What this site collects, which cookies it sets, and how to change your mind. Written by the person who built the site, in plain language, because the audience here reads these pages properly.
This site sets no analytics cookie until you allow it, keeps everything you type into a tool in your own browser, and collects personal data in exactly four places, all of them forms you fill in on purpose. There is no advertising, no cross-site tracking, and nothing is sold or shared for marketing. Google Analytics is used to see which pages and tools get used, and it runs cookieless unless you say otherwise.
Like every website, this one is served by a hosting company that writes a standard access log: the address a request came from, the page asked for, the time, and the browser type. That log lives on the host's servers in the United States, is used only to keep the site running and to investigate abuse, and is not combined with anything else.
Beyond that, page views are counted by Google Analytics. How much it can see depends on the choice you make in the banner, which is covered in the cookies section below.
The GTM Alignment Diagnostic, Founder Diagnostic, Budget Scoping model, Pipeline Coverage Calculator, Win Report Builder, Building a Marketing Team comparator, Hiring Scope Builder and Event ROI Planner all compute in your browser. The revenue targets, win rates, headcount plans and everything else you enter stay on your device. The Excel and PDF exports are generated there too, so the file you download was never on a server.
A few tools use your browser's own storage so you do not lose work between visits. That is storage on your device, not a cookie, and it never travels to the site:
Clearing your browser's site data for christinecastro.com removes all of it. Analytics records that a tool was used, which mode it was in, and that an export was made. It does not receive the contents of the tool.
Everything else on this site can be used without telling me who you are. These four forms are the exception, and each one exists so I can do something you asked for.
You give a first name, last name, email address, and the filters you want the daily email built from: functions, seniority, regions, workplace, keywords, investors. The subscription is confirmed opt-in, so nothing is sent until you click the link in the confirmation email. Every digest carries a one-click unsubscribe, which removes you immediately.
The subscriber list is held on the site's server and mirrored to a Google Sheet I use to manage the list. Your IP address is not stored; a one-way hash of it is kept to limit abuse of the signup form and cannot be turned back into the address.
You give your name, email, company, what the request is about, and optionally how you found the site. The request is emailed to me and appended to a log on the server so I can find it again. Because this form is the one most exposed to automated abuse, the requesting IP address is stored with it.
You give a term, a definition, a category, and an email address if you want credit or a reply. Suggestions are held for review and are not published until I have edited them. A one-way hash of your IP address is kept to limit abuse.
You give a company, title, location and posting link, with notes and an email address as optional fields. The role is added to the tracked dataset after review; the email is used only if I need to ask about the submission. A one-way hash of your IP address is kept to limit abuse.
Booking time through the calendar link on the contact and Work With Me pages takes you to Calendly, which has its own privacy terms. Nothing about the booking comes back to this site.
This site runs Google Analytics through Google's consent mode. Until you make a choice, and whenever you decline, Analytics runs in a cookieless state: it can count that a page was loaded and that a tool was used, but it sets no cookie and keeps no identifier that connects one page view to the next or one visit to another. Choose Allow analytics and Google sets its normal cookies, which let it tell a returning visitor from a new one and see which pages were read in a single visit.
Here is the full list. There is nothing else.
| Cookie | Set by | Purpose | Lasts | Needs consent |
|---|---|---|---|---|
| cc_consent | This site | Records the choice you made in the banner so it is honoured on every page and the banner does not come back. | 1 year | Necessary |
| _ga | Google Analytics | A random identifier that lets Analytics tell a returning visitor from a new one. Set only after you allow analytics. | 2 years | Yes |
| _ga_Y90PKDR3DB | Google Analytics | Keeps the state of the current visit for this site's Analytics property. Set only after you allow analytics. | 2 years | Yes |
A Google Tag Manager container also loads on each page. It reads the same consent state, so anything it runs is held to the same rule: nothing that stores an identifier fires until you allow it. Analytics data is retained by Google for no longer than 14 months and is not shared with other Google services for advertising.
Changing your mind is one click: the Change your cookie choice control at the top of this page reopens the banner. Choosing Decline after having allowed analytics also deletes the two Google cookies straight away, rather than leaving them to expire.
Loading a page here makes your browser fetch a few things from other companies. Each of them sees your IP address and browser type in the ordinary course of serving a file, and nothing more from this site:
On the server side, digest subscriptions are mirrored to Google Sheets, and role submissions are reviewed there too. Nobody else receives personal data from this site. There are no data brokers, no enrichment services, and no advertising platforms.
You can use nearly all of this site without identifying yourself, and you can decline analytics with no loss of function. If you have given me personal data through one of the forms, you can ask to see it, correct it, or have it deleted by emailing christine@christinecastro.com from the address you used. I answer within 30 days and usually within a couple of business days. Digest subscribers can remove themselves instantly with the unsubscribe link in any email.
If you are in the European Economic Area, the United Kingdom or Switzerland, the rights above are the ones the GDPR and the UK GDPR give you, and you also have the right to complain to your national supervisory authority. If you are a California resident, this page is the disclosure the CCPA asks for: this site does not sell or share personal information, and the categories collected are the ones described above.
This site is not directed at children under 16 and does not knowingly collect their data.
When something material changes, the date at the bottom moves and a line is added to the log below. The page describes what the site does today, not what it might do later.
No analytics cookie is set until you choose Allow analytics. Before that, and if you decline, Analytics runs cookieless and records only aggregate counts. The single cookie set without asking is cc_consent, which records your choice so the banner does not reappear.
They stay in your browser. The tools compute on your device and the exports are built there. Nothing you enter into a tool is sent anywhere unless you separately fill in a form.
Because the tools are the point of the site and I need to know which ones get used, which modes people pick, and where they leave. That is the entire use. Nothing here is sold, and there are no ads to optimise.
Use the Change your cookie choice control at the top of this page. It reopens the banner. Declining after having allowed analytics also removes the Google cookies that were set.
Email christine@christinecastro.com from the address you used. Digest subscribers can also use the unsubscribe link in any email. Requests are handled within 30 days, usually much faster.
No. Digest subscriptions, resume requests and form submissions are seen by me alone. They are not passed to any company I work with or apply to.