Legal
Privacy Policy
The short version
This website has no forms, no accounts, and no logins. We do not sell your data and we never have. The only tracking on the site is Google Analytics, which tells us how many people visit and which pages they read. If you email us or book a call, we keep what you send so we can reply.
Work we do for clients is a separate matter, governed by the agreement we sign with you. Nothing about it is covered by the paragraph above. See Client work.
This policy explains what happens to information when you visit littlelegion.ai, and it is written to be read rather than skimmed past. It applies to this website. It does not apply to a client engagement, which is governed by the contract and any confidentiality terms we sign.
The site is operated by Little Legion, LLC, a Delaware limited liability company. Where this policy says "we," "us," or "our," it means Little Legion, LLC. Where it says "you," it means anyone visiting the site.
What we collect
Information you choose to send us
There is no contact form on this site. If you want to reach us, you either email kenan@littlelegion.ai or book a call through our scheduling link. In both cases you decide what to send. Typically that is your name, your email address, your company, and whatever you tell us about the work you are considering.
We use it to reply, to prepare for the call, and to scope a proposal. We do not add you to a mailing list, because we do not have one.
Information collected automatically
Two things happen without you doing anything:
- Analytics. Google Analytics 4 records that a visit happened: which pages were viewed, roughly where in the world the visitor was, what kind of device and browser they used, and which site or search sent them. It is aggregate traffic measurement. We do not use it to identify individuals, and we have not enabled Google's advertising or remarketing features.
- Server logs. Our host records standard request data, including IP address, timestamp, and the page requested. This is how any web server works and it is what makes the site deliverable and defensible against abuse.
Cookies
Google Analytics sets cookies on this site. They are the standard _ga and _ga_<id> cookies, which distinguish one visitor from another so a returning reader is not counted twice. They expire after two years unless you clear them sooner. We set no advertising cookies, no social pixels, and no cross-site trackers.
We do not show a cookie consent banner. Three ways to opt out, all of which work without one:
- Block or clear cookies in your browser settings, which every major browser supports per-site.
- Install Google's official opt-out extension: tools.google.com/dlpage/gaoptout.
- Turn on your browser's tracking protection or use private browsing.
None of these break the site. Nothing here is behind a cookie wall.
Who else touches the data
We are one company, and we use ordinary infrastructure to run a website. These are every third party involved and exactly what each one sees:
| Service | What it does | What it sees |
|---|---|---|
| Vercel | Hosts and serves the site | Standard server request data, including IP address |
| Google Analytics | Counts and describes traffic | Page views, approximate location, device and browser, referrer |
| Fontshare | Serves the two brand typefaces | The request for the font file, including IP address |
| Calendly | Books discovery calls | Only what you enter, and only if you click through and book. It is not embedded in this site. |
Each of these processes data under its own privacy terms, linked above. We have no other analytics, no chat widget, no A/B testing tool, and no ad network.
What we do not do
- We do not sell personal information, and we do not share it for cross-context behavioural advertising.
- We do not run advertising or retargeting on this site.
- We do not build profiles on visitors or score them.
- We do not use anything collected here to train AI models.
- We do not require an account, because there is nothing to log into.
Client work is separate
This is the part most website privacy policies leave vague, so we will be direct about it.
When we build agents for a client, the agents run inside the client's own accounts, files, and environment. Client data stays where it already lives. We access it under the engagement agreement and any confidentiality or data-processing terms attached to it, for the purpose of doing the work and for nothing else. We do not move client material into this website, into our analytics, or into any general-purpose model training.
If you are a client and want to know precisely how your data is handled on your engagement, the answer is in your agreement, and we will walk through it with you on request.
How long we keep things
- Emails and call notes: as long as we have an active or prospective relationship, and afterwards only as long as we need them for tax, accounting, and legal records.
- Analytics: retained by Google on our account's retention setting, currently 14 months, then deleted automatically.
- Server logs: kept on our host's standard rolling schedule, a short window measured in days to weeks.
Your rights
Depending on where you live, you may have the right to ask us for a copy of the personal information we hold about you, to correct it, to delete it, to limit how we use it, or to object to a particular use. Residents of California, other US states with privacy statutes, the United Kingdom, and the European Economic Area have some or all of these rights by law. We extend them to anyone who asks, because we hold very little and the fair answer does not depend on your postcode.
To exercise any of them, email kenan@littlelegion.ai. We will respond within 30 days. We will not charge you, and we will not treat you differently for asking.
We do not sell personal information, so there is no sale to opt out of.
Where the data sits
We operate from the United States and our service providers are primarily US-based. If you visit from outside the US, the information described here is processed in the US, where privacy law differs from the law where you live. Using the site means you understand that. If you would rather not have analytics run at all, the opt-out options above stop it before it starts.
Security
The site is served over HTTPS. Our email and files sit behind multi-factor authentication. We collect little enough that there is not much to lose here, which is a deliberate choice rather than an accident. That said, no system is perfectly secure, and we will not claim otherwise.
Children
This site is for businesses. It is not directed to children, and we do not knowingly collect information from anyone under 16. If you believe a child has sent us information, email us and we will delete it.
Changes to this policy
If we change how any of this works, we will update this page and change the effective date at the top. Material changes will be summarised here so you can see what moved rather than having to compare versions yourself.
Contact
Questions about this policy, or about anything above, go to a person and not a ticket queue.
Little Legion, LLC
kenan@littlelegion.ai
See also our Terms of Use.
← Back to Little Legion