What we collect, and what we deliberately do not.

This page covers the Citon website and the Gap Report request that runs from it. The operating entity is not yet named here, and will be before this site is public.

The Gap Report form asks four questions, and it is worth listing all four rather than summarising them:

• Your work email. Where the report and the call invite go.
• Your company domain. The measurement is anchored to it.
• The company an AI assistant names first in your category. This one asks you to name a third party, and often that party is a competitor. We use the name as an input to the measurement, which is the only reason it is asked for. We do not tell them, and we do not publish it.
• Your category and the questions your buyers ask. These become the queries we run.

We use those four things to run the report and to talk to you about it. Nothing else.

We do not sell it, rent it, or pass it to a data broker, an enrichment service or an advertising network. We do not add you to a list you did not ask to be on.

No analytics. There is no analytics package, no tag manager and no advertising pixel on this site. We do not know how many people read this page.

No cookies from us. This site sets no cookies of its own, which is why you were not asked to accept any.

Being honest about this is the point of the section. Loading any page makes your browser fetch files from the hosts below, and an HTTP request necessarily carries your IP address to whoever answers it. That happens whether or not we want it to, and it is not something a policy can opt you out of.

• fonts.googleapis.com, which serves the stylesheet that describes two of the typefaces this site renders in.
• fonts.gstatic.com, which serves the font files for those two typefaces, and is reached because the stylesheet above points at it rather than because this site names it.
• stijndv.com, which serves the display typeface this site renders headings in.
• img.logo.dev, which serves the company logos shown in the diagrams, requested by domain name.

Each of those is a font or an image request. None of them receives anything you typed, and none of them is given an identifier we created for you. They are on the list because they see your request, which is enough to be worth telling you.

A Gap Report request and the report produced from it are kept while we are working with you and for twelve months afterwards, so that a later measurement can be compared against the baseline we took. After that we delete it. You can ask us to delete it sooner and we will, including the baseline, which means we lose the ability to prove a later result.

Ask and we will tell you what we hold, correct it, send you a copy of it, or delete it. We will not ask you to justify the request or route you through a form designed to make you give up.

If you are in the UK or the EU, the UK GDPR and the GDPR give you those rights as a matter of law rather than as a courtesy, and they also give you the right to complain to your data protection authority. Our lawful basis for handling a Gap Report request is the legitimate interest of responding to someone who contacted us about buying something.

A contact address for privacy requests is not published on this page yet. Until it is, use the Gap Report request on the home page and say what you need; it reaches the same people.

If we start collecting something we do not collect today, this page changes before that happens rather than after, and the date at the top changes with it. A privacy page updated in arrears is a disclosure that arrived too late to be one.