Who runs this site

This site is operated by Tony Hughes, an independent brand and design consultant based in Riga, Latvia. Any questions about your data can be sent to [email protected].

Cookies

This site always sets one cookie: cookie_consent, which simply remembers whether you accepted or rejected analytics, so the banner doesn't show again. It lasts 6 months and is strictly necessary — it doesn't require consent under GDPR/ePrivacy rules, since it stores nothing about you beyond your own choice. Accepting and declining are remembered for exactly the same length of time, so declining is not punished with a banner that keeps returning. You can delete it in your browser at any time, or change your answer via the Cookie Settings link in the footer.

Fonts are self-hosted at build time, so no request is made to Google's font servers when you visit, regardless of your choice below.

Analytics & telemetry — only with your consent

Where consent is given via the cookie banner, this site activates full cookie-based analytics and telemetry technologies, operated by third-party service providers acting on our behalf, for the purpose of evaluating device characteristics, interface performance, and navigational behaviour. Such processing is undertaken solely to inform the optimisation of the user experience — including, without limitation, the identification of usability friction, engagement patterns, and points of user disengagement.

No third-party service is contacted until you accept. Google Analytics, Microsoft Clarity, Meta Pixel and LinkedIn Insight are all held back behind the banner: before you answer, and permanently if you decline, none of them are requested and no data reaches any of them. Google Analytics uses Consent Mode (v2) in its basic configuration, which means the tag is never loaded at all without consent rather than loaded in a restricted mode. Consent may be withdrawn or amended at any time via the Cookie Settings link in the footer. Further particulars regarding the specific service providers engaged and their respective data-handling practices are available on request by contacting [email protected].

Separately, Tony's own server performs first-party analytics. Before you answer the banner it runs in a reduced baseline tier; if you accept it runs in full; if you decline it is not loaded at all.

Your IP address is never stored. It is combined with your browser's user-agent and a secret that changes every midnight, hashed, and then discarded — so the result cannot be traced back to you, and cannot be matched from one day to the next. Recorded alongside it are the page path, referrer, visit timings and engagement measures, approximate location (country, region and city, as supplied by Cloudflare), and technical characteristics of your device and browser: screen and window size, pixel ratio, processor core count, memory, graphics renderer, language and time zone. None of this is shared with anyone — it stays on the server in Riga.

Accepting adds one identifier stored in your browser, _thd_v — a random value that lets a return visit be recognised as the same browser. Declining means it is never created. A small flag recording your answer (_thd_consent) is stored either way, so the script knows which tier to run.

The contact form

If you submit the contact form, the name, email address and message you provide are sent via Web3Forms, a third-party form-delivery service, to Tony's inbox. Web3Forms processes that submission on Tony's behalf and doesn't use it for its own marketing. That data is used solely to respond to your enquiry.

The Agent Portal

This site exposes a real, working interface — an MCP server at /api/mcp and a plain JSON API at /api/agent— that AI agents can use directly on behalf of a prospective client. If a consultation is requested through it, the name, email address and any project details supplied are sent straight to Tony's inbox via his own authenticated mail server — no third-party form service is involved for this path. It is a request, not an automatic booking: nothing is scheduled until Tony replies personally. The other resources and tools it offers (case studies, engagement details, a needs-assessment tool) only read from the same public data already on this site and store nothing.

Your rights

Under GDPR, you can ask to see, correct, or delete any personal data this site holds about you — in practice, that means anything submitted through the contact form. Email [email protected] and it will be handled directly.