TribeROI Privacy Notice
Applies to: the TribeROI website at triberoi.com
Version: 1.3
Effective: 7 October 2026
Last updated: 4 October 2026
Scope of this notice
This notice covers the triberoi.com website only.
The TribeROI application at app.triberoi.com is a separate service, hosted separately, with a separate database and, apart from Google Analytics, separate providers. It has its own privacy notice and its own terms, and nothing in this document describes it.
The one thing the two share is Google Analytics. They use the same Google Analytics property, and its cookies are set for triberoi.com and every subdomain of it, so the application's sign-in page can recognise a browser that has visited this site. Section 4 explains what that means for your cookie choice.
1. Who we are
TribeROI Inc
971 US Highway 202N, Suite N
Branchburg, New Jersey 08876
United States
For anything in this notice, write to privacy@triberoi.com.
We are the controller of the personal data described here.
2. What we collect
2.1 When you apply to be a design partner
The design partner form is the only form on this website. It asks for your name, email address, company, industry, community size, the platforms your community runs on, and a short description of your biggest measurement problem.
The form also contains a hidden field used to catch automated spam submissions. It is not visible to you and holds nothing about you.
2.2 When you browse the site
If you have agreed to analytics, or you are outside the regions where we ask, Google Analytics records the pages you view, your screen size, browser and device characteristics, your language, how far you scroll, and identifiers that let it recognise a returning browser and group your visit into a session.
Google uses your IP address only to work out roughly where you are, and then discards it. For visitors in the EEA, the UK and Switzerland, the IP address is dropped before it is written to any log and is never stored against your visit. The location lookup happens on servers in your own region.
Our hosting provider records standard server logs for every request, which include IP addresses. These exist so the site can be operated and defended against abuse.
2.3 What we do not collect
This website has no accounts, no login, no registration, no usernames and no passwords. It takes no payments and sells nothing. We receive no personal data about you from third parties, and we run no newsletter or mailing list.
We do not use your data to make automated decisions about you, and we do not build profiles of you.
3. Why we use it, and on what legal basis
| What | Why | Legal basis |
|---|---|---|
| Design partner application | To read your enquiry, reply to it, and talk to you about whether we are a fit | Our legitimate interest in responding to an enquiry you started |
| Analytics | To understand which pages are read and how people find us | Your consent, where we ask for it. Where we do not ask, you can switch it off at any time from the footer of any page |
| Server logs | To keep the site running, diagnose faults, and prevent abuse | Our legitimate interest in operating a secure website |
You can object to anything we do on the basis of legitimate interests. Write to privacy@triberoi.com and we will stop unless we have compelling grounds to continue.
We send no marketing email. There is no mailing list, no newsletter, and nothing to unsubscribe from. If we reply to your design partner application, it is a person writing back about your enquiry.
4. Cookies
We set four cookies. This is the complete list.
| Cookie | Purpose | When it is set | How long it lasts |
|---|---|---|---|
cc_cookie | Remembers your cookie choice so we do not ask again | When you answer the banner | 6 months |
tr_region | Records whether your connection is in a region where we ask before setting analytics cookies. Holds only "eu" or "row" and identifies nobody | On page load | 24 hours |
_ga | Google Analytics. Recognises a returning browser | After you agree, in the EEA, UK and Switzerland. On page load elsewhere | 13 months |
_ga_T086H9P136 | Google Analytics. Groups your visit into a session | Same as above | 13 months |
How analytics consent works. If you are in the European Economic Area, the United Kingdom or Switzerland, no analytics cookie is set until you agree. If you decline, Google receives only a signal that a page was viewed, with nothing identifying you, and no cookie is stored.
Elsewhere, analytics loads when the page does. Wherever you are, the Cookie settings link in the footer of every page lets you switch analytics off, and doing so deletes both Google Analytics cookies.
Shared with the application. Both Google Analytics cookies are set for triberoi.com and every subdomain of it, including app.triberoi.com, and the application's sign-in page uses the same Google Analytics property. Your choice here applies to this website only. The application does not read it, and outside the EEA, the UK and Switzerland its sign-in page sets the Google Analytics cookies again. The application's privacy notice explains how to stop that.
We store nothing else on your device. No local storage, no session storage, no tracking pixels, no advertising cookies.
The full cookie notice is at triberoi.com/cookies.
Do Not Track and Global Privacy Control. We do not act on these browser signals. Use the Cookie settings link instead, which does work.
5. Who else is involved
| Provider | What they handle | Where |
|---|---|---|
| Netlify | Hosts the website and stores design partner applications | United States |
| Google Analytics, and the Workspace mailbox that receives a copy of your application | United States | |
| Sanity | Stores our blog content, which we fetch while building the site rather than while you read it. Your browser does not contact Sanity | Norway |
Netlify and Google process data under written data protection agreements with us. Sanity publishes a data processing addendum covering its service.
The only third party your browser contacts is Google, for analytics. Everything else on this site, including images and fonts, is served from our own domain. Both Google hostnames are contacted on every page load; whether a cookie is set, and whether your visit is identified at all, depends on your consent as described in section 4.
We do not sell or share your personal data, and nobody buys advertising from us.
6. Where your data goes
Netlify and Google are in the United States, so data about you leaves the EEA, the UK and Switzerland when you use this site.
Sanity is a Norwegian company and stores our content in Belgium, inside the EEA. Your browser does not contact Sanity, so no data about you goes there.
Those transfers are covered by the European Commission's Standard Contractual Clauses, incorporated into our agreements with Google and with Netlify, together with the UK Addendum where it applies. You can ask us for details at privacy@triberoi.com.
7. How long we keep it
| Data | How long |
|---|---|
| Design partner applications | While the conversation is live, and deleted once it is not. In any case no longer than 24 months from our last contact with you |
| Server logs | Held by our hosting provider. They publish no retention period for traffic logs, and we export them nowhere |
| Google Analytics data | 14 months |
If you ask us to delete your application sooner, we will.
8. Your rights
You can ask us to:
- Give you a copy of the personal data we hold about you
- Correct anything that is wrong
- Delete it
- Restrict what we do with it
- Send it to you in a portable format, or to someone else
- Stop processing you object to
- Withdraw consent to analytics, at any time, from the footer of any page
How to ask. Email privacy@triberoi.com. We will confirm we have your request within five working days and answer within 30 days. If it is complicated we may take longer, and we will tell you why before the 30 days are up.
How we check it is you. We will normally reply to the email address we already hold for you. If you write from a different address, we will ask you to confirm from the one on record before we act.
One thing these rights cannot reach: analytics. We hold nothing that ties an analytics record to you. The identifier Google Analytics uses lives in a cookie in your own browser, we never see it, and we never join it to your form submission or to anything else about you. So if you ask us for a copy of your analytics data or ask us to delete it, there is nothing for us to look up. We would rather say that than imply otherwise.
Your analytics controls are in your own hands instead, and all of them work: decline when we ask, switch analytics off from the footer of any page at any time, clear your cookies, or install Google's browser opt-out add-on.
Complaints. Tell us first and we will try to fix it. You can also complain to a data protection authority: in the EEA, the one where you live, work, or where the problem happened; in the UK, the Information Commissioner's Office.
9. How we protect it
The site is served only over HTTPS, and browsers are instructed to refuse an unencrypted connection. We set browser security headers that limit how the site can be framed, how content types are interpreted, how much of a URL is passed to other sites, and which device features pages may request.
The website is entirely static. It has no database, no login, and no application code running on a server, which removes most of the ways a website is attacked.
10. Children
This is a business website and it is not aimed at children. We do not knowingly collect personal data from anyone under 16. If you think we have, write to privacy@triberoi.com and we will delete it.
11. Changes
We will post any change here and update the date at the top. If a change matters, we will say what it was.
12. Contact
TribeROI Inc, 971 US Highway 202N, Suite N, Branchburg, New Jersey 08876, United States
What changed
Version 1.3, effective 7 October 2026: the TribeROI application is now at app.triberoi.com, not beta.triberoi.com. This notice now says that the website and the application share one Google Analytics property and its cookies.