Leads stay separate
Assessment and content-request contact details are stored only for owner follow-up. They are not sent to AI providers, analytics, source intelligence, or public content.
Analytics is off by default
Production analytics remains unavailable until a server-side human-attestation adapter is configured. Consent alone is not treated as human proof. When unavailable, the browser sends no requests to /api/events or /api/events/consent.
Minimal anonymous events
If the owner later enables verified consent, events contain a closed route category, event name, locale, enumerated metadata, and server time only. We do not store raw IP addresses, user agents, cookies, session IDs, device IDs, paths, slugs, content IDs, or contact details. Raw events are pruned after 180 days; privacy-preserving daily aggregates may remain.