Skip to content
Long Software

Legal

Long Software Privacy Policy

Effective date: [EFFECTIVE DATE — set to the date the page goes live publicly]

Last updated: [EFFECTIVE DATE — set to the date the page goes live publicly]

This privacy policy explains what information we collect when you visit our website, longsoftware.io. It also covers the contact form, the email sign-up form, and emails you send us. It explains why we collect the information, who receives it, how long we keep it, and the choices and rights you have.

1. Who we are and how to contact us

The website is operated by Long Software LLC ("Long Software", "we", "us", "our"), a Virginia limited liability company.

  • Email: support@longsoftware.io
  • Postal address: Long Software LLC, 8401 Mayland Dr #6010, Richmond, VA 23294, USA
  • EU/UK representative: [EU/UK REPRESENTATIVE if needed — delete this line if not appointed]

For data protection law purposes, Long Software LLC is the "controller" (or "business") responsible for the personal information described in this policy.

2. Our games and apps

Each of our games and apps has its own privacy policy, which explains what the app itself collects, for example through analytics, crash reporting, advertising, and in-app purchases. Those policies also cover the game's own web pages on this site.

This policy covers the rest of longsoftware.io, including the contact page.

3. The short version

  • No accounts: you can browse our website without creating an account.
  • Analytics only with your choice where the law requires it: in the EEA, UK, and Switzerland, Google Analytics runs only if you accept it. Elsewhere you can turn it off at any time. A Global Privacy Control signal turns it off automatically.
  • We don't sell your personal information, and our website doesn't use advertising cookies.
  • Forms: if you contact us or sign up for email updates, we use what you give us only to reply to you or to send the updates you asked for.

4. Information we collect

4.1 Information collected automatically when you visit

  • Technical and request information: your IP address, browser type and version, device type, operating system, language, the pages you request, the referring page, and the date and time of your visit. Our hosting provider (Webflow) and its content delivery network process this so they can deliver and secure the site. Google receives it when your browser loads fonts from Google Fonts (section 7).
  • Analytics information (only as described in section 6): pages viewed, how you got to our site, approximate location (country, region, or city, derived from your IP address), device and browser type, and interactions such as clicks and scrolling. Google Analytics collects this using cookies.

4.2 Information you give us

  • Contact form: the information you enter in the contact form on our contact page. HoneyBook provides this form (see section 8).
  • Email sign-up: the email address you enter in an email sign-up form on our site (see section 9).
  • Emails you send us: if you email support@longsoftware.io, we receive your email address, your name if you include it, and whatever you choose to send.

4.3 Information we do not collect

We don't collect sensitive personal information, such as health data, precise location, or government ID numbers, through our website. Please don't send it to us in the contact form or by email.

5. How we use information and our legal bases

We use information for the following purposes. If you are in the EEA, UK, or Switzerland, the legal basis for each is noted:

  • To deliver, secure, and fix our website, including protecting it against spam, abuse, and attacks. Legal basis: our legitimate interests in running a secure website.
  • To understand, in aggregate, how visitors use the site (Google Analytics), so that we can improve it. Legal basis: your consent, given in our cookie banner.
  • To reply to inquiries you send through the contact form or by email, and, if we work together, to manage that relationship. Legal basis: taking steps at your request before entering into a contract, and our legitimate interests in responding to inquiries. Where consent is required for cookies or reCAPTCHA, we rely on consent.
  • To send email updates you signed up for. Legal basis: your consent, given when you submit the form. You can withdraw it at any time by unsubscribing.
  • To meet legal obligations and to protect our rights. Legal basis: legal obligation and our legitimate interests.

You have the right to object to processing based on legitimate interests, and to withdraw consent at any time (see section 13). Withdrawing consent doesn't affect processing that took place before you withdrew it. We don't use your information for automated decisions that have legal or similarly significant effects on you.

6. Cookies, Google Analytics, and your consent choices

Our website uses Google Analytics to understand, in aggregate, how visitors use our pages: for example, the pages viewed, the device and browser type, and the approximate location derived from the visitor's IP address. Google Analytics uses cookies and similar technologies. We use a cookie consent banner with Google Consent Mode to control whether Google Analytics loads. What happens depends on where you are and on your browser settings:

  • EEA, UK, and Switzerland: Google Analytics is off until you choose "Accept" in our cookie banner. Until then, the Google Analytics script doesn't load at all. No analytics cookies are set, and no measurement data is sent to Google. If you decline, or never choose, it stays off.
  • Everywhere else: Google Analytics loads by default when you visit. You can turn it off at any time using Cookie settings (see below). After that, Google Analytics no longer loads for your browser on our site.
  • If your browser sends a Global Privacy Control (GPC) signal, wherever you are: Google Analytics does not load, and the cookie banner isn't shown, because we treat the signal as your choice to opt out. See also section 14.

Changing or withdrawing your choice: you can change or withdraw your cookie choice at any time using the Cookie settings link in the footer of our website. Withdrawing consent doesn't affect anything that happened before you withdrew it. You can also delete cookies in your browser settings, or install Google's Google Analytics opt-out browser add-on.

Strictly necessary storage: we keep a small record of your cookie choice so we don't ask again on every visit. Webflow may also use storage that is strictly necessary to deliver and secure the site. These don't require consent.

No advertising use: our website doesn't run advertising cookies. Google Signals and Google Analytics advertising features are turned off for our website. [BRANDON: also turn these off in the GA4 Admin settings before publishing; see open-questions.md.]

Third-party embeds: the HoneyBook contact form, including Google reCAPTCHA, may set its own cookies (see section 8).

7. Google Fonts

Our website loads some of its fonts (Public Sans and JetBrains Mono) from Google Fonts, a service provided by Google. When a page loads, your browser connects to Google's font servers. Google receives standard request information, including your IP address, your browser's user agent, and the referring page (the address of the page you are viewing). Google describes how it handles this information, including its statements on cookies and logging, in the Google Fonts privacy FAQ [VERIFY current FAQ wording before publishing]. Learn more in the Google Fonts privacy FAQ and the Google Privacy Policy. Font loading happens when the page loads, before you make a cookie choice. Other fonts on our site, such as Inter, are hosted on our own site and don't involve a third party.

8. Contact form (HoneyBook)

The contact form on our contact page is not a Webflow form. It is an embedded form provided by HoneyBook, Inc., a third-party client-management service.

  • What we collect: the information you enter in the form. [BRANDON TO CONFIRM the actual form fields, e.g. name, email address, phone number (optional?), company, project type, budget, timeline, message, and "how did you hear about us".] HoneyBook also receives technical information from your browser when the form loads and when you submit it, such as your IP address, browser and device information, and the page you came from.
  • Who receives it: HoneyBook stores your submission in our HoneyBook account and processes it on our behalf, to deliver your inquiry to us and help us manage it. HoneyBook also processes some information under its own privacy policy. See the HoneyBook Privacy Policy. [COUNSEL TO CONFIRM whether HoneyBook's terms make it a processor/service provider for form submissions, and whether a data processing addendum is available.]
  • Spam protection: HoneyBook states that its contact forms use Google reCAPTCHA to tell people from bots. reCAPTCHA collects hardware and software information, such as device and application data, and sends it to Google for analysis. Its use is subject to the Google Privacy Policy and the Google Terms of Service.
  • Cookies and similar technologies: the HoneyBook form loads from HoneyBook's servers inside our page, and it may set its own cookies or use similar technologies, for example to keep the form working and for security. reCAPTCHA may also use cookies. HoneyBook's privacy policy says it uses cookies and similar technologies on its services, including for analytics and advertising. [WEB DESIGNER / BRANDON TO CONFIRM which cookies or storage the embedded form actually sets (check the browser's Application tab), and whether the embed is held behind the cookie banner, or loaded on click, for EEA/UK/CH visitors. Update this bullet to match.]
  • What we use it for: to reply to your inquiry and, if we work together, to manage that relationship. We don't add contact-form submissions to any email list unless you separately sign up.
  • Prefer not to use the form? You can email us at support@longsoftware.io instead.

9. Email sign-up (Webflow form)

  • What we collect: the email address you enter. The form asks for nothing else. Webflow also records the date and time of the submission and the IP address it was sent from, to help prevent spam and abuse.
  • Where it is stored: in the form submissions area of our Webflow site. Webflow processes it on our behalf as our processor, and stores data in the United States. See the Webflow Privacy Policy and the Webflow Data Processing Addendum. [If an email-sending service is used to send updates, name it here as a processor before the first email is sent.]
  • What we use it for: only to send the updates you signed up for (for example, Grove Ridge news and launch updates). We don't sell your email address, and we don't share it with advertisers.
  • Unsubscribe: use the unsubscribe link in any of our emails, or email support@longsoftware.io and ask to be removed. We honor opt-outs promptly, and in any case within 10 business days.

10. Who receives information

  • Webflow, Inc.: website hosting, content delivery, and email sign-up storage, as our processor. See the Webflow Privacy Policy.
  • Google (Google Analytics): website analytics, only as described in section 6, subject to your cookie choices and GPC signal. See the Google Privacy Policy.
  • Google (Google Fonts): receives your IP address, user agent, and the referring page when your browser loads fonts. See section 7.
  • HoneyBook, Inc.: hosts the contact form and stores what you submit, on our behalf. See section 8 and the HoneyBook Privacy Policy.
  • Google (reCAPTCHA): spam protection on the contact form. See section 8.
  • [EMAIL SENDING SERVICE — add when chosen]: sends the email updates you signed up for, as our processor.
  • Legal and safety: we may disclose information if the law requires it, to protect rights, safety, and security, or as part of a merger, acquisition, or sale of assets. In the case of a sale, this policy (or one at least as protective) will continue to apply.

We don't sell personal information, and we don't share it for cross-context behavioral advertising through our website.

11. How long we keep information

  • Google Analytics (website): user-level and event-level data is kept for the retention period set in our Google Analytics property. Google offers 2 or 14 months. Our setting is [2 / 14] months, after which the data is deleted automatically. Aggregated reports that don't identify individuals may be kept longer.
  • Hosting and security logs: kept by Webflow and its providers under their own retention practices.
  • Contact form inquiries (HoneyBook): kept for as long as needed to respond and, if we work together, for the duration of that relationship and any period required for legal, tax, or accounting purposes. Otherwise they are deleted within [24] months [BRANDON TO CONFIRM retention].
  • Email sign-ups: kept until you unsubscribe or ask us to delete your address, or until we stop sending the updates you signed up for [SET TRIGGER, e.g. "12 months after our last email"], whichever comes first. We may keep a record that you unsubscribed so that we don't email you again.
  • Emails you send us: kept only as long as we need them to resolve your request, then deleted, normally within [12] months.
  • Your cookie choice: stored in your browser until you change it or clear your cookies [WEB DESIGNER TO CONFIRM the banner's storage duration, e.g. 6 or 12 months].

12. International data transfers

Long Software LLC is based in the United States. Our providers process data in the United States and other countries. When personal data from the EEA, UK, or Switzerland is transferred to the US or other countries, the transfer is protected by appropriate safeguards:

  • Google states that it complies with the EU-U.S. Data Privacy Framework, the UK Extension, and the Swiss-U.S. Data Privacy Framework, and that it offers the Standard Contractual Clauses in its data processing terms.
  • Webflow states that it relies on the Data Privacy Framework and/or Standard Contractual Clauses (and the UK International Data Transfer Addendum) in its Data Processing Addendum.
  • HoneyBook: [COUNSEL/BRANDON TO CONFIRM HoneyBook's transfer mechanism (DPF certification or SCCs)].

You can ask us for more information about these safeguards by emailing support@longsoftware.io.

13. Your rights under GDPR and UK GDPR

If you are in the EEA, UK, or Switzerland, you have the right to:

  • access the personal data we hold about you and get a copy of it;
  • correct inaccurate data;
  • delete your data ("right to be forgotten");
  • restrict how we use it;
  • object to processing based on our legitimate interests;
  • data portability, meaning you can receive data you provided to us in a portable format;
  • withdraw consent at any time, without affecting earlier processing (for cookies, use Cookie settings; for emails, unsubscribe); and
  • complain to your local data protection authority, or in the UK, the Information Commissioner's Office. We would appreciate the chance to address your concern first.

To exercise these rights, email support@longsoftware.io. We will respond within one month, which the law allows us to extend in some cases. For analytics data, which is tied to a browser cookie rather than your name, we may not be able to identify you unless you give us more information. You can always clear your cookies or withdraw consent.

14. US state privacy rights (including California)

Depending on where you live, residents of California, Virginia, Colorado, Connecticut, and other US states with comprehensive privacy laws may have the rights described below. We extend them to all US residents.

Categories of personal information collected in the last 12 months

  • Identifiers: IP address, cookie identifiers, and, if you contact us or sign up, your name, email address, and any other contact details you provide.
  • Professional or commercial information you choose to provide in the contact form (for example, company or project details) [ADJUST to match the confirmed form fields].
  • Internet or other electronic network activity: pages viewed and interactions with our site.
  • Geolocation data: approximate (not precise) location derived from IP address.

We don't collect sensitive personal information as defined by California law.

Sources, purposes, and recipients

  • Sources: your browser and device, and you (contact form, email sign-up, and emails).
  • Purposes: the purposes described in section 5.
  • Recipients: the parties in section 10, which act as our service providers or processors (or, for Google Fonts and reCAPTCHA, as described in sections 7 and 8).

No sale or sharing

We do not sell personal information, and we do not "share" it for cross-context behavioral advertising through our website. Our website doesn't use advertising cookies, and Google Analytics advertising features are turned off. We don't knowingly sell or share the personal information of consumers under 16. Our games and apps may work differently, because some show ads. See each game's own privacy policy (section 2).

Global Privacy Control

If your browser sends a GPC signal, we treat it as a valid request to opt out of sale and sharing for that browser on our website. Google Analytics does not load and the cookie banner isn't shown (see section 6).

Your rights

  • Know or access the personal information we have collected about you.
  • Delete your personal information.
  • Correct inaccurate personal information.
  • Opt out of sale, sharing, and targeted advertising. We don't engage in these on our website, but you can still send a GPC signal, use Cookie settings, or email us.
  • Appeal: if we deny your request, you can appeal by replying to our decision. If your appeal is denied, you may contact your state Attorney General.
  • Non-discrimination: we won't treat you differently for exercising your rights.

To make a request, email support@longsoftware.io. We may need to verify requests other than opt-outs. You may use an authorized agent. If you do, we may ask for proof that you authorized the agent. We respond within 45 days, which the law allows us to extend once by another 45 days.

15. Children

Our website is intended for a general audience and is not directed at children under 13. Our contact form and email sign-up are not intended for children. We don't knowingly collect personal information from children under 13. If we learn that we have, we will delete it. If you are a parent or guardian and believe your child has provided personal information to us, email support@longsoftware.io.

16. Security

Our website is served over HTTPS, so data sent between your browser and our site, including form submissions, is encrypted in transit. Access to our Webflow, Google Analytics, and HoneyBook accounts is limited to the people who run Long Software and protected with two-factor authentication [CONFIRM]. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information.

17. Changes to this policy

We may update this policy, for example when we change the services we use. When we do, we'll change the "Last updated" date at the top. If the changes are significant, we'll also give notice on this page before they take effect. Where the law requires it, we'll ask for your consent again.

18. Contact us

Questions, requests, or complaints about this policy or your information:

  • Long Software LLC
  • 8401 Mayland Dr #6010, Richmond, VA 23294, USA
  • Email: support@longsoftware.io
  • Game privacy policies: Grove Ridge Privacy Policy