Privacy Policy

About This Policy

arvinstewart.com provides Excel resources, marketing and reporting tools, educational content, Makona and Campaign Workspace. This policy explains local processing, optional storage, sharing, and information handled by the site and its service providers. The Terms of Use also apply to these services.

Campaign Files and Local Processing

During ordinary Campaign Workspace analysis, CSV, XLS and XLSX source files are processed in your browser, not uploaded to our servers. Report values, normalized Master Data, derived fields, quality results and dashboards may remain in browser memory during the session. Unsaved session data is not a durable backup.

The tools may map, match, normalize, combine, parse, split, transform, derive, aggregate and calculate information using your settings. Data Enrichment can create reporting dimensions from structured campaign, creative, placement or similar names, classifying parsed parts into fields using the delimiter and mapping rules you choose. Downloads are generated locally.

Local processing does not mean information can never leave your browser. Creating a shared dashboard is a separate action that sends the selected snapshot described below. Site analytics and technical requests are also distinct from report processing.

Makona / Campaign Operations

Campaign Operations stores local client accounts, advertisers, brands, relationships, opportunities, plans, strategy sections, tracking codes, orders, allocations, flights, Line Items, creative requirements and deliverable evidence, custom-field definitions and values, saved sheet views, naming settings, expected payment assignments, manual transactions, exception reviews and activity history on your device in a separate browser database. It does not mix these records with Campaign Workspace report rows or sync them to our servers. Clearing browser/site data or starting a new blank sandbox can remove these records. This sandbox is not a financial system of record. Operations Backup creates a local JSON download for restoration; importing it creates a separate context. CSV and Excel business exports are also generated locally and are distinct from application backups. Keep downloaded backups securely yourself.

Card fields accept identifying metadata such as a nickname, issuer, network and last four digits. Do not enter full card numbers, security codes, PINs or bank credentials, including in notes. Client names, budgets, merchants, amounts and card metadata may still be confidential. If you explicitly choose a session-only sandbox when device storage is unavailable, its records are lost when that session ends.

Campaign Operations usage events are designed to include only coarse counts and predefined feature categories. They exclude client, advertiser, brand and campaign names, tracking codes, narrative content, order IDs, Line Item IDs, custom-field names and values, generated names, card digits, merchants, amounts, budgets, notes and sandbox names. Site analytics and advertising requests remain separate from these local records.

Makona Practice

The available Luma & Moss scenario has Creative Deliverables and fictional platform-report matching tasks in a separate browser-local context. It is not added to your own local workspace or Campaign Workspace and is not synced to our servers. The report-matching task does not save spend, confirm delivery, or reconcile finance. Clearing site data can remove practice progress. These tasks do not provide guided scoring or a completion credential.

Earlier Campaign Operations Lab attempts may remain in this browser from the previous experience; this scenario does not import or alter them. Practice usage events use predefined categories and exclude entered names, notes, financial values and tracking codes.

Optional Saved Workspaces

Save Workspace is optional. It uses IndexedDB, a database maintained by your browser on your device. After you choose to save, changes to that saved Workspace may be saved automatically. Workspace contents are not synced to our servers or other devices.

Saved Workspace records can include:

• Normalized values from mapped report fields, with source sheet and row references.
• Source column headers, field mappings, campaign match fields and quality-warning counts.
• Enrichment recipes, including parsing rules and derived-field definitions.
• Dashboard configuration, selected Workspace view and related interface settings.
• A Workspace name, local identifier, save dates and summary counts.

Original uploaded file bytes, uploaded filenames, complete workbook objects and unselected sheets are not saved. Effective enriched rows, dashboards, lineage and exception views are rebuilt from the saved normalized data and rules rather than stored as separate copies.

Delete or Remove Saved Copy removes that Workspace's saved browser records; an open session can remain available. This does not revoke separately shared dashboards or delete downloaded exports or backups. Clearing site data, browser storage eviction, private browsing or device changes may remove or make local records unavailable.

Other Browser Storage and Cookies

Makona uses localStorage to remember your default Practice or Own Data view and the identifier of your last opened local context when device storage is available. These preferences are separate from your Practice usage measurement choice, which stays only in tab memory and resets on reload.

Saved setups use localStorage for smaller configuration records: mappings, normalized column names and header signatures, match fields, enrichment rules and dashboard preferences. They exclude report rows, uploaded filenames and active filters. Names and labels you enter are part of the saved configuration and may themselves contain confidential information.

My Shared Dashboards uses separate localStorage records for share links, titles, dates and private management access, not the dashboard snapshot itself. Clearing this storage can remove your ability to revoke a link from that browser; its expiration still applies. Commercial pages may use sessionStorage for campaign attribution such as UTM parameters during the browser session.

These browser records differ from session-only working memory and from cookies or identifiers used by analytics and advertising services. A locally saved Workspace is not an advertising cookie. Browser settings control site storage and cookies, but deleting them does not delete server-side snapshots or recipient copies.

Sharing a Dashboard

Previewing a share is local. When you explicitly select Create Share Link, the selected dashboard snapshot is sent to server-side infrastructure. It can contain the dashboard title, selected aggregate metrics and calculated KPIs, charts and aggregate table groups, source/row/group counts, and an optional date range. Group names and custom titles can be included if you choose; otherwise the shared labels and titles are replaced with generic ones.

The snapshot builder is designed to include only the configured, previewed information. Hidden metrics are excluded, including charts that require them. Sharing does not upload original source files, raw Master Data, mappings, enrichment recipes, provenance, exception records or a local Workspace backup. Review the preview carefully: selected names, dimensions and aggregate results may still be confidential.

Anyone who obtains the link can view it while it is available; recipients are not required to sign in. Links currently offer 7-, 30- or 90-day expiration. Revoking a link deletes its stored snapshot and stops future retrieval through the application, but cannot erase a view already loaded, screenshots, downloads or other recipient copies.

Server-Side Storage

Hosted sharing uses the configured Upstash Redis service for snapshots and necessary metadata, including a share identifier, creation and expiration dates, and information needed to authorize management actions. Short-lived abuse-prevention records support request limits. Hosting and storage providers may separately process technical access and security information. This storage is separate from browser-local Workspaces.

When optional Makona Practice measurement is enabled, Upstash Redis also stores short-lived abuse-prevention counters, not analytics event payloads or workspace records. These counters may share the dashboard service's database, using separate record keys. Separate keys do not mean separate provider accounts, access credentials or service capacity.

Information You Submit Through Forms

Article notification forms collect your email, the requested article and associated context. Excel question forms collect your question, required email, optional example link, relevant Answer context and any separately selected email or advertising/audience permissions. Submission and consent dates may also be recorded.

Business inquiry and custom-function request forms collect contact details and the workflow, company, example links or requested outcomes you provide. Privacy Choices collects your email and requested withdrawals. These forms send information to server-side receivers to respond, process the request, maintain business or consent records and respect your preferences. Submitting a question or inquiry does not by itself give promotional email or advertising/audience permission.

Only select, process, save, export or share information you are authorized to use. Campaign names, column names, account details, client data and derived dimensions can contain confidential or personal information. We do not verify your ownership or authority to use the data you provide.

Analytics and Technical Information

The main site uses Google Tag Manager and Google Analytics 4 to measure page use and feature activity. The site and its providers may process requested URLs, referrers, IP addresses, browser/device details, timestamps, identifiers and interaction events for delivery, measurement, reliability and security. Analytics services may use cookies or similar technologies, depending on their configuration and your browser settings.

Campaign Workspace telemetry is designed to send feature categories, bounded counts and row-volume ranges rather than filenames, campaign or client names, raw report rows, Master Data contents, parsed name values, custom field labels, recipe names, delimiters or exact transformation values. It does not collect raw source column headers for mapping improvement. Saving a setup or Workspace locally is separate from sending telemetry.

Makona Practice usage measurement is optional and off until you choose Allow Practice usage. When configured, it sends only fixed fictional scenario, module and task categories through this site's server to Google Analytics. Own Data workspaces are excluded. Workspace records, names, record IDs, answers, uploaded files and financial values are not included. No Google scripts run in the Makona workspace.

A random identifier is held only in this tab's memory. It is replaced on a later measured action after 30 minutes and cleared when you turn measurement off or leave Practice. Your consent choice stays in tab memory until you turn it off, reload or close the page; it is not saved in a cookie or browser database. Switching to Own Data stops measurement and clears the identifier, but returning to Practice in the same tab can resume your earlier choice with a new identifier. Activity before consent is not queued or sent later.

The server transforms the identifier before sending it to Google; this is limited, pseudonymous usage measurement, not anonymous or complete visitor tracking. Turn off is available in Practice usage measurement on every Makona module. It stops new requests but cannot recall events already sent. Browser Global Privacy Control and Do Not Track signals also disable this optional Makona measurement; this does not describe a site-wide cookie or advertising consent control.

The relay does not forward your IP address, browser headers or page URL to Google. Hosting infrastructure still processes request metadata, and Google receives a request from our server. To limit abuse, the relay uses hashed identifiers derived from the requesting IP address and temporary tab identifier. In Upstash Redis, these network and session counters are set to expire 60 seconds after creation; a site-wide daily counter is set to expire 24 hours after creation. These are counter lifetimes, not deletion deadlines for events already sent to Google. Analytics event payloads are not stored by the relay. Provider logs and Google-held data have separate retention settings and practices.

These restrictions describe the application's event design, not a guarantee that every third-party request is free of information. The separate shared-dashboard viewer does not load the main site's Google analytics or advertising scripts, although hosting and snapshot access requests still occur.

Advertising

The main site loads Google AdSense technology. Whether ads appear and whether they are personalized depends on publisher and Google settings, eligibility, location and applicable choices. Google and its partners may use cookies, device identifiers, IP addresses and similar information to deliver or measure ads, limit fraud and, where permitted, personalize advertising. Loading advertising technology can generate requests even when an ad is not visible.

Campaign Workspace's analysis and telemetry are designed not to send campaign report contents to advertisers. Some forms offer a separate, optional permission to use your email and site engagement for advertising/audience activity supporting the site and selected partners or clients. Raw contact information is not offered as a standalone mailing list or through public audience marketplaces.

See how Google uses information from partner sites and Google's advertising controls. Email-based Privacy Choices does not act as a browser cookie or advertising consent manager.

Service Providers

• Vercel: website hosting and server-side endpoints, including delivery and technical/security processing. Vercel privacy notice.
• Sanity: published content, images and the authenticated administrator Studio. It is not Campaign Workspace row storage. Sanity privacy policy.
• Google: Tag Manager, Analytics and AdSense on the main site; Analytics also receives the limited, opt-in Makona Practice events through our server when that feature is enabled. No Google scripts run inside the Makona workspace. Google privacy policy.
• Upstash: configured server-side dashboard snapshot storage and necessary technical records when hosted sharing is available, plus short-lived abuse-prevention counters when Makona Practice measurement is enabled. The analytics counters do not store event payloads. Upstash privacy policy.
• Configured form receivers: server-side storage or automation services receive the form information described above when those endpoints are enabled.

Providers process information to deliver their services under their applicable terms and privacy policies. External links and downloads from other sites are also subject to those sites' practices.

Retention

• Unsaved analysis: working data stays in session memory and can be cleared by starting a new analysis or closing/reloading the session.
• Local Workspaces and setups: remain in that browser until deleted or removed by site-data clearing or browser/device storage behavior. Local storage availability is not guaranteed.
• Shared dashboards: application access ends on expiration or revocation. Stored snapshots are removed through expiration or deletion; provider cleanup and any separate operational records follow applicable provider practices.
• Makona Practice measurement: the consent choice and temporary identifier are not persisted beyond the page session. The identifier is replaced on a later measured action after 30 minutes and cleared on opt-out or leaving Practice. Own Data is not measured.
• Makona analytics abuse counters: network and session counters in Upstash are set to expire 60 seconds after creation; the site-wide daily counter is set to expire 24 hours after creation. These limits do not apply to provider logs or Google Analytics event retention.
• Analytics, advertising and technical logs: retention depends on the configured service and provider settings; there is no single site-wide retention period.
• Forms and preferences: retained as needed to respond, deliver requested notifications, deduplicate requests, maintain business/consent records, apply withdrawals and meet applicable obligations.
• Downloads and recipient copies: remain under the control of whoever holds them; deleting browser records or revoking a link does not retrieve those copies.

Your Choices

For Makona, use your existing workspace tab: expand Practice usage measurement and select Turn off. No email request is needed. This stops future Practice measurement and clears the temporary identifier, without deleting your workspace or recalling events already sent. Reloading requires a fresh opt-in. Own Data workspaces are excluded regardless of that choice.

Use Privacy Choices to request withdrawal of promotional email or advertising/audience permission independently. That form does not change Makona's in-tab measurement choice. Withdrawing these permissions does not prevent ordinary replies to questions or messages you request, and does not automatically erase records reasonably retained for consent, compliance or operational purposes. Requests may take time to process; re-consent requires a later affirmative action.

You can keep a Workspace session-only, delete a local saved copy, revoke a dashboard share through its management controls, and manage cookies/site storage through your browser. These are separate controls. Clearing local storage does not itself revoke a share and may remove the management access needed to do so.

International Visitors and Rights

The site is operated from the United States. Providers may process information in the United States or other countries where they or their subprocessors operate. Your privacy rights vary with your location and applicable law; this policy does not limit rights you may have under that law.

Children

This site is intended for business, technical and educational audiences. It is not directed to children and does not knowingly collect personal information from children.

Security

Local processing reduces unnecessary transmission but does not remove risks from shared devices, browser access, extensions, downloads or links you distribute. Reasonable safeguards support site operation and sharing, but no storage system or transmission is risk-free. Protect your device and review information before sharing it.

Policy Updates

This policy may change as the services and their data practices change. Updates will appear here with a revised date.

Contact

For privacy questions or data-rights requests, email privacy@arvinstewart.com. Please describe your request without sending client records, workspace backups, passwords or other sensitive information.

The Privacy Choices form supports email-marketing and advertising/audience withdrawal requests. Makona Practice measurement can be turned off directly in your workspace as described above.