Privacy

Who we are

Heavy Artillery is a brand of Matchless Web Studio LLC. This page covers heavyartillery.io, frankenstack.heavyartillery.io, skills.heavyartillery.io (and spotter.heavyartillery.io, its former address) and the shop at shop.heavyartillery.io. Questions about it go to [email protected].

When you fill in a form

Our forms ask for your email address and, on some forms, your first name. Each contact form also asks for your last name, what your message is about and the message itself, and the one on heavyartillery.io lets you add your company's name if you choose. The Deployment Assessment request asks for your name, your company, its annual revenue range and, if you like, a message. The Frankenstack Score also sends your answers, your score and its tier with your email address. Everything you submit is stored in SureContact, the service that runs our forms and sends our email through Postmark.

We use it to reply to your message, or to send what you asked for and the short email series that goes with it. The contact form has a box for occasional updates; we send those only if you tick it. Every email has an unsubscribe link, and unsubscribing stops the series.

The pack tour. If you sign up for it, we use your first name and email address to send eight emails over fourteen days that describe each skill pack. If you also tick the updates box, we send occasional updates after the tour; if you don’t, the eighth email is the last, and every email has an unsubscribe link.

Before a form reaches SureContact, Cloudflare Turnstile checks that a person sent it rather than a script. Turnstile runs in your browser, and Cloudflare handles that check under its own privacy policy.

Analytics

We count visits with Fathom Analytics. Fathom does not use cookies and does not collect personal information; we see totals such as page views and referrers, never individual visitors.

Campaign measurement

When you arrive at skills.heavyartillery.io or shop.heavyartillery.io from a link that carries campaign information (such as an ad, an email or a social post), your browser keeps that information, the page you first landed on and, if you came from a Meta ad, Meta’s click identifier, for as long as the browser tab is open. No cookies are used for this. If you then go from skills.heavyartillery.io to shop.heavyartillery.io, that information travels with you in the link.

When you submit a form, your email address is sent to our server, which stores only a one-way, salted code made from it (not the address itself), together with the form, the page and the campaign information. When you place an order, we record the order number, its value and the campaign information; your IP address and browser details from the checkout are kept for up to seven days to match the order to the campaign, then deleted. We keep these campaign records until you ask us to delete them.

To measure our advertising, we send Meta Platforms a hashed (one-way) version of your email address, the one-way code described above, your IP address, your browser’s details and, if present, Meta’s click identifier, for form submissions and purchases. If you came from a Meta ad, every page you visit on these sites is shared with Meta Platforms: the page address, your IP address, your browser’s details and the ad click identifier, so we can show our ads again to people who visited.

Email [email protected] to ask about this processing or to object to it.

Services that see your request

Cloudflare hosts heavyartillery.io, frankenstack.heavyartillery.io and skills.heavyartillery.io and sits in front of the shop, so it processes the technical details of each request, such as your IP address, to deliver the page and protect it from abuse. Our campaign measurement server also runs on Cloudflare. The shop itself runs on a WordPress server managed through GridPane, which sees the same details. The other three sites load their fonts from Google Fonts, so Google receives the same kind of request information when your browser fetches them; the shop serves its own fonts.

Buying from the shop

Checkout asks for your email address and your full name. SureCart, the service that runs the shop, stores them with your order, your downloads and your customer account, and sends your receipt and order emails. While you check out, SureCart keeps your cart in your browser's local storage.

Your card details go to Stripe, which processes the payment; they never reach our servers. Stripe's payment form sets its own cookies and runs fraud checks, which can include an hCaptcha challenge, and shows Google Pay where your browser offers it.

When an order completes, your name, email address, language setting and what you bought are also recorded in SureContact, so we can send the email series for that product and stop it if you are refunded. Every email in the series has an unsubscribe link. Unsubscribing stops the series; your receipt and order emails still arrive, because they are part of your purchase.

You sign in to your customer dashboard with a link sent to your email address. Once you are signed in, WordPress sets the cookies that keep you signed in.

Your choices

We do not sell your information. To see what we hold about you, correct it or have it deleted, email [email protected] and we will do it.

We keep form submissions until you unsubscribe or ask us to delete them. We keep order records (your name, email address, what you bought, the amount and the date) for as long as tax and accounting rules require. When you ask us to delete your information, we delete everything we are not required to keep, including your email subscriptions; your order records follow once we no longer have to keep them.

If you are in the EU or UK

Data protection law gives you the right to a copy of the information we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to take it elsewhere. We use your order details to deliver what you bought, and send an email series because you asked for it or bought the product it belongs to; you can stop a series at any time by unsubscribing. We use the campaign measurement described above to measure our advertising, and you can object to it at any time. The services named on this page may process your information outside your country, including in the United States. To use any of these rights, email [email protected]. You can also complain to the data protection authority where you live.