Privacy Policy
Last updated October 3, 2026
1. Who we are and how to reach us
This website (gbittech.net) is run by Gbit Tech LLC ("Gbit Tech", "we", "us"). We are a licensed low-voltage contractor (California C-7 license #1050088) that designs and installs UniFi networks, security cameras, access control, Wi-Fi and cabling for homes and businesses in Greater Los Angeles.
This policy explains what personal information we collect through this website, how we use it, who else handles it, and the choices you have. It covers our website and the two planning tools on it, Sight (the ballpark camera planner) and the Storage planner. It also covers information you give us by email, phone or text when you contact us about a project.
Contact for privacy questions and requests
- Email: [email protected]
- Phone or text: (818) 809-6743
2. What we collect
Information you give us
| Where | What you may give us |
|---|---|
| Contact form | Your name, email address, phone number (optional), the kind of work you need (cameras, network, Wi-Fi, access, not sure), your city or ZIP code, and your message |
| Sight ballpark tool | The property address you type, the camera positions and sketch you create, your notes or brief, and the contact details you enter if you ask us to follow up |
| Storage planner | Your camera count, recording settings and storage choices. These stay on your device. The planner makes no requests to us or to other services except loading fonts |
| Email, calls and texts | Whatever you share with us, such as your name, contact details, property details, photos, and questions about a project |
Please do not send us information we do not need, such as payment card numbers, government ID numbers, or passwords, through the website or by email.
Information collected automatically
When you visit, our hosting provider (Cloudflare) and the tools embedded on our site receive technical information, including:
- your IP address and the approximate location it implies (city or region level)
- your browser type and version, device type and operating system
- the pages you request, the date and time, and the page that referred you
- basic security and performance logs
- how you use the site (pages viewed, how you arrived, device type), through Google Analytics (see Section 4)
- if you use the contact form, a short browser check run by Cloudflare Turnstile (see below)
Visit notification. When you open a page on our site, the site owner may get a short notification on a phone. It shows the approximate location your connection suggests (city level), the name of your internet network, your device, operating system and browser type, your language setting, the site that referred you (if any) and the page you visited. It does not include your name or your IP address. We send it through ntfy.sh (see Section 5). We do not keep it beyond a duplicate check: a one-way scrambled key made from your connection details is held for 30 minutes, so that repeat page views in that time do not send another notification. We use these notifications to follow up on interest in our services and to spot problems with the site. Automated crawlers and our own visits are not sent.
Contact form bot check. The contact form on our Home, Contact and UniFi Installer pages uses Cloudflare Turnstile to tell real people from bots. The Turnstile script (from challenges.cloudflare.com) loads only when you scroll near the form. It runs a short check in your browser and sends your IP address, browser details and a challenge token to Cloudflare. It is used for spam and security only, not for advertising.
Instagram feed. The Instagram feed on our Home and Gallery pages is loaded through a Gbit Tech server function on Cloudflare, which fetches our public @gbittech posts from Instagram. When the live posts load, your browser may request the pictures from Instagram's servers, which can then see your IP address and browser details. Links on the feed open the post on instagram.com. Instagram and Meta have their own privacy terms, which we do not control.
We do not use this information to build an advertising profile of you. The IP address of a contact form submission is also included in the notification email we receive, so we can spot spam and abuse.
If you use the address box on our home page or in Sight, the partial address you type is sent to a mapping service to offer suggestions (see Section 5). Sight finds your property only from the address you type. It does not ask for your device location.
3. How we use your information
We use personal information to:
- reply to your questions and requests
- scope, price and schedule your project, including site visits
- show your property and produce a ballpark estimate in Sight and the Storage planner
- keep our business records, and follow up on quotes and completed work
- keep the website secure, prevent spam and abuse, and fix problems
- understand how the website is used so we can improve it (Google Analytics)
- notice visits to the website, so we can follow up on interest and spot problems (see the visit notification in Section 2)
- meet legal, tax and licensing obligations
We do not sell your personal information. We do not share it for cross-context behavioral advertising. We do not use it to build advertising profiles.
4. Cookies and similar technologies
Our own website code sets no cookies and stores nothing on your device. We use Google Analytics (GA4) to see how visitors use the site, and Google Analytics sets its own cookies in your browser, described in the table below. We do not use advertising cookies, advertising pixels or remarketing tags.
The Sight and Storage tools are separate apps that appear inside our pages. They are hosted by a third-party app platform (grok.me, with a platform script loaded from grok.com), and they can set the items below. Sight itself sets no cookies, and there is no login cookie because these tools have no accounts. The only cookie we see in the responses from these tools is Cloudflare's bot cookie, __cf_bm. The rows for these tools only apply on the /sight and /storage pages.
| Item | Who sets it | Type | Purpose | Duration |
|---|---|---|---|---|
_ga and _ga_ plus an identifier (Google Analytics cookies, on gbittech.net) |
Google Analytics (Google) | Cookie, analytics | Recognizes a returning browser so we can count visits and see which pages are used. It is not used to show you ads | Up to 2 years |
__cf_bm cookie (on grok.me and grok.com) |
Cloudflare, through the platform's script and app host | Cookie, strictly necessary | Cloudflare's bot cookie. It helps tell real visitors from automated traffic. It is not used for advertising | About 30 minutes |
grok_device_id cookie (domain .grok.com; HttpOnly, Secure, SameSite=Lax) |
The third-party app platform (grok.com), through a platform script it loads in Sight and Storage. We do not set it | Cookie | A device identifier. The platform has not documented what it is used for, so we cannot say. Sight does not read it, does not tie it to your sketch or any request to us, and does not send it to FormSubmit or the map services. On our site it should not be stored, because browsers generally drop SameSite=Lax cookies from embedded third-party content. It can be stored if you open the tool directly on grok.me | Up to about 400 days, if your browser accepts it |
| Cloudflare Turnstile (challenges.cloudflare.com), contact form only | Cloudflare | Script and browser check, strictly necessary for spam protection | Tells people from bots when you use the contact form. It sends your IP address, browser details and a challenge token to Cloudflare. As we use it, Cloudflare says it needs no cookies or local storage. It is not used for advertising | Loads only when you scroll near the form |
gbit-storage-plan-v1 and gbit-tb-tally-v1 (local storage) |
Storage planner | Local storage, functional | Remembers your camera and drive plan on your device so it is still there when you come back. It stays on your device and holds no contact details | Until you clear your browser data |
sight-preview-briefs (local storage) |
Sight | Local storage, functional | When you submit a review or quote step, Sight may save a short record (time, address, contact details, brief and camera placements, up to 20 entries) on your device. It stays on your device | Until you clear your browser data |
| Session storage keys used for page scroll and reload handling | Sight | Session storage, functional | Keeps the tool working as you move around | Until you close the tab |
The visit notification in Section 2 does not use cookies or local storage. It sets nothing on your device.
You can block or delete cookies and local storage in your browser settings. Blocking the __cf_bm cookie may stop Sight or the Storage planner from loading. Our main website works without any of these items.
We do not use advertising cookies or tags, so there is no cookie consent banner on the site. You can stop Google Analytics from recording your visits by using Google's Analytics opt-out browser add-on (search for "Google Analytics opt-out add-on"), or by blocking cookies in your browser.
5. Third-party services that handle information
We use the following services to run the website and our business. They receive information only as described here.
| Service | What it does for us | What it may receive |
|---|---|---|
| Cloudflare (Cloudflare Pages and network) | Hosts the website, delivers pages quickly, protects against attacks | Visitor IP address, browser and request details, server logs |
| Cloudflare Turnstile (challenges.cloudflare.com) | Bot check on the contact form, loaded only when you scroll near the form | Your IP address, browser details and a challenge token. Not used for advertising |
| Instagram (Meta), through a Gbit Tech server function on Cloudflare | Supplies our public @gbittech posts for the feed on the Home and Gallery pages | The server function asks Instagram for our own public posts and does not send it your details. Your browser may load the pictures from Instagram, which can see your IP address and browser details. Instagram and Meta have their own privacy terms |
| ntfy.sh | Delivers the visit notification to the site owner's phone (sent from a Gbit Tech server function on Cloudflare) | The page you visited, the referring site, approximate location (city level), network name, device, operating system and browser type, and language. No name and no IP address. ntfy.sh has its own privacy terms, which we do not control |
| Resend | Sends the contact form to our office inbox (server side) | Everything you type in the contact form, plus your IP address |
| Google Analytics (Google) | Shows us how visitors use the website: pages viewed, how they arrived, device and browser type, and approximate location | Cookie identifiers, pages visited, how you arrived, browser and device details, and approximate location. Google receives your IP address with each request. We do not turn on Google's advertising features |
| Google Fonts | Loads the typefaces used on the site and inside the Storage planner | Your IP address and browser details when a page loads, which go to Google |
| Bunny Fonts (fonts.bunny.net) | Loads typefaces inside the Sight tool | Your IP address and browser details |
| App platform for Sight and Storage (grok.me and grok.com) | Hosts the Sight and Storage tools and loads a platform script | Your IP address and browser details, and what you enter in those tools. A home page address you submit is passed to Sight in the web address, so it can appear in that host's logs. Your browser's request for Sight's map images also reaches the host (Vercel), which may log the request path and your IP address. We do not control how long the host keeps those logs |
| formsubmit.co | Delivers the "Book a walk" request you submit in Sight (not Storage) to our email | Name, contact details, address and sketch you choose to submit. FormSubmit sets its own retention, which we do not control |
| Esri ArcGIS (geocode.arcgis.com and Esri World Imagery) | Suggests and finds addresses as you type in the home page box and in Sight, and supplies the satellite map images in Sight | The partial address you type goes from your browser to Esri, plus your IP address. This happens only when you type. Satellite images are fetched through Sight's own image route (/api/imagery), which asks Esri World Imagery (ArcGIS Online) for each map tile. That request to Esri contains only the tile location, which is the map area you are viewing, not a street address or your device location. Esri sees the app server's IP address, not yours. Sight does not log these image requests. It keeps a temporary copy of each tile by map position only, with no IP address or address stored |
| Photon (photon.komoot.io) | Suggests addresses as you type in Sight, at the same time as Esri | The partial address you type goes from your browser to Photon, plus your IP address |
| Sight's own address lookup (/api/geocode) and public mapping services behind it: Los Angeles County public GIS, the US Census geocoder and OpenStreetMap Nominatim | Finds your address and your lot. The server asks Esri first, and uses the County, Census and Nominatim lookups when it needs more | The address you enter, plus your IP address. After your lot opens, only its coordinates go to the County parcel service to draw the lot line |
| Google Workspace | Email service we use to read and answer your messages | Whatever you send us by email, including the contact form notification |
Calls and texts are handled by us directly, not through a separate call or messaging service. These providers handle information to provide their service to us and under their own privacy terms. We do not allow them to use it to advertise to you on our behalf. We may also disclose information when required by law, to protect our rights or safety, or to a buyer if the business is sold or merged.
6. Your California privacy rights: notice at collection
This section is for California residents under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). We offer these rights to all California visitors.
In the last 12 months, we have collected the following categories of personal information. The table also shows why we collect each and how long we keep it.
| Category | Examples | Why we collect it | How long we keep it |
|---|---|---|---|
| Identifiers | Name, email address, phone number, IP address | To reply to you, run the tools, prevent spam and keep the site secure | Project inquiries and customer records: kept until you ask us to delete them. Server logs: kept by Cloudflare under its own retention schedule, which we do not control |
| Contact and customer records information | Name, phone, email, service area or ZIP, property or billing details you give us | To follow up, schedule visits, quote and invoice | Kept until you ask us to delete it, except records we must keep by law |
| Commercial information | Services you asked about, project details, camera and storage plans, quotes and past dealings with us | To scope and price projects, and keep business records | Kept until you ask us to delete it, except records we must keep by law |
| Internet or other electronic network activity | Pages visited, how you arrived, browser and device type, referring page, timestamps, security and log data | To run, secure and improve the site, and to notice visits so we can follow up on interest and spot problems | Server logs: held by Cloudflare under its own retention schedule. Google Analytics data: kept in Google Analytics for up to 14 months. Visit notifications: not stored by us beyond a 30 minute duplicate-check key |
| Geolocation (approximate) | City or region from your IP address (shown in the visit notification as a city, with no IP address). Location of the property from the address you enter. | To show your lot, produce a ballpark, and understand where a job is | Address and project details: same as project records above |
We collect this information directly from you, and automatically from your browser or device.
Sources and disclosure: in the last 12 months we have disclosed these categories to the service providers listed in Section 5 for business purposes (hosting, email delivery, mapping and form delivery). We have not sold personal information or shared it for cross-context behavioral advertising.
Do we sell or share personal information?
No. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past 12 months. Because we do not sell or share, we do not currently need a "Do Not Sell or Share My Personal Information" link. We honor Global Privacy Control (GPC) signals and other browser opt-out preference signals, and since we do not sell or share, there is nothing to switch off.
We do not knowingly sell or share the personal information of anyone under 16.
Sensitive personal information
We do not intentionally collect sensitive personal information as defined by California law (such as Social Security numbers, account logins, precise geolocation, health information, or government ID). A home address you give us for a residence could be considered sensitive in some contexts, and Sight works with your property address. We use it only to prepare your sketch, produce an estimate and carry out the work you ask for. We do not use it to infer characteristics about you, and we do not use or disclose sensitive personal information for any purpose that would give you a right to limit it.
Retention
We keep the personal information you give us, and our project and customer records, with no fixed end date, for business, legal, tax, licensing and warranty reasons. We delete it when you ask us to, except for records we must keep by law. Server logs are held by Cloudflare, and Google Analytics data is kept for up to 14 months, as shown in the table above. Visit notifications are not stored by us beyond a 30 minute duplicate-check key.
Your rights
If you are a California resident, you have the right to:
- Know what personal information we collected about you, where it came from, why we collected it, who we disclosed it to, and get a copy of the specific information we hold
- Delete personal information we collected from you, with some exceptions (for example records we must keep by law)
- Correct inaccurate personal information
- Opt out of the sale or sharing of your personal information (we do not sell or share)
- Limit use of sensitive personal information (we do not use it in ways that trigger this right)
- Non-discrimination: we will not deny you service, charge you a different price, or give you a lower quality of service because you used your rights
How to make a request
Email [email protected] or call or text (818) 809-6743. Please say that it is a privacy request, which right you want to use, and how to reach you. We cannot take requests by any other channel unless we tell you otherwise.
Verification. To protect your information, we will need to confirm it is really you. We will usually ask you to confirm details we already have, such as the email or phone number you used and the property or project you contacted us about. We will not ask for more than we need, and we will use what you give us only to verify your request.
Authorized agents. You may use an authorized agent to make a request for you. We will ask for written proof that you gave permission, and we may still need to verify your identity with you directly.
Timing. We will confirm receipt within 10 business days and respond within 45 days. If we need more time (up to another 45 days), we will tell you why. The information we give you will cover the 12 months before your request, and longer where the law or our records allow. There is no fee unless a request is clearly excessive or repeated.
If we deny a request, we will explain why.
California "Shine the Light"
California Civil Code section 1798.83 lets California residents ask which personal information a business shared with third parties for their direct marketing. We do not share personal information with third parties for their direct marketing purposes.
7. How long we keep information
See the retention column in Section 6. In general, we keep inquiries, customer and project records until you ask us to delete them, and we keep them for business, tax, licensing and warranty reasons. You can ask us to delete your information at any time, subject to the legal exceptions above.
8. Data security
We take reasonable steps to protect your information. The website is served over an encrypted connection (HTTPS), form submissions are sent to our office over encrypted connections, and access to our inbox is limited to people who need it, and the office email account is protected with two-factor login. No website or email system is completely secure, so we cannot promise absolute security. Please do not send highly sensitive information by email or through the website.
9. Children's privacy
Our website is for property owners, managers and businesses. It is not directed to children under 13, or to minors under 16, and we do not knowingly collect personal information from them. If you think a child has sent us personal information, contact us and we will delete it.
10. Links to other sites
Our website may link to other sites, such as manufacturer or social media pages. We do not control them and are not responsible for their privacy practices. Please read their policies.
11. Changes to this policy
We may update this policy from time to time, for example if we change our analytics or other tools. The "Last updated" date at the top shows when it last changed. If we make a significant change, we will post a notice on the website.
12. Contact us
Questions, requests or concerns about this policy or your information:
- Gbit Tech LLC
- California C-7 contractor license #1050088
- Email: [email protected]
- Phone or text: (818) 809-6743