Privacy Policy

Ortheus Technologies, Inc. · ortheus.com · Updated 24 August 2026

Who we are

Ortheus Technologies, Inc. operates ortheus.com. This policy explains what we collect on that site, why we collect it, and who can see it. It is a description of current practice, not a marketing summary.

Questions or requests: info@ortheus.com. Last updated 24 August 2026.

What this site is doing

ortheus.com is a B2B marketing site. We run first-party visitor intelligence so we can see which companies and people look at our work, which pages they read, and how they arrived. That stack was activated in August 2026.

We do not run Google Analytics, a Meta pixel, Hotjar, or other advertising networks on the live site. We do not sell personal information. We do not use the data to advertise to you on other sites.

Information collected automatically

On most page views we record: the path you visited, the HTTP referrer, UTM campaign parameters (source, medium, campaign, term, content), your IP address, approximate location (city, region, country, latitude, longitude from Vercel), and your browser user agent. Known bot user agents are skipped.

The browser also sends device signals we hash into a fingerprint: timezone, language list, screen size and pixel ratio, platform, CPU core count, and touch support. The hash is stored — not the raw signals after hashing. The purpose is to recognize a returning visitor if cookies are cleared.

We resolve your IP to an organization or ISP. Today that lookup goes to ipwho.is. If we later add an ipinfo.io token, that service may be used instead. We store the organization name, a derived company label when the IP does not look residential, ASN, and whether we treat the visitor as high-value for internal alerts.

Cookies we set

orth_vid — a random visitor ID, kept for one year. This is how we stitch page views into one visitor.

orth_sid — a session ID, kept for 30 minutes of activity.

orth_utm — the last UTM parameters we saw, kept for 30 days.

orth_fp — the hashed device fingerprint, kept for one year.

orth_tid — if you opened a tracked link we sent, the link ID, kept for 90 days.

orth_defense — set only after a correct defense-briefs access code. It stores a hash of that code, not the code itself, for eight hours.

These cookies are first-party, HttpOnly, Secure, and SameSite=Lax. There is no cookie-consent banner on the site today. If you do not want this collection, do not use the site, or email us and we will delete what we can identify.

Information you give us

The contact form stores name, email, company, interest, and message, and links them to the visitor ID already on your browser. The form may also open a mail draft to info@ortheus.com on your device.

If you submit a name, email, or company, we treat that as an identification event: we attach it to your prior page views and may send an internal alert.

Tracked email links

We can generate a unique link on ortheus.com/t/… and send it in email. When that link is opened we record the click, attach the name, email, and company we stored on the link, and then send you to a page on ortheus.com. That is how a person we already know is connected to later browsing.

Person enrichment (when enabled)

The site can call Apollo, People Data Labs, or Clearbit with an email address to fetch name, title, company, LinkedIn URL, headcount, and revenue. Those keys are not required for the site to run. If they are not configured, we only keep what you typed and a company guess from the email domain.

As of this policy date those enrichment keys are not set in production. If we turn one on, this same use applies: identified contacts only, for our own business development.

Analytics and optional session replay

Vercel Analytics and Vercel Speed Insights run on every page. They measure traffic and performance for us as the site operator.

PostHog session replay can be turned on with a public project key. If it is on, PostHog may record page views and a video-like replay of the session. Form inputs are configured to be masked; other on-page text may be captured. That key is not set in production as of this policy date.

How we use the information

To understand which firms and people are looking at our work, and which pages they read.

To answer messages you send through the contact form.

To send internal alerts (Slack and/or email, if those are configured) when a visitor is identified, comes from an organization we treat as high-value, or views several pages in one session. A weekly digest can summarize visits, hot pages, and companies.

To unlock defense briefs for people who have an access code.

To operate, debug, and protect the site.

Who can see it

Authorized Ortheus operators, through an internal visitor dashboard at /admin/visitors. That dashboard shows page history, companies, identified contacts, locations, and tracked links.

Processors that host or look up the data: Vercel (hosting, edge location, Analytics, Speed Insights), Neon (Postgres database in the United States), ipwho.is (and ipinfo.io if we add a token). If we enable them: Apollo, People Data Labs, Clearbit, PostHog, Slack, and Resend.

We do not sell this information. We do not share it with advertising networks. We may disclose it if the law requires us to.

Where it is stored and how long

Page views, fingerprints, contact submissions, tracked-link metadata, IP enrichments, and alerts live in Neon Postgres. The application runs on Vercel.

There is no automated deletion schedule today. We keep records until we no longer need them for the purposes above, or until you ask us to delete what we can identify as yours.

Your choices

Email info@ortheus.com to ask what we hold, to correct it, or to delete it. Say the email address or company we should search for. We will remove matching contact records, tracked-link identity, and linked page views where we can find them.

You can also clear cookies in your browser. A new visitor ID and fingerprint may be created on the next visit unless you stop using the site.

The site is not directed at children. We do not knowingly collect information from anyone under 16.

International visitors

The site is hosted in the United States. If you visit from another country, your information is processed in the United States, including IP address, location, and any identity you submit.

Changes

If the collection or processors change, we will update this page and the date above. Continuing to use the site after an update means you are using the site under the revised policy.