Privacy Policy

Effective 2026-08-07  ·  Last updated 2026-08-07

Nothing tracks you on this site unless you say yes. We load no analytics scripts and set no analytics cookies until you choose “Accept” on our banner, and you can change your mind at any time. We do not sell or share your personal information, and we run no advertising features.

Who we are

This website (project5.ai) is operated by Mahisoft. The site is operated by Rick Little, who is the controller of the personal information described in this notice. You can reach us at rick@mahisoft.com.

This site is instrumented by Project5 itself: its Google Tag Manager container (GTM-WJSNBN47) was created with the product, and the consent behaviour described below is the behaviour we ship to clients. If anything on this page ever stops matching what the site actually does, that is a defect — tell us and we will fix it.

What we collect with your consent

If — and only if — you choose “Accept” on our cookie banner, we load Google Analytics 4 through Google Tag Manager. From that point on, and until you withdraw your consent, Google Analytics collects:

• Pages you view on this site, and when you viewed them.
• An approximate location (typically city or region level) derived from your IP address.
• Device and browser information, such as browser type and version, operating system, screen size, and language.
• How you arrived at the site, such as the referring website or search engine.
• A randomly generated identifier stored in cookies on your device, which lets us tell repeat visits apart from new ones.

Cookies we set once you accept

We also store your consent choice itself in your browser’s local storage under the key project5_consent_v1. It records only whether you accepted or declined and when. It is never sent to us or to anyone else, and it is what stops the banner from asking you again on every page.

What we collect if you decline — or never choose

Nothing, for analytics purposes. If you decline, or if you simply ignore the banner, no Google Analytics or Google Tag Manager code is ever downloaded or executed, and no analytics cookies are set. There is no “cookieless” or anonymised tracking fallback running in the background.

As with any website, our hosting provider records standard server request logs (such as the IP address and the file requested) as a technical necessity for delivering and securing the site. These logs are not used to build profiles, are not combined with analytics data, and are not used to identify individual visitors.

Information you send us on purpose

This site has no contact form and no newsletter signup. The only way to contact us from here is the rick@mahisoft.com link, which opens your own email program — nothing you type is transmitted through this website or through any third-party form processor. If you do email us, we receive whatever you choose to send and use it only to reply to you and to keep a record of the conversation.

Why we collect analytics data

To understand, in aggregate, how the site is used: which pages people read, roughly where visitors come from, and whether the site works on their devices. That is the entire purpose. We use it to decide what to improve.

We do not sell your personal information and we do not share it for cross-context behavioural advertising. No advertising features, remarketing, audience export or Google Signals functionality is enabled on our Google Analytics property. Google’s advertising consent signals (ad_storage, ad_user_data and ad_personalization) are set to denied on every page load and are never granted, even when you accept analytics.

Your consent choices

We use an opt-in model everywhere in the world, not just where the law requires it. Analytics stays off until you actively choose to turn it on, and Accept and Decline are presented with equal prominence.

You can change your decision at any time using the Privacy choices control in the bottom-left corner of every page, or right here:

Open privacy choices

If you switch from Accept to Decline, we do three things immediately: signal the withdrawal to Google so collection stops, delete the Google Analytics cookies described above from this browser, and reload the page so that nothing already running continues. You can also clear cookies and site data for project5.ai in your browser at any time, which resets your choice entirely and brings the banner back.

Global Privacy Control

We honour the Global Privacy Control (GPC) browser signal. If your browser or extension sends a GPC signal, analytics is treated as declined by default and nothing loads. We still show you the banner, with a note explaining that we have honoured the signal, so that you can turn analytics on deliberately for that browser if you want to. We will never treat a GPC signal as permission.

Who else processes this data

Google LLC (and its affiliates) processes analytics data on our behalf as our service provider or processor, through Google Analytics 4 and Google Tag Manager. Google’s handling of that data is governed by its own terms and by Google’s Privacy Policy. Data may be processed on servers in the United States and other countries where Google operates. Our hosting provider (Google Firebase Hosting) serves the site’s files and keeps the server logs described above.

No other third party receives personal information from this site. Web fonts are served from our own domain rather than from Google Fonts, so no request — and therefore no IP address — is sent to a third party merely because you loaded a page. Until you accept, this page makes no request to any origin except project5.ai.

How long we keep it

Google Analytics event-level and user-level data is retained for 2 months, Google’s default setting, after which it is deleted. Aggregate, non-identifying reports derived from that data may be retained for longer. Emails you send us are kept for as long as needed to handle your enquiry and any follow-up. Your consent choice stays in your browser until you clear your browser storage.

Your privacy rights

California and other U.S. states

If you live in California, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) gives you the right to know what personal information we collect and how we use it, the right to request deletion of it, the right to request correction of inaccurate information, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information, so there is nothing to opt out of — but the Privacy choices control turns analytics off regardless. We will never discriminate against you for exercising any of these rights.

Residents of other U.S. states with comprehensive privacy laws — including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and others as those laws take effect — have comparable rights of access, correction, deletion, portability and opt-out, and we extend the same treatment to all of them.

European Economic Area, United Kingdom and Switzerland

If the GDPR or UK GDPR applies to you, our legal basis for analytics is your consent (Article 6(1)(a)), and you have the right to:

• access the personal data we hold about you;
• have inaccurate data rectified;
• have your data erased;
• restrict how we process it;
• receive your data in a portable format;
• object to processing;
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before you withdrew it; and
• lodge a complaint with your national supervisory authority (in the UK, the Information Commissioner’s Office).

How to exercise your rights

Email rick@mahisoft.com and tell us what you want us to do. We will respond within the timeframe the applicable law requires. We may need to ask you for information to verify who you are before we act on a request. You may use an authorised agent where the law allows it. Because analytics data we hold is not tied to a name or email address, we may need details such as approximate visit dates to locate any records about you — and in many cases there will be nothing identifiable to find.

Children

This site is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, email us and we will delete it.

Changes to this notice

We may update this notice as the site changes or as the law does. When we do, we will revise the “Last updated” date at the top. If we make a change that materially expands how we use your personal information, we will ask for your consent again through the banner before the change takes effect for you.

Contact

Questions, requests or complaints about privacy on this site: rick@mahisoft.com.