (optional) and any note you add. Only introduce someone who knows you’re passing their details to us; the form asks you to confirm that.

If someone introduced you to us, that’s where we got your name and contact details. We use them to reach out about a free audit and to tell you who introduced you. If you’re not interested, say so and we won’t contact you again, and we’ll delete your details if you ask.

Context sent with every form

When you submit a form, your browser also sends us some context about how you reached the site, so we know which pages and channels bring inquiries:

the page you submitted the form from
the page you first arrived on, and the website that sent you there (only its address, for example google.com)
campaign tags in the link you followed, such as UTM parameters, and ad click identifiers such as gclid or fbclid, if the link had them
a referral code, if a partner sent you
how many pages you viewed and the last few pages you visited
how long the form took to complete
the Google Analytics identifiers for your browser and visit, which let us match your request to our analytics

What our server and browser storage keep

Like most websites, our host processes your IP address to deliver pages and may keep it for a short time in server logs. When a form arrives, we record the time it was received, and our host may tell us your approximate country and browser type.

To remember how you first found the site, it saves a small record in your browser’s local storage: the first page you landed on, the referring website, any campaign tags or click identifiers, and the date. It stays on your device for up to 90 days and reaches us only if you submit a form. The pages you view during a visit are kept in session storage, which your browser clears when you close the tab. After you submit the audit form, your first name and a random request ID are kept in session storage so the confirmation page can greet you.

Analytics and session recordings

We use three services to understand how the site is used and to fix what isn’t working.

Google Analytics 4 records the pages you view, events such as starting a form or clicking a link, your approximate location, and your device and browser. It sets cookies (for example _ga) to tell visits apart. Google signals is turned off on our account. We don’t send your name, email address or anything you type to Google Analytics. When you submit the audit form, we do send your multiple-choice answers (such as the main problem and your ad spend range) with the submission event, so we can see which pages bring which kinds of requests.

Microsoft Clarity records how visitors use our pages: clicks, scrolling, mouse movement and the pages viewed. We can play this back as a session recording or see it as a heatmap. Our forms are masked in recordings, so what you type into them doesn’t appear, and neither do the confirmation messages that greet you by name after you submit. When you submit the audit form, we tag that session with a random request ID so we can see how the form worked for you. We don’t send your name or email address to Clarity. Clarity sets its own cookies (for example _clck).

Vercel Speed Insights measures how fast our pages load in your browser and reports those timings with the page address and device type. It doesn’t use cookies.

Google and Microsoft may collect information about your activity on this site and on other websites that use their services, under their own policies. You can read how Google uses information from sites that use its services and the Microsoft Privacy Statement.

How we use it

To reply to you and to do the audit or answer the question you sent.
To follow up about your audit. We follow up at most twice after the audit arrives, and we don’t send newsletters.
For referrals: to contact the business you introduced, to tell you how it goes, and to pay you if they become a client.
To understand which pages, searches and campaigns bring inquiries, and to improve the site.
To keep spam and abuse out of our forms.
To meet our legal obligations.

We don’t sell your personal information, we don’t use it for targeted advertising, and we don’t add you to a mailing list.

We use a small number of service providers to run the site and handle inquiries. They process information on our behalf. Google and Microsoft also use analytics data under their own policies, as described above.

Vercel hosts this website, runs the server that receives form submissions, and provides Speed Insights.
Discord carries our internal notifications. When you submit a form, its contents are posted to a private Discord channel so we can reply quickly.
Resend, an email delivery service, may send the emails we write to you about your request.
Google provides Google Analytics.
Microsoft provides Clarity.

We may also disclose information if the law requires it, or if we need to protect our rights or someone’s safety. If we add a service that handles your information, we’ll add it to this list.

How long we keep it

We keep inquiries and audit requests for as long as we need them to respond to you and for our business records. If you ask us to delete yours, we will. Analytics data and session recordings are kept for the periods set in Google Analytics and Microsoft Clarity, after which those services delete them.

Your choices

See, correct or delete your information

Email [email protected] from the address you used and tell us what you’d like. We’ll confirm once it’s done. If you live in California, this is also how you review and request changes to the personal information we hold about you.

Stop our emails

Reply to any email from us and say stop, and we won’t email you again.

Block cookies and analytics

You can block or delete cookies in your browser settings, and the site still works without them. You can also install the Google Analytics opt-out browser add-on, or use a content blocker that stops analytics scripts.

Do Not Track

Some browsers send a Do Not Track signal. There is no agreed standard for how websites should respond to it, and this site doesn’t change what it does when it receives one. You can still block analytics using the options above.

Children

This site is for businesses. It isn’t directed at children under 13, and we don’t knowingly collect their information. If you think a child has sent us information, email us and we’ll delete it.

Security

Pages and forms are served over HTTPS, and access to inquiries is limited to the people who need it to reply to you. No way of sending or storing information online is perfectly secure. If we learn that your information has been exposed, we’ll tell you.

Our pages sometimes link to other websites. Those sites have their own privacy practices.

Changes to this policy

If we change this policy, we’ll update this page and the date at the top. If a change is significant, we’ll also say so at the top of the page.

This policy is effective as of October 25, 2026.

Contact

Corren Studio
[email protected]