What we collect, and why

GeoPoliticus Advisors LLC is a principal-led boutique consulting firm based in Washington, D.C. We are the "we" and "us" throughout this document. The site you are reading is operated by us directly. When this policy refers to "you," it means anyone visiting the site or submitting information through it.

Information you submit

Contact form: name, email, phone number, organization (optional), a brief description of your challenge, and how you heard about us (optional). Resource downloads (checklists, playbook, engagement brief): name, organization, email, phone number, and your role (optional), which we use to send you the requested PDF and to follow up. GeoForce Modernization Scorecard: name, firm or organization, email, phone number, your industry, your organization's size, and your answers to the ten assessment questions. Direct correspondence: anything you send us via email or other channels, including any attachments.

You choose what to share. The scorecard works without a real name or firm if you prefer, but we won't be able to deliver the PDF or follow up if the contact details aren't reachable.

Information collected automatically

Server logs: when you visit a page, our hosting provider records the request: IP address, user agent (browser and OS), referring URL, the page you requested, and the timestamp. This is standard for any web server. Analytics: we use Google Analytics 4 (GA4) to understand traffic patterns, in aggregate. We have IP anonymization turned on, which truncates your IP before it reaches Google's servers. GA4 tells us which pages get read and roughly where visitors are coming from — it doesn't tell us who individual visitors are.

We use the information we collect to: respond to your inquiry or deliver the scorecard PDF you requested; follow up about a potential engagement, if you've indicated interest in one; understand which pages are working and which aren't (aggregate analytics); defend the site against abuse, spam, and security threats; and comply with our legal obligations.

We do not use your information for advertising. We do not sell, rent, or trade contact details. We do not use it to train AI models, ours or anyone else's.

We share information sparingly, only with service providers we need to operate the site: Google (Analytics & Fonts): aggregate analytics data, plus your IP when your browser loads the fonts used on this site. Opalstack: our hosting provider. They route requests to our server and the outbound email through their relay. Cloudflare: our DNS provider, which sees DNS lookup traffic for the domain.

We'll also share information when we're legally required to (a valid subpoena or court order, for example), or when sharing is necessary to defend our rights, protect someone's safety, or prevent fraud. We are not in the business of selling personal information, and we do not share information with data brokers, marketing networks, or advertising platforms.

The site uses a small number of cookies: Google Analytics (_ga, _ga_PXR3ZEW4TF): set by GA4 for measurement. Expires in two years. We have IP anonymization on. If you visit from the EEA or the UK, analytics is off by default — we ask for your consent first (via a banner) and enable it only if you accept; declining keeps it off. To withdraw consent later, clear this site's stored data or email us. You can also opt out anywhere by installing the Google Analytics Opt-Out Browser Add-On, or by using any browser-level "Do Not Track" or privacy mode. Preview gate session (gp_preview): only set on preview.geopoliticus.com when a principal logs into the staging environment. Expires when the browser closes. Not relevant to most visitors.

We don't use advertising cookies, retargeting pixels, social-media tracking pixels, session replay, or fingerprinting.

Inquiry messages and scorecard submissions: kept indefinitely in our email archive, so we can pick up a thread you started years ago. Tell us to delete it and we will. Server logs: retained for up to ninety (90) days for operational and security purposes, then aggregated or deleted. Google Analytics data: retained for the GA4 default of fourteen (14) months at the event level.

Wherever you live, you have the right to: ask us what we have on file about you; ask us to correct anything that's wrong; ask us to delete it; opt out of analytics (see above); and receive a copy in a portable format.

If you're in the EU, UK, or California, you have additional formal rights under the GDPR, UK GDPR, and CCPA/CPRA respectively. We honor those rights the same way: email us, tell us what you want, and we'll do it within the timeframe your jurisdiction requires (usually 30–45 days). We won't penalize you for exercising any of these rights.

For California residents specifically: we do not sell or share personal information for cross-context behavioral advertising, so there's no "Do Not Sell or Share" link to provide — we simply don't do those things.

We are based in the United States, and the servers that host this site and process inquiries are also located in the United States. If you submit information from outside the U.S., that information is transferred to the U.S. For visitors in the EU/UK, we rely on the European Commission's Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework where applicable.

This site is intended for business contacts at professional services organizations. It isn't directed at children, and we don't knowingly collect information from anyone under sixteen. If you believe a child has submitted information here, email us and we'll delete it.

If we change this policy, we'll update the "Last updated" date at the top and post the new version here. Material changes will be flagged at the top of the page for at least thirty days.

Privacy requests & questions — Amy Lynn (Aly) Kedron, JD, PhD, GeoPoliticus Advisors LLC, Washington, D.C. Email us or use the contact form on the home page.

This policy is provided for transparency and is not a contract. We've tried to write it plainly. If anything is unclear, reach out through the contact form — we'd rather answer the question than have you guess.